Privacy Policy

Bendygo Marketing Hub · Last updated 28 August 2026

This policy explains what the Bendygo Marketing Hub ("the Hub") collects, why, and how it is handled. The Hub is operated by Bendygo Inc and is used internally to manage social media content for brands Bendygo Inc operates or has been authorized to manage.

Who we are

Bendygo Inc is the data controller for information processed by the Hub. Contact: [email protected].

What we collect

• Social account connection data. When an account is connected, we receive and store the access and refresh tokens issued by that platform, together with the account or page identifier and public profile details such as name, username, avatar and page or channel ID.
• Content you schedule. Post text, images and video prepared for publication, along with scheduling times, approval status and publication results.
• Performance metrics. Aggregate statistics the platform returns about published posts, such as impressions, reach, engagement counts and click counts.
• Hub account data. The email address and password hash of authorized staff users of the Hub itself.
• Operational logs. Timestamps, request outcomes and error messages generated while operating the service.

We do not collect social media passwords. We do not collect or process the private messages, direct messages or contact lists of connected accounts.

Why we collect it

• To publish content to accounts that have authorized us to do so.
• To report to the brand owner on how that content performed.
• To keep the service running securely and diagnose faults.

We process this information to perform our agreement with the brands we manage and on the basis of our legitimate interest in operating the service securely.

What we do not do

• We do not sell personal information.
• We do not share connected-account data with advertisers or data brokers.
• We do not use connected-account data to build advertising profiles.
• We do not use platform data for any purpose other than the publishing and reporting described above.

Who we share it with

Information is shared only with service providers necessary to operate the Hub, and only to that extent:

• The social media platforms themselves, when publishing content or retrieving metrics at your direction.
• Our hosting and infrastructure providers, who store the data on our behalf.
• Where required by law.

Where it is stored, and for how long

Data is stored on servers we control, located in Canada, with encrypted backups retained for 30 days. Access tokens are retained only while the connection is active and are deleted when it is revoked. Content and performance records are retained while the managing relationship continues, and deleted within 90 days of its end or of a deletion request, except where we are required to keep records for legal or accounting purposes.

Security

All access to the Hub is authenticated and encrypted in transit. The administrative interface is not publicly reachable and is restricted to authorized staff. Credentials and tokens are stored with access limited to the service that needs them.

Your rights

You may request access to, correction of, or deletion of information we hold about you, and you may withdraw an account connection at any time. Withdrawing a connection does not affect content already published. To exercise any of these rights, contact [email protected]; see also our Data Deletion Instructions. Depending on where you live, you may also have the right to complain to your local data protection authority.

Children

The Hub is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.

Changes

If this policy changes materially we will update the date above and, where the change affects connected accounts, notify the account holders.