Draft for review. This text has not been approved yet.

Privacy policy

Last updated 29 October 2026

SheppardSocial is run by MonserratSIA Group Inc., 5687 Gray Ave, Vancouver, British Columbia V6S 0K7, Canada (“we”). This policy explains what we collect when you use SheppardSocial, why, who we share it with, and how to have it deleted. Questions go to [email protected].

What we collect

• Your account: your email address, your name if you give it, when you signed in, and the address your browser connected from, kept for security.
• Your workspace: its name and time zone, who is in it and their roles, and what you make there: posts, pictures, clips, kinds of post, routines, and their schedules.
• Connected social accounts: when you connect Facebook, Instagram, Threads, LinkedIn or X, we keep the access token the network gives us (encrypted), the account or page you chose, the posts we publish for you, and the figures the network reports about them.
• Mailboxes you add: the server settings, the password (encrypted), and the messages we fetch and send for you.
• Records of use: what was done and when (an audit log), and what each AI request cost.

How we use it

To run the service you asked for: signing you in, keeping your workspace, drafting with AI when you ask, publishing the posts your workspace approves at the times you set, showing how they did, sending and fetching your mail, and emailing you about your posts and account. We use the records of use to keep the service secure and to bill for AI use.

We publish to a social network only what your workspace has approved. We read from a network only what we need to publish and to show your results.

Who we share it with

• The social networks you connect (Meta, LinkedIn, X), to publish your posts and read their results.
• AI providers (Anthropic, Google, OpenAI, Cloudflare): when you ask for a draft, a picture or a clip, the request and the context it needs are sent to the provider you or your workspace chose, under that provider’s API terms.
• Our hosting and email delivery: Google Cloud hosts the service and its data in Canada (Montréal), and an email provider delivers our messages.
• Payments: when billing starts, Stripe processes card payments; we never see or keep card numbers.

We do not sell your information, and we do not use it for advertising.

Cookies

One cookie keeps you signed in, and one remembers a tracked link you followed. Neither is used for advertising.

How long we keep it

For as long as your account or workspace exists. When you disconnect a social account, its token is deleted at once. When you ask us to delete your data, we do it within 30 days; see Data deletion.

Your rights

You can ask to see the information we hold about you, to correct it, or to delete it, by writing to [email protected]. We answer within 30 days. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

Changes

When this policy changes, we update the date at the top and tell account owners by email before a significant change takes effect.