Privacy & Data Protection

Privacy Policy

We help you design, schedule, and grow your social media. We take your privacy seriously.

This Privacy Policy applies to all users of Templatement ("we," "our," or "us"), regardless of your country of residence. Templatement provides a social media management platform (the "Service") that allows individuals, creators, and agencies to design, schedule, publish, and analyze content across multiple social networks including Facebook, LinkedIn, Instagram, Twitter/X, YouTube, and others.

To ensure a proper and secure handling of personal data, Templatement has decided to make the principles of the EU General Data Protection Regulation (GDPR) applicable as a global baseline standard, in addition to complying with local privacy laws where required (e.g., California Consumer Privacy Act (CCPA), Swiss Data Protection Act (DSG), Brazil's LGPD, India's DPDPA, and Australia's Privacy Act).

If your locally applicable data protection law grants you a level of data protection that exceeds that of the GDPR, that stricter level will also apply to our processing of your data. However, the level of protection provided by the GDPR will never be undercut for any user.

Insofar as the terms of the GDPR are used (e.g., "processing" or "personal data"), these are to be understood as having the same meaning under your local privacy laws where applicable.

The aim of this Privacy Policy is to ensure the protection of your personal data in accordance with global privacy standards and the specific requirements of social media platforms (Facebook, LinkedIn, etc.) for app approval.

Because Templatement serves users worldwide, your data may be transferred to, stored in, or processed in countries other than your own, including the United States, European Union member states, and others.

For users in the European Union (EU) / European Economic Area (EEA):

Where we transfer data to countries outside the EU/EEA that have not received an adequacy decision from the European Commission, we implement Standard Contractual Clauses (SCCs) approved by the European Commission, along with supplementary measures where necessary. You may request a copy of these safeguards by contacting privacy@templatement.com.

For users in Switzerland:

We comply with the requirements of Art. 16 et seq. of the Swiss DPA. Personal data is only transferred abroad if the country ensures an adequate level of protection (e.g., EU member states) or if appropriate safeguards (e.g., SCCs) are in place.

For users in the United States (including California):

Templatement complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework. Templatement has certified to the U.S. Department of Commerce that it adheres to the DPF Principles. To learn more, visit https://www.dataprivacyframework.gov/. If there is any conflict between this Privacy Policy and the DPF Principles, the DPF Principles shall govern. Templatement is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

For users in India (DPDPA):

We process personal data only for lawful purposes consistent with the Digital Personal Data Protection Act, 2023. Cross-border transfers are made only to countries notified by the Indian government or under valid contractual safeguards.

For users in Brazil (LGPD):

We respect your rights under the Lei Geral de Proteção de Dados, including access, correction, anonymization, blocking, and deletion of personal data.

For users in Australia:

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You may access or correct your personal data or make a complaint as described in Section K.

1. Account Registration & Profile Information

What we collect:

• Name, email address, password (hashed, not stored in plain text)
• Company name (optional), profile picture (optional)
• Billing information (if you subscribe to a paid plan)

Why we process it:

To create and manage your account, authenticate you, and provide customer support.

Legal basis:

• GDPR: Art. 6(1)(b) – contract performance
• CCPA: Performance of service requested by you
• DPDPA: For lawful purpose of providing service

Retention:

Until you delete your account, plus up to 30 days thereafter for backup deletion.

2. Social Media Account Connections (Facebook, LinkedIn, Instagram, etc.)

What we collect:

• Basic profile information: name, email, profile picture, platform user ID
• Access token (encrypted) – to publish posts and read analytics on your behalf
• List of managed Pages (Facebook) or Company Pages (LinkedIn)
• Post metadata: IDs, timestamps, likes, comments, shares, reach, impressions

What we DO NOT collect:

• Your social media login password
• Private / direct messages
• Friend lists or follower lists (only aggregated counts)

Why we process it:

To allow you to select a Page or profile, schedule and publish content, and display analytics.

Retention:

Access tokens are stored encrypted and refreshed automatically. When you disconnect an account or delete your Templatement account, all tokens and related data are deleted within 48 hours.

3. Content You Create (Designs, Posts, Captions, Media)

What we collect:

• Text, images, videos, hashtags, and designs you create using our Design Studio
• Scheduled post date/time and platform selection

Why we process it:

To store your drafts, schedule posts, and publish them at the correct time.

Legal basis:

• Contract performance (Art. 6(1)(b) GDPR) and your instruction.

Retention:

Drafts and scheduled posts are stored until you delete them or publish. Published post content is retained for analytics purposes for up to 12 months, then anonymized.

4. Log Files & Website Visit Data

What we collect:

• IP address (anonymized where required)
• Browser type and version
• Operating system
• Referrer URL (previous website)
• Date, time, and pages visited
• Device identifiers (cookies, subject to your consent)

Why we process it:

To ensure website security, prevent abuse, improve performance, and analyze usage trends.

Legal basis:

• Legitimate interest (Art. 6(1)(f) GDPR). For non-essential cookies, we rely on your consent via our cookie banner.

Retention:

Log files are deleted after 30 days unless required for legal proceedings.

5. Analytics & Marketing Cookies (with Consent)

Why we process it:

Analytics services for usage tracking and advertising purposes

Retention:

Until you withdraw consent

Service	Purpose	Data Transfer
Google Analytics	Usage analytics	Google LLC (USA) – DPF certified
Facebook Pixel	Ad performance & retargeting	Meta (USA) – DPF certified
LinkedIn Insight Tag	Ad conversion tracking	LinkedIn (USA) – DPF certified
Hotjar	User behavior analysis	Hotjar (Ireland/USA) – SCCs

You can withdraw consent at any time via the cookie settings icon on our website.

6. Email Communications (Newsletters, Product Updates, Transactional)

What we collect:

• Email address, name, preferences (if you subscribe to marketing emails).

Why we process it:

Transactional emails (password reset, payment confirmation, scheduled post alerts) – contract performance; Marketing emails (newsletters, tips, feature announcements) – only with your consent

Legal basis:

• Consent for marketing; contract for transactional.

Retention:

Until you unsubscribe (marketing) or delete your account (transactional).

We share your personal data only in the following circumstances:

1. Social Media Platforms (as you direct)

• Facebook (Meta Platforms, Inc.)
• LinkedIn Corporation
• Instagram (via Meta)
• Twitter/X
• YouTube (Google LLC)

Why: To publish posts and fetch analytics exactly as you instruct.

Data shared: Access tokens, post content, Page/Profile ID.

2. Service Providers (Data Processors)

Provider	Purpose	Location
Amazon Web Services (AWS)	Cloud hosting & database	USA / EU
SendGrid / Twilio	Transactional emails	USA
Stripe or PayPal	Payment processing	USA / EU
HubSpot	CRM & email marketing (with consent)	USA (DPF certified)

All service providers are bound by Data Processing Agreements and applicable SCCs where required.

3. Legal & Compliance

We may disclose your data if required by law, court order, or governmental request, or to protect our rights, users, or public safety.

4. Business Transfers

If Templatement is acquired or merges with another company, your data will be transferred under the same privacy commitments.

ℹ️ We do NOT sell your personal data to any third party.

Type of Data	Retention Period
Account information	Until account deletion + 30 days
Social media access tokens	Until disconnect or account deletion (max 48 hours after)
Draft posts & designs	Until deleted by user or account deletion
Published post analytics	12 months, then anonymized
Log files (IP, browser, etc.)	30 days
Marketing email consent	Until withdrawal of consent
Payment/billing data	As required by tax laws (typically 7–10 years)

We conduct regular data deletion reviews.

P. Contact Information & Data Protection Officer

General Inquiries

privacy@templatement.com

Data Protection Officer

dpo@templatement.com

Mailing Address

Templatement
[Shivam Appartment – B.C Sen Road, Kolkata,700109, India]

Response time: 2 business days for acknowledgment; 30 days for substantive response.

By using Templatement, you acknowledge that you have read, understood, and agree to this Privacy Policy.

Last updated: April 14, 2026 | Version 2.0 | Global Baseline GDPR Compliant

Privacy Policy

A. General Note – Applicable to Users Worldwide

B. Third Country & Cross-Border Data Transfers

For users in the European Union (EU) / European Economic Area (EEA):

For users in Switzerland:

For users in the United States (including California):

For users in India (DPDPA):

For users in Brazil (LGPD):

For users in Australia:

C. Joint Data Processing (if applicable)

D. Data Processing – Detailed Breakdown

1. Account Registration & Profile Information

2. Social Media Account Connections (Facebook, LinkedIn, Instagram, etc.)

3. Content You Create (Designs, Posts, Captions, Media)

4. Log Files & Website Visit Data

5. Analytics & Marketing Cookies (with Consent)

6. Email Communications (Newsletters, Product Updates, Transactional)

E. How We Share Your Data (Third Parties)

1. Social Media Platforms (as you direct)

2. Service Providers (Data Processors)

3. Legal & Compliance

4. Business Transfers

F. Data Deletion Instructions

Directly within Templatement (Recommended)

Email Request

Revoke directly on Facebook or LinkedIn

G. Data Security

H. Your Rights as a Global Data Subject

Access

Rectification

Erasure

Restriction

Data Portability

Objection

Withdraw Consent

I. Children's Privacy

J. California Residents – CCPA/CPRA Specific Disclosures

K. Australia – Privacy Act Specifics

L. Brazil – LGPD Specifics

M. Data Retention Periods – Summary Table

N. No Automated Decision-Making or Profiling

O. Changes to This Privacy Policy

P. Contact Information & Data Protection Officer