Privacy Policy

Flayr Labs LLC ("Flayr Labs," "we," or "us") is a Delaware limited liability company. Our registered office is 611 South DuPont Highway, Suite 102, Dover, DE 19901. You can reach us about anything in this policy at support@flayrlabs.com.

Contact form

If you use the contact form, we receive the name, email address, subject, and message you enter. We use it only to read and reply to your message. The form is delivered to our inbox by email through SendGrid (Twilio). We do not add you to a mailing list.

Server logs and monitoring

Like most websites, our servers record basic request information, such as your IP address, the page requested, the time, and your browser's user agent. Our server also sends performance and error telemetry (request timings, errors, and related logs) to a monitoring system that we host ourselves. We use this to keep the site running, fix problems, and block abuse, such as rate-limiting the contact form by IP address. It is not shared with third parties.

No tracking or advertising cookies

This website does not set cookies and does not load third-party analytics, advertising, or tracking scripts. Fonts and images are served from our own servers.

Flayr Socials is an internal tool used only by the Flayr Labs team. It is not offered to the public. We use it to schedule and publish marketing videos and images for our own products on the company's own social media accounts. When a team member connects one of those accounts, the platform asks for permission and Flayr Socials receives only the access described below.

What Flayr Socials accesses

• YouTube (Google): the youtube.upload scope, to upload our videos to our own channels, and the youtube.readonly scope, to read the connected channel's ID, name, and subscriber count so we can show which channel is connected and track its growth, and the ID, link, and privacy status of each video we upload, so we can confirm whether it is public.
• Instagram (Meta): basic profile information for our Instagram business accounts (account ID, username, follower count) and permission to publish content to them.
• TikTok: basic profile information for our TikTok business accounts (account ID and display name) and permission to upload videos and photo posts to them.

How we use it

We use this access only to schedule and upload the company's own marketing content, to confirm that each post was published, and to keep basic follower counts for our own accounts. We do not read, collect, or store information about other people's channels, videos, comments, or viewers.

Not sold or shared

We do not sell, rent, or share data received from Google, Meta, or TikTok with anyone, and we do not use it for advertising. It is not transferred to third parties except as needed to perform the upload itself (for example, sending our video to YouTube), to comply with the law, or as part of a merger or acquisition with notice to you. We do not use it to train AI or machine learning models.

How it is stored

OAuth access and refresh tokens are encrypted with AES-256-GCM before they are saved to our database. The database and the content we upload are stored on servers that we operate, and access is limited to the Flayr Labs team through single sign-on.

How long we keep it

Data we receive from YouTube API Services (a channel's ID, name, and subscriber count, and the IDs, links, and privacy status of the videos we uploaded) is refreshed from YouTube every day. If it cannot be refreshed for 30 days, for example because access was revoked in the Google security settings, we delete it. When a channel is disconnected in Flayr Socials, we revoke our access at Google and delete its tokens and this data immediately. For Instagram and TikTok accounts, disconnecting deletes the stored tokens.

Cookies

Flayr Socials stores a sign-in session cookie in the team member's browser, and a short-lived cookie while an account is being connected, to keep the connection request secure. It uses no analytics, advertising, or tracking cookies, and lets no third party place cookies or collect information from your device.

How to revoke access

You can revoke Flayr Socials' access to a Google account at any time from the Google security settings page at https://security.google.com/settings/security/permissions. Instagram and TikTok access can be removed from the apps and websites section of each platform's account settings. To ask us to delete any data we hold from a connected account, email support@flayrlabs.com and we will delete it within 7 days. Questions or complaints about how Flayr Socials uses YouTube or other platform data can go to the same address.

Flayr Socials uses YouTube API Services. By connecting a YouTube channel to Flayr Socials, you agree to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

Flayr Socials' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the uploading and channel features described above, we do not transfer it except as described in this policy, we do not use it for advertising, and no person reads it unless we have permission, it is needed for security or to comply with the law, or it is aggregated and anonymized for internal operations.

We keep contact form messages for as long as needed to handle your request and maintain our correspondence records. Server logs and telemetry are kept for a limited period for operations and security, then deleted. Connected-account data is kept, refreshed, and deleted as described in section 3, and deleted sooner on request.

You can ask us what personal information we hold about you, ask us to correct or delete it, or ask any other question about your privacy, by emailing support@flayrlabs.com. Depending on where you live, you may have additional rights under laws such as the GDPR or the California Consumer Privacy Act, and we will honor them.

We use encryption in transit (HTTPS), encryption of stored OAuth tokens, and access controls to protect information. No system is perfectly secure, but we work to protect the information we hold and will notify affected people of a breach as the law requires.

This website and Flayr Socials are not directed to children under 13, and we do not knowingly collect personal information from them.

If we change this policy, we will update it on this page and change the effective date above. Questions or requests: support@flayrlabs.com, or Flayr Labs LLC, 611 South DuPont Highway, Suite 102, Dover, DE 19901.