elymant.com

Effective Date: January 1, 2025 | Last Updated: April 29, 2025

Welcome to Elymant. We are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains how Elymant (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit our website elymant.com and use our digital marketing services and social media management platform (collectively, the “Services”).

By accessing or using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our Services.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

Register for an account (name, email address, password, company name, job title)
Subscribe to a paid plan or purchase services (billing address, payment card details processed via our secure payment processors)
Connect your social media accounts to our platform (OAuth tokens, account identifiers, profile data)
Contact our support team or fill in forms on our website
Participate in surveys, promotions, or marketing activities
Invite team members or sub-users to your account

1.2 Information Collected Automatically

When you use our Services, we automatically collect:

Log data: IP address, browser type and version, pages visited, time and date of access, referring URLs
Device information: hardware model, operating system, unique device identifiers
Usage data: features used, actions taken within the platform, session duration, click-stream data
Cookies and similar tracking technologies (see Section 7 for details)

1.3 Information from Third Parties

We may receive information about you from:

Social media platforms (Facebook, Instagram, Twitter/X, LinkedIn, TikTok, etc.) when you connect your accounts to our Services
Payment processors (e.g., Stripe) regarding transaction status
Analytics providers and advertising partners
Other users who invite you to join their Elymant workspace

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our Services and SaaS platform
Create and manage your account and authenticate your identity
Process transactions and send billing-related communications
Enable scheduling, publishing, and management of social media content on connected accounts
Provide analytics, performance reports, and insights on your social media campaigns
Enable collaboration features between team members and client workspaces
Send transactional emails (account confirmations, password resets, service updates)
Send promotional communications about new features, offers, and industry tips (you may opt out at any time)
Respond to your inquiries, provide customer support, and resolve disputes
Detect, prevent, and address technical issues, fraud, and abuse
Comply with legal obligations and enforce our Terms of Service
Improve, personalize, and develop our Services based on usage patterns and feedback

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal data includes:

Contract performance: Processing necessary to provide the Services you have requested
Legitimate interests: Improving our Services, preventing fraud, and ensuring platform security
Consent: Sending marketing communications or processing data for analytics purposes
Legal obligation: Complying with applicable laws and regulations

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

4.1 Service Providers

We engage trusted third-party vendors to assist in operating our Services, including cloud hosting providers, payment processors, email delivery services, analytics tools, and customer support platforms. These vendors process your data only on our behalf and under strict confidentiality obligations.

4.2 Social Media Platforms

When you connect social media accounts to our platform, data is exchanged between Elymant and the respective social media platforms (e.g., Meta, LinkedIn, Twitter/X) as authorized by you. We operate under the API terms of each platform.

4.3 Business Transfers

If Elymant is involved in a merger, acquisition, asset sale, or reorganization, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information where required by law, court order, government authority, or when we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our users or the public.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you our Services. You may request deletion of your account and associated data at any time (see Section 9). We may retain certain information for legitimate business purposes such as legal compliance, dispute resolution, and fraud prevention.

Specifically: account data is retained for the lifetime of your account plus 90 days after closure; billing records are retained for 7 years in compliance with financial regulations; anonymized analytics data may be retained indefinitely.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

TLS/HTTPS encryption for all data in transit
AES-256 encryption for sensitive data at rest
Secure OAuth 2.0 authentication for social media account connections
Role-based access controls limiting employee access to user data
Regular security audits and vulnerability assessments
Two-factor authentication (2FA) available for all accounts

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. The types of cookies we use include:

Essential cookies: Required for the platform to function (session management, authentication)
Analytics cookies: Help us understand how users interact with our Services (e.g., Google Analytics)
Preference cookies: Remember your settings and customizations
Marketing cookies: Used to deliver relevant advertisements (only with your consent)

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our Services.

8. Third-Party Links and Integrations

Our Services may contain links to third-party websites or integrate with third-party platforms. This Privacy Policy applies only to Elymant. We are not responsible for the privacy practices of third-party services and encourage you to review their privacy policies.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure (“Right to be Forgotten”): Request deletion of your personal data
Portability: Receive your data in a structured, machine-readable format
Restriction: Request that we limit how we process your data
Objection: Object to processing based on legitimate interests or for direct marketing
Withdraw Consent: Where processing is based on consent, withdraw it at any time
California Residents (CCPA): Right to know, delete, and opt out of the sale of personal information

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Children’s Privacy

Our Services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where required under GDPR.

12. Social Media Data and Connected Accounts

Our SaaS platform is designed to manage social media accounts on behalf of digital marketing agencies and small businesses. When you connect social media accounts:

We access your social media data only to the extent necessary to provide the Services you have requested
We store OAuth access tokens securely and use them only to perform actions you authorize
You may disconnect any connected social media account at any time from your account settings
We do not use your social media data to train machine learning models or for purposes unrelated to your use of our Services
Client data belonging to your agency’s clients is processed as data processor on your behalf — you remain the data controller

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a revised effective date and, where appropriate, by sending you an email notification. Your continued use of our Services after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Website: https://elymant.com/contact

If you are located in the EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.

Thank you for trusting Elymant with your business.