Privacy Policy

Last updated: April 11, 2026

1. Introduction

This Privacy Policy describes how Slick Social, operated by Slick (CR 459750, State of Kuwait), collects, uses, and protects your information when you use our social media management platform.

2. Data We Collect

Data Type	Purpose	Storage
OAuth access tokens (TikTok, Meta, Google, Snapchat)	Authenticate with platforms to post content and manage ads on your behalf	Encrypted in database
Platform account IDs (page IDs, ad account IDs, channel IDs)	Identify which accounts to manage	Database
Content you create (captions, media files)	Publish to your selected platforms	Server storage, deleted on request
Analytics data retrieved from platforms	Display performance metrics in your dashboard	Cached temporarily
Account credentials (username, hashed password)	Platform authentication	Passwords stored as bcrypt hashes
WhatsApp contact lists	Sending approved marketing campaigns	Database, synced from your business systems

3. How We Use Your Data

Your data is used solely to provide the Service:

Publishing content to TikTok, Instagram, Facebook, YouTube, and Snapchat on your behalf
Creating and managing advertising campaigns on Meta Ads, Google Ads, TikTok Ads, and Snapchat Ads
Sending WhatsApp Business messages to your contact lists using your approved templates
Displaying analytics and engagement metrics from your connected accounts
Generating AI-assisted captions for your content

4. Data Sharing

We do not sell, rent, or share your personal data with third parties.

Your data is transmitted only to the platforms you explicitly connect:

Meta Platforms (Instagram, Facebook, WhatsApp) — via the Meta Graph API
Google (YouTube, Google Ads) — via the YouTube Data API and Google Ads API
TikTok — via the TikTok Content Posting API and Marketing API
Snapchat — via the Snapchat Marketing API
Anthropic — caption text only (no personal data) sent for AI generation

5. Data Security

We implement industry-standard security measures:

All API communications use HTTPS/TLS encryption
OAuth tokens are stored securely and never exposed in client-side code
Passwords are hashed using bcrypt with salt
Database access is restricted to the application server

6. Data Retention

OAuth tokens are retained as long as your account is active
Published content references are retained for analytics purposes
Upon account deletion request, all tokens and personal data are removed within 30 days
Media files are deleted upon request

7. Your Rights

You have the right to:

Access your stored data at any time through the platform dashboard
Disconnect any platform by removing your credentials from the Businesses page
Delete your account and all associated data by contacting us
Export your data upon request
Revoke OAuth access at any time through the respective platform's settings

8. Cookies and Tracking

Slick Social uses session tokens stored in your browser's localStorage for authentication. We do not use third-party tracking cookies or analytics services.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be reflected by the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

11. Contact

For questions about this Privacy Policy, data access requests, or deletion requests, contact us at:

Email: fahad@slickecosystem.com
Company: Slick (CR 459750)
Location: State of Kuwait