Toucan Creator Privacy Policy

Effective Date: 10/27/2025
Last Updated: 10/27/2025

Introduction

Welcome to Toucan Creator, a social media management platform provided by Wagware Digital Solutions, LLC (“Wagware,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Toucan Creator. By using our Service, you agree to the collection and use of information in accordance with this policy.

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, DO NOT USE TOUCAN CREATOR.

Table of Contents

  1. Information We Collect
  2. How We Use Your Information
  3. How We Share Your Information
  4. Third-Party Platform Integration
  5. Data Storage and Security
  6. Data Retention
  7. Your Privacy Rights
  8. Cookies and Tracking Technologies
  9. International Data Transfers
  10. Children’s Privacy
  11. California Privacy Rights
  12. GDPR Compliance (European Users)
  13. Changes to This Privacy Policy
  14. Contact Us

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

  • Name
  • Email address
  • Password (encrypted)
  • Company/Organization name (if applicable)
  • Billing address
  • Phone number (optional)

Payment Information:

  • Credit card details (processed by Stripe – we do not store full card numbers)
  • Billing history
  • Transaction records

Profile Information:

  • Profile photo
  • Bio/description
  • Preferences and settings
  • Time zone

Content You Create:

  • Social media posts and scheduled content
  • Images, videos, and other media files
  • Comments and replies
  • Analytics data and reports
  • Team collaboration data (comments, approvals, assignments)

Communications:

  • Support requests and correspondence
  • Feedback and survey responses
  • Email communications with our team

1.2 Information We Collect Automatically

Usage Information:

  • Pages visited and features used
  • Time spent on the Service
  • Actions taken (posts created, comments replied to, etc.)
  • Device information (browser type, operating system, IP address)
  • Referral source

Log Data:

  • IP address
  • Browser type and version
  • Access times and dates
  • Pages viewed
  • Error logs and diagnostic data

Cookies and Similar Technologies:

  • Session cookies (authentication)
  • Preference cookies (settings, theme)
  • Analytics cookies (usage patterns)
  • See Section 8 for details

1.3 Information from Third-Party Platforms

When you connect social media accounts to Toucan Creator, we collect:

From YouTube:

  • Channel name and ID
  • Profile photo
  • Email address
  • Video metadata (titles, descriptions, thumbnails)
  • Video analytics (views, watch time, engagement)
  • Comments on your videos
  • Subscriber count and demographics (non-monetary analytics only)

From Facebook:

  • Page name and ID
  • Profile photo
  • Page posts and metadata
  • Post analytics (reach, engagement, clicks)
  • Comments on your posts
  • Page follower count

From Instagram:

  • Account username and ID
  • Profile photo
  • Post metadata (captions, hashtags)
  • Post analytics (impressions, reach, engagement)
  • Comments and mentions
  • Follower count

From LinkedIn:

  • Profile or company page name
  • Profile photo
  • Post metadata
  • Post analytics (impressions, engagement)
  • Comments on your posts
  • Connection/follower count

From X/Twitter:

  • Username and handle
  • Profile photo
  • Tweet metadata
  • Tweet analytics (impressions, engagement)
  • Mentions and replies
  • Follower count

From TikTok (if applicable):

  • Username and ID
  • Profile photo
  • Video metadata
  • Video analytics
  • Comments
  • Follower count

Important: We only access data you explicitly authorize via OAuth. You can revoke access at any time through your account settings or directly on the platform.

1.4 Information from Other Sources

Payment Processors (Stripe):

  • Payment confirmation
  • Billing status
  • Refund/chargeback information

Email Service Providers:

  • Email delivery status
  • Open and click rates (for our communications to you)

2. How We Use Your Information

We use your information for the following purposes:

2.1 Provide and Improve the Service

  • Create and manage your account
  • Process payments and subscriptions
  • Publish content to connected social media platforms
  • Monitor and respond to social media interactions (Universal Inbox)
  • Generate analytics and reports
  • Provide AI-powered features (reply suggestions, sentiment analysis)
  • Enable team collaboration features
  • Sync data from connected platforms

2.2 Communicate with You

  • Send service updates and announcements
  • Respond to support requests
  • Send billing and payment notifications
  • Request feedback and conduct surveys
  • Send marketing communications (with your consent – you can opt out)

2.3 Ensure Security and Prevent Fraud

  • Detect and prevent unauthorized access
  • Monitor for suspicious activity
  • Investigate and prevent Terms of Service violations
  • Comply with legal obligations

2.4 Analyze and Improve

  • Understand how users interact with the Service
  • Identify bugs and technical issues
  • Improve features and user experience
  • Develop new features
  • Conduct research and analytics
  • Comply with applicable laws and regulations
  • Respond to legal requests (subpoenas, court orders)
  • Protect our rights and property
  • Enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

  • Publishing content to social media platforms (as you direct)
  • Sharing with team members (if you use team features)
  • Any other purpose you explicitly authorize

3.2 Service Providers

We share information with third-party service providers who help us operate the Service:

Infrastructure and Hosting:

  • Cloud hosting providers (DigitalOcean, AWS, or similar)
  • Database services
  • Content Delivery Networks (CDNs)

Payment Processing:

  • Stripe (payment processing and billing)
  • We do not store full credit card numbers

Email Communications:

  • Email service providers (for transactional and marketing emails)

Analytics:

  • Usage analytics providers (to understand Service usage)
  • Error tracking and monitoring services

AI Services:

  • OpenAI (if you use our AI features or provide your own key)
  • Usage is governed by OpenAI’s privacy policy

Customer Support:

  • Help desk and ticketing systems

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.3 Social Media Platforms

When you connect platforms and authorize actions:

  • Content you schedule is published to those platforms
  • We access data you authorize via OAuth
  • Platform privacy policies govern data on their platforms

We may disclose information if required by law or in good faith belief that such disclosure is necessary to:

  • Comply with legal obligations (subpoenas, court orders)
  • Protect our rights, property, or safety
  • Protect users’ rights, property, or safety
  • Investigate fraud or security issues
  • Respond to government requests

3.5 Business Transfers

If Wagware is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.6 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you individually:

  • Industry research and reports
  • Service improvement insights
  • Marketing materials

4. Third-Party Platform Integration

4.1 OAuth Authorization

When you connect social media accounts, you authorize Toucan Creator to access specific data via OAuth. We:

  • Only request permissions necessary for Service functionality
  • Cannot access your account password
  • Respect platform rate limits and policies
  • Cache platform data temporarily for performance

4.2 Platform Privacy Policies

Your use of connected platforms is governed by their privacy policies:

4.3 Revoking Access

You can revoke Toucan Creator’s access to your social media accounts:

  • Through your Toucan Creator account settings
  • Directly on the platform (e.g., Google Account settings, Facebook App Settings)

Revoking access will disable features that require platform data.

4.4 Platform Data Retention

  • We cache platform data temporarily for performance (typically 5-60 minutes)
  • Scheduled posts are stored until published or deleted
  • Analytics data is aggregated and stored for historical reporting
  • You can delete platform data from your account settings

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored on secure servers in the United States. We use:

  • Encrypted databases (PostgreSQL with encryption at rest)
  • Secure cloud infrastructure (DigitalOcean, AWS, or similar)
  • Redundant backups for disaster recovery

5.2 Security Measures

We implement industry-standard security measures:

Technical Safeguards:

  • SSL/TLS encryption for data in transit (HTTPS)
  • Database encryption at rest
  • Encrypted password storage (bcrypt hashing)
  • Secure API authentication (JWT tokens)
  • Regular security updates and patches
  • Firewall protection (UFW)
  • Intrusion detection (Fail2ban)

Administrative Safeguards:

  • Access controls and role-based permissions
  • Employee background checks
  • Confidentiality agreements
  • Security training
  • Incident response procedures

Physical Safeguards:

  • Data centers with physical security controls
  • Environmental protection (fire suppression, climate control)
  • Redundant power and network infrastructure

5.3 Limitations of Security

While we use reasonable security measures, no system is 100% secure. We cannot guarantee absolute security. You acknowledge that:

  • Internet transmission has inherent risks
  • Unauthorized access may occur despite our efforts
  • You use the Service at your own risk

5.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

  • Notify affected users within 72 hours of discovery
  • Provide details about the breach and affected data
  • Explain steps we’re taking to address the breach
  • Advise on protective measures you can take
  • Comply with all applicable data breach notification laws

6. Data Retention

6.1 Account Data

We retain your account data while your account is active and for a reasonable period after:

  • Account information: Until account deletion + 30 days
  • Content: Until you delete it or account deletion + 30 days
  • Payment records: 7 years (for tax and legal compliance)
  • Support communications: 3 years

6.2 Analytics and Logs

  • Usage analytics: Aggregated indefinitely (anonymized)
  • Server logs: 90 days
  • Error logs: 1 year

We may retain data longer if required by law or legal proceedings.

6.4 Backup Retention

Backup copies may persist for up to 90 days after deletion from production systems.

6.5 Deletion Requests

You can request deletion of your data at any time. See Section 7 for details.

7. Your Privacy Rights

7.1 Access Your Information

You have the right to:

  • Access your personal information
  • Download a copy of your data (data portability)
  • Request information about how we process your data

How to exercise: Log into your account settings or contact support@wagware.com

7.2 Correct Your Information

You have the right to:

  • Update inaccurate information
  • Complete incomplete information

How to exercise: Update directly in account settings or contact support@wagware.com

7.3 Delete Your Information

You have the right to:

  • Delete your account and associated data
  • Request deletion of specific data

How to exercise: Account settings → Delete Account or contact support@wagware.com

Important: Deletion is permanent and cannot be undone. We may retain some data for legal compliance (see Section 6).

7.4 Object to Processing

You have the right to:

  • Object to certain data processing activities
  • Opt out of marketing communications
  • Restrict processing of your data

How to exercise: Contact support@wagware.com

You have the right to:

  • Withdraw consent for data processing based on consent
  • Revoke platform authorizations

How to exercise: Account settings or contact support@wagware.com

Note: Withdrawing consent may limit Service functionality.

7.6 Data Portability

You have the right to:

  • Receive your data in a structured, machine-readable format
  • Transfer your data to another service

How to exercise: Account settings → Export Data or contact support@wagware.com

7.7 Lodge a Complaint

You have the right to:

  • Lodge a complaint with a supervisory authority
  • Contact your local data protection authority

For EU users: List of EU Data Protection Authorities

7.8 Response Time

We will respond to privacy rights requests within:

  • 30 days (standard)
  • 45 days (for complex requests, with notification)

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device. We use cookies and similar technologies to:

  • Authenticate users
  • Remember preferences
  • Analyze usage
  • Improve the Service

8.2 Types of Cookies We Use

Essential Cookies (Required):

  • Session authentication
  • Security features
  • Load balancing
  • Cannot be disabled without affecting Service functionality

Functional Cookies (Optional):

  • Theme preferences (dark/light mode)
  • Language preferences
  • Dashboard customization
  • Can be disabled in browser settings

Analytics Cookies (Optional):

  • Usage patterns and statistics
  • Feature popularity
  • Error tracking
  • Can be disabled in account settings or browser

Marketing Cookies (Optional):

  • Ad targeting (if we use advertising)
  • Campaign tracking
  • Can be disabled via opt-out or browser settings

8.3 Third-Party Cookies

We may use third-party cookies from:

  • Analytics providers (Google Analytics, Mixpanel, etc.)
  • Payment processors (Stripe)
  • Customer support tools

8.4 Managing Cookies

You can control cookies through:

  • Browser settings (block all cookies, third-party only, etc.)
  • Account settings (analytics preferences)
  • Cookie consent banner (on first visit)

Note: Disabling essential cookies will prevent you from using the Service.

8.5 Do Not Track

Some browsers have “Do Not Track” (DNT) features. We currently do not respond to DNT signals, but we honor opt-out preferences in account settings.

9. International Data Transfers

9.1 Data Location

Toucan Creator is operated from the United States. If you access the Service from outside the U.S., your data will be transferred to, stored, and processed in the United States.

9.2 European Users (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland:

  • We rely on Standard Contractual Clauses (SCCs) for data transfers
  • We implement appropriate safeguards to protect your data
  • You have rights under GDPR (see Section 12)

9.3 Other Jurisdictions

We comply with applicable data protection laws in jurisdictions where we operate.

10. Children’s Privacy

Toucan Creator is not intended for children under 18 years of age. We do not knowingly collect personal information from children.

If you believe we have collected information from a child under 18:

  • Contact us immediately at support@wagware.com
  • We will delete the information promptly
  • We will terminate the account

Parents/guardians: Please monitor your children’s online activities.

11. California Privacy Rights

11.1 CCPA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know:

  • Categories of personal information collected
  • Purposes for collection
  • Categories of third parties we share with
  • Specific pieces of information we hold

Right to Delete:

  • Request deletion of your personal information
  • Subject to certain exceptions (legal compliance, etc.)

Right to Opt-Out:

  • We do not sell personal information
  • No opt-out required

Right to Non-Discrimination:

  • We will not discriminate against you for exercising CCPA rights

11.2 California “Shine the Light” Law

California residents may request information about disclosure of personal information to third parties for direct marketing purposes.

To request: Email support@wagware.com with “California Privacy Rights” in the subject line.

11.3 How to Exercise CCPA Rights

  • Email: support@wagware.com
  • Subject line: “CCPA Request”
  • Include: Your name, email, and specific request
  • Response time: 45 days

11.4 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require:

  • Proof of authorization
  • Verification of your identity

12. GDPR Compliance (European Users)

We process your personal data based on:

Contract Performance:

  • Providing the Service you subscribed to
  • Processing payments
  • Managing your account

Legitimate Interests:

  • Improving the Service
  • Detecting fraud and abuse
  • Analyzing usage patterns
  • Marketing (with opt-out option)

Consent:

  • Marketing communications (with explicit consent)
  • Optional cookies and tracking
  • AI features (if opt-in required)

Legal Obligations:

  • Tax and financial record keeping
  • Responding to legal requests

12.2 Your GDPR Rights

As an EU/EEA resident, you have:

  • Right to access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent
  • Right to lodge a complaint with supervisory authority

See Section 7 for how to exercise these rights.

12.3 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:

12.4 EU Representative

If required, we will appoint an EU representative and provide contact details here.

12.5 Data Retention

We retain data only as long as necessary for the purposes outlined in this policy or as required by law.

12.6 Automated Decision-Making

We may use automated decision-making for:

  • Fraud detection
  • AI content suggestions

You have the right to:

  • Request human review
  • Contest automated decisions
  • Express your point of view

13. Changes to This Privacy Policy

13.1 Updates

We may update this Privacy Policy from time to time. Changes may be due to:

  • New features or services
  • Legal or regulatory requirements
  • Industry best practices
  • User feedback

13.2 Notification

We will notify you of material changes via:

  • Email to your registered address
  • In-app notification
  • Notice on our website
  • Prominent banner in the Service

13.3 Continued Use

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13.4 Version History

We maintain a version history of this Privacy Policy. Previous versions are available upon request.

14. Contact Us

14.1 Privacy Inquiries

For questions about this Privacy Policy or our privacy practices:

Email: support@wagware.com
Subject line: Privacy Inquiry

14.2 Data Protection Officer

Email: support@wagware.com

14.3 Support

For general support inquiries:

Email: support@wagware.com
Website: http://wagware.com

14.4 Mailing Address

Wagware Digital Solutions, LLC

14.5 Response Time

We aim to respond to privacy inquiries within:

  • 5 business days (acknowledgment)
  • 30 days (full response)
  • 45 days (complex requests)

Summary of Key Points

What information do we collect?

  • Account information, payment data, content you create, usage data, and data from connected social media platforms

How do we use it?

  • Provide the Service, process payments, publish content, analyze usage, improve features, communicate with you

Do we share it?

  • Only with service providers, platforms you connect, as required by law, or with your consent. We do not sell your data.

Where is it stored?

  • Secure servers in the United States with encryption and security measures

What are your rights?

  • Access, correct, delete, export, object to processing, withdraw consent, lodge complaints

How long do we keep it?

  • Active accounts: ongoing; deleted accounts: 30 days; payment records: 7 years; logs: 90 days to 1 year

How can you control your data?

  • Account settings, data export, deletion requests, opt-out preferences, platform authorization revocation

Do we use cookies?

  • Yes, for authentication, preferences, analytics. You can control in browser/account settings.

Is it safe?

  • We use industry-standard security, but no system is 100% secure. We notify you of breaches.

Who can I contact?

Toucan Creator is a product of Wagware Digital Solutions, LLC

© [YEAR] Wagware Digital Solutions, LLC. All rights reserved.

Version 1.0
Effective: 10/2/2025
Last Updated: 10/2/2025

BY USING TOUCAN CREATOR, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.