Privacy Policy

Privacy Policy

Last updated: 21/6/26

This Privacy Policy explains how  ("Schedly", "we", "us"), collects and processes your personal data when you use Schedly.ai (the "Service").

We are the data controller for the personal data described below. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable EU law.

For any privacy question, contact us at info@schedly.ai .

---

Data you give us

- Account data: name, last name, email, and business/profile details.

- Billing data: billing name, address, country, VAT number, and transaction records. Card details are handled directly by our payment processor — we do not store full card numbers.

- Content: posts, captions, images, prompts, and other material you create, upload, or schedule.

- Communications: messages you send us (support, email).

Data from your connected social accounts

When you connect a third-party account (e.g., Instagram, Facebook, LinkedIn, X, TikTok, YouTube), we receive access tokens and data permitted by that platform — such as profile information, pages/channels you manage, scheduled or published posts, and basic analytics — in order to provide the Service.

Data we collect automatically

- Usage data: features used, actions taken, log data, device and browser type, IP address.

- Cookies & analytics: see Section 4.

---

| Purpose | Legal basis (GDPR Art. 6) |

|---|---|

| Create and manage your account, provide the Service | Performance of a contract |

| Process payments and renewals | Contract / legal obligation |

| Publish and schedule content to your connected accounts | Performance of a contract |

| Generate AI content from your inputs | Performance of a contract |

| Keep records for tax and accounting | Legal obligation |

| Secure the Service, prevent fraud and abuse, improve features | Legitimate interests |

| Send service and transactional emails | Performance of a contract |

| Send marketing emails | Consent or legitimate interest (with opt-out) |

| Analytics and advertising cookies | Consent |

You can withdraw consent or object to processing based on legitimate interests at any time (see Section 8).

---

Inputs you provide to our AI features (e.g., prompts, topics, content) are processed to generate output. Some processing may be carried out by third-party AI providers ([AI PROVIDER(S), e.g. OpenAI / Anthropic]) acting as our processors. We do not sell your data, and your content is not used to train third-party models except as permitted by those providers' terms and applicable law.

---

We use cookies and similar technologies to run the Service and to understand usage. These include:

- Essential cookies — required for login and core functionality.

- Analytics cookies — Google Analytics 4 (GA4), to measure usage and performance.

- Advertising cookies — Google Ads, to measure and optimize our campaigns.

Non-essential (analytics/advertising) cookies are only set with your consent through our cookie banner. You can change your preferences at any time via the cookie settings, and you can control cookies through your browser.

---

We share personal data only with:

- Payment processor (Stripe, PayPal) — to process payments.

- Hosting and infrastructure (Hostinger) — to operate the Service.

- Analytics and advertising (Google) — as described in Section 4.

- AI providers (Section 3).

- Social media platforms — to publish content you schedule, at your direction.

- Authorities or advisors — where required by law or to protect our legal rights.

These providers act as our processors under data processing agreements, or as independent controllers under their own policies (e.g., the social platforms). We do not sell your personal data.

---

When you use the Service to manage your own audience or connected accounts, you may act as the data controller for that data and we act as your processor. In that case our processing is governed by a Data Processing Agreement (available on request).

---

Some of our providers are located outside the EU/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses (SCCs).

---

Under the GDPR you have the right to:

- access your personal data;

- correct inaccurate data;

- erase your data ("right to be forgotten");

- restrict or object to processing;

- data portability;

- withdraw consent at any time (without affecting prior processing).

To exercise any right, email info@schedly.ai .

---

We keep your account data for as long as your account is active and for a reasonable period afterwards. Billing and tax records are kept for the period required by law. Content and connected-account data are deleted within a reasonable period after you delete them or close your account, unless we must retain them for legal reasons.

---

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and secure handling of access tokens. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

---

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

---

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide reasonable notice.

---