Privacy policy

1. Who operates My-Conect

My-Conect is a social media management service operated by MY-CONECT ENTERPRISE, a business registered in Kenya. This policy covers the My-Conect website, accounts, workspaces, social connections and subscription services. Contact [email protected] about privacy or personal information.

We are responsible for information used to operate accounts, security, support and billing. When a workspace supplies content or information about other people, that workspace is responsible for having authority to use it and for giving any required notices. We process that workspace information to provide the requested service.

2. Information we collect

• Account and workspace information: name, email address, a password hash, email verification status, workspace names, membership roles, preferences and account status.
• Social connection information: provider account, Page, profile or channel identifiers; names and usernames returned by the provider; granted permissions; authorization expiry; and access or refresh tokens needed for the connection. Tokens are encrypted when stored.
• Content and publishing records: drafts, captions, public media URLs you supply, selected destinations, schedules, approval or manual-sharing records, publishing results, provider post identifiers and links, and delivery errors. Files prepared locally for manual sharing are not automatically uploaded to My-Conect merely by selecting them.
• Security and service records: sessions, browser user-agent information, authentication tokens, audit events, request times, delivery attempts and technical errors. Hosting and network services may also process IP addresses and connection information.
• Subscription information: selected plans, payment references, payer email, amounts, currencies, payment mode, confirmation dates and subscription allowances. Paystack handles its hosted checkout; My-Conect does not collect or store full payment-card numbers or card security codes.
• Support information: information you provide when you contact us, including information needed to verify and resolve a privacy request.

Connecting one platform does not authorize access to every platform. Availability depends on the integrations enabled by the operator, your permissions and the provider's access rules. We do not need your social network password to complete an OAuth connection.

3. How and why we use information

We use information to create accounts, authenticate users, maintain workspaces, connect authorized social accounts, save content, run publishing schedules, display delivery results, provide subscriptions, answer support requests and protect the service against misuse.

Where applicable, processing is based on performing our agreement with you, legitimate interests in securing and operating the service, meeting legal obligations, or consent where required. Provider authorization lets us carry out the actions you request; you can withdraw it through disconnection or the provider's permission settings. Withdrawing a required permission can stop the related feature.

We do not sell personal information or use connected social account data for advertising profiles. Information is used for the service functions described here, rather than unrelated purposes.

4. Sharing and external services

Workspace content and account information are visible to teammates according to their roles and permissions. Workspace owners and authorized administrators can manage workspace activity. System administrators have access needed for operation and support.

When you request a publication, we send the relevant content, destination information and authorization to the selected provider, such as Meta/Facebook/Instagram, LinkedIn, X or Telegram. A published post is then governed by that platform's rules, visibility settings and privacy policy. My-Conect cannot control copies other people make of a public post.

We use hosting, network, email and payment services to provide the application. Paystack receives checkout and payment information for purchases. We may disclose information when required by law or reasonably necessary to investigate misuse, protect rights or resolve disputes. We limit disclosures to the purpose involved.

Opening WhatsapBox takes you to a separate service. This navigation does not by itself connect your WhatsApp account to My-Conect. External services have their own terms and privacy practices. Providers may process information outside Kenya or your country; contact us for information about the providers and safeguards relevant to your use.

5. Cookies and local storage

My-Conect uses session and request-security cookies to keep you signed in and protect account actions. Browser storage is also used for preferences such as theme and the selected workspace. Blocking necessary cookies can prevent sign-in or protected actions. You can clear cookies and local storage through your browser; this does not delete the account or records held on the server.

6. Retention and security

Account, workspace and content records are retained while needed to provide the service and resolve operational, security, billing or legal matters. Disconnecting a provider does not automatically erase the workspace, drafts or historical delivery records. You can request deletion as described below.

Limited billing, security or dispute records may need to be retained after a deletion request where legally required or necessary for a legitimate, documented purpose. Backups can retain earlier copies until they are removed through the operator's backup process. We assess these records when handling your request and explain relevant retention limits; deletion is not represented as instantaneous or as immediate removal of every backup.

We use password hashing, encrypted stored social tokens and service credentials, and permission checks. These measures reduce risk but cannot guarantee that all incidents, interruptions or unauthorized access will be prevented.

7. Your choices and privacy requests

You can ask about the information we hold about you, request access or correction, object to or request restriction of processing, withdraw applicable consent, or request deletion, subject to applicable law and the rights of other people. Send your request from your registered email address where possible. We may need proportionate information to verify your identity or authority over a workspace.

Follow our data deletion instructions for account or connected-platform information. Requests are handled through support; My-Conect does not currently provide an automatic account-erasure button. We will explain the outcome, any applicable exceptions and the timeframe for the request.

You may raise a concern with Kenya's Office of the Data Protection Commissioner or another competent authority where applicable. Contacting us first can help us resolve the issue, but does not remove that right.

8. Children and policy updates

My-Conect is a business and content-management service and is not directed at children. If you believe a child has supplied information without the required authority, contact us so we can assess the request.

We may update this policy as the service changes. The date at the top identifies the latest version. Material changes will be communicated through the service or the contact details associated with affected accounts where appropriate.