Privacy Policy

Information we collect

• Account information: the name, email address, and business details a client provides to set up and sign in to their system.
• Connected social accounts: when a client connects an Instagram or Facebook account, we receive data through Meta’s official APIs, such as profile details, published media, captions, and performance insights (reach, views, engagement), along with access tokens that let the system act on the client’s behalf.
• Content: videos, images, captions, and other material a client uploads or that the system prepares for publishing.
• Usage data: basic technical information such as log data, device and browser type, and pages visited in the dashboard.

How we use information

• To operate the system for the client: finding trends, drafting hooks and captions, scheduling, and publishing content to the client’s connected accounts.
• To analyze performance and produce insights and recommendations for the client.
• To maintain, secure, and improve the service, and to provide support.
• To communicate with clients about their system and account.

We only publish content to a connected account when the client has set up and approved that workflow.

AI processing

Parts of the system use AI models to analyze content and performance data and to generate drafts and recommendations. Data sent to AI providers is used to deliver the service to the client and is not sold.

Using ZiaRush in ChatGPT, Claude and other AI apps

A client’s team members can connect their own AI app (for example ChatGPT or Claude) to their company’s ZiaRush system using the Model Context Protocol. This is off until the client’s Owner or Admin turns it on and chooses what connected apps may do: read only; read and create drafts; or read, create drafts and post.

• Sign-in: the person signs in to their company’s own ZiaRush system and approves the app themselves. The app then works with that person’s role. Access tokens are issued by the client’s system, stored there only as one-way hashes, and end when the person disconnects the app, when their password or role changes, or when the client turns AI apps off.
• What the app can read: the business and brand profile (including brand colours, fonts, logo and links), drafts, the publishing schedule, published posts and their performance, audience totals by country and city, content strategy and recommendations, and media library files.
• What the app can do, if allowed: create drafts and AI image previews, add files to the media library, edit captions, and schedule, publish or cancel posts on the client’s connected Instagram, Facebook and LinkedIn accounts. Each post is recorded with the person and the app it came from.
• What is never shared with AI apps: the client’s customers’ leads, direct messages, comments, call records and bookings.
• The shared address (mcp.ziarush.io): apps connect through one ZiaRush address, which uses the work email or dashboard address to find the right client system and passes each request and answer straight through to it. It does not store content, files or access tokens.
• The AI app provider: what a connected app reads or creates is sent to that app’s provider (for example OpenAI or Anthropic) and handled under that provider’s terms and privacy policy, which the person accepted when using the app.
• Records: each connection and each action an app takes is recorded in the client’s activity log.
• Disconnecting: remove ZiaRush in the AI app’s settings, or disconnect the app in the ZiaRush system under Settings, Integrations.

How we share information

We do not sell personal information. We share it only:

• With service providers that help us run the system, such as cloud hosting (Microsoft Azure) and AI model providers, under obligations to protect it.
• With Meta (Instagram and Facebook), TikTok and LinkedIn when publishing or retrieving data on the client’s behalf, as required to provide the service.
• With an AI app such as ChatGPT or Claude, only when a client’s team member connects it and only as described above.
• When required by law, or to protect the rights, safety, and security of our clients, users, or ZiaRush.

Retention

We keep information for as long as a client’s system is active, or as needed to provide the service and meet legal obligations. When a client ends service or requests deletion, we delete or de-identify their data as described on our Data Deletion page.

Security

We use industry-standard safeguards, including encryption in transit, encrypted storage of access tokens, and restricted access to production systems. No method of transmission or storage is completely secure.

Your choices and rights

• You can request access to, correction of, or deletion of your information by emailing hello@ziarush.ai.
• You can disconnect a connected account at any time from Instagram or Facebook settings under “Apps and websites.”
• Depending on where you live, you may have additional rights under local privacy laws.

Children

The service is intended for businesses and is not directed to children under 13. We do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the effective date above.

Contact

Questions about this policy? Email hello@ziarush.ai.