Legal

Privacy Policy

Last updated: June 9, 2026

This policy describes how Scalead ("we", "us", "our") collects, uses, and protects information when you use our social media management services, including when you connect your Instagram or Facebook account to our platform.

1. Who We Are

Scalead is a digital studio that provides web development, branding, and social media management services. Our social media management service allows us to publish content on behalf of our clients on Instagram and Facebook.

Contact: hola@scalead.agency

2. Information We Collect

When you connect your Instagram or Facebook account to Scalead, we collect and store:

Your Instagram username and account ID
An OAuth access token that allows us to publish content on your behalf
Basic account metadata (follower count, account type) for reporting purposes
Content performance data (likes, comments, reach) on posts we publish for you

We do not collect or store your Instagram or Facebook password.

3. How We Use Your Information

We use the information collected solely to:

Publish approved content to your Instagram and/or Facebook Page on your behalf
Schedule and manage your content calendar
Provide performance reports on published content
Communicate with you about your social media strategy

We do not sell, rent, or share your personal information or account credentials with any third party outside of what is required to operate the service (e.g., Meta's API infrastructure).

4. Meta Platform Data

Our service uses the Meta Graph API and Instagram Content Publishing API. By connecting your account, you authorize Scalead to act on your behalf within the permissions you grant. Specifically:

instagram_basic — read basic profile information
instagram_content_publish — publish feed posts, stories, and reels
pages_show_list — list your connected Facebook Pages
pages_read_engagement — read engagement data on your Page

You can revoke this access at any time from your Instagram or Facebook settings under "Apps and Websites."

5. Data Retention

We retain your access token and account information for the duration of our service agreement. When you end our service, we delete your access token within 30 days. Published content remains on your Instagram/Facebook account and is subject to Meta's own data policies.

6. Data Security

Access tokens and credentials are stored encrypted. Only authorized Scalead team members have access to client credentials, and only to the extent required to operate the service. We do not store credentials in any public or unsecured location.

7. Your Rights

You have the right to:

Request a copy of the data we hold about you
Request deletion of your data at any time
Revoke our access to your Instagram/Facebook account at any time via Meta's settings
Withdraw consent for us to publish on your behalf with 24 hours' notice

8. Google Calendar Integration

For clients using our appointment booking and scheduling services, Scalead integrates with Google Calendar via the Google Calendar API. When you connect your Google account, we collect and store:

A Google OAuth refresh token that allows us to create and manage calendar events on your behalf
Your Google account email address, solely for identifying your account

We use this access exclusively to:

Create calendar events when a client books an appointment through your booking page
Display your calendar availability within your admin dashboard

We do not read, store, or process any existing calendar events, contacts, or other Google account data beyond what is required to create new booking events. We do not share Google user data with any third parties. You can revoke our access at any time from your Google Account settings under "Third-party apps with account access."

Our use of Google API Services is limited to the purposes described in this policy and complies with the Google API Services User Data Policy, including the Limited Use requirements.

9. Third-Party Services

We use the following third-party services to operate:

Google Calendar API — for appointment scheduling (Google Privacy Policy)
Meta Graph API — for Instagram and Facebook publishing (Meta Privacy Policy)
Vercel — for hosting and storage of application data (Vercel Privacy Policy)

10. Changes to This Policy

We may update this policy from time to time. We will notify active clients of any material changes via email or WhatsApp. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests, contact us at: hola@scalead.agency