Privacy Policy

1. Who we are

LudeHQ, based in Larnaca, Cyprus, provides InstaScheduler and is the controller of the personal data described in this policy. You can contact us at contact@ludehq.com.

2. What we collect

• Account data. We collect your email address, name and password hash when an invited user creates an account. We do not store your password in plain text.
• Connected social account data. We store access tokens and account metadata for the Instagram and Facebook accounts you connect. We use this data solely to connect your accounts and to schedule and publish your content at your request.
• Your content. We store the posts, captions and media that you create or upload so that you can prepare, schedule and publish them.
• AI submissions. Text and media that you submit to an AI feature are sent to OpenAI to generate the content you request. We do not use these submissions to train AI models.
• Technical data. We collect internet protocol addresses and request logs needed to operate and protect the Service. These logs are kept for a short period.

3. Why we process your data

We process personal data only when we have a legal basis to do so.

• Performance of a contract. We process account data, connected account data, content and AI submissions to provide the Service you request. This is under Article 6(1)(b) of the GDPR.
• Legitimate interests. We process technical data and logs to secure the Service, prevent abuse and diagnose faults. This is under Article 6(1)(f) of the GDPR.
• Legal obligation. We may process or retain data when the law requires us to do so. This is under Article 6(1)(c) of the GDPR.

4. Who processes data for us

We host the Service and its database on our own server in the European Union. OpenAI processes submissions when you choose to use an AI feature. Meta Platforms receives the account and content data needed to connect to Instagram or Facebook and publish on your behalf. Meta processes that data under its own terms and policies.

We do not sell personal data and do not use it for advertising.

5. International transfers

OpenAI, Meta Platforms or another service provider may process personal data outside the European Economic Area, including in the United States. Where we transfer data outside the European Economic Area, we use appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses.

6. How long we keep data

We keep account data while your account is active. We keep connected account data until you disconnect the account or close your InstaScheduler account. We keep your content until you delete it or close your account. We may retain information for longer when required by law or when needed to establish or defend legal claims. Technical logs are kept only for the short period needed for security, fault diagnosis and abuse prevention.

7. Your rights

Depending on the circumstances, you may ask us for access to your personal data, correction, erasure, portability or restriction of processing. You may also object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before it.

To exercise a right, email contact@ludehq.com. We may need to confirm your identity before acting on a request. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

8. Cookies

InstaScheduler uses only essential session cookies needed to keep you signed in and protect your session. We do not use tracking, analytics or advertising cookies. Because we use only essential cookies, we do not show a cookie consent banner.

9. Security

We use HTTPS, restricted database access, encrypted social account tokens and other reasonable technical and organisational measures to protect personal data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Children

InstaScheduler is not directed at children under 16. If you believe a child under 16 has provided personal data to us, contact us so we can take appropriate action.

11. Changes to this policy

We may update this policy when our practices or legal obligations change. We will post the updated policy here and change the date above. We will provide reasonable notice if a change materially affects your rights.

12. Contact

Questions about this policy can be sent to contact@ludehq.com. You can also write to LudeHQ in Larnaca, Cyprus.