Privacy Policy

Information we collect

We collect information in three ways:

• You provide it. Your name, email address, account profile details, login credentials, support messages, billing contact information, payment-related information supplied through our payment providers, and content you submit to the Service.
• We collect it automatically. IP address, browser and device information, approximate location inferred from IP, log data, page views, clicks, session data, and cookie or similar identifier data.
• We receive it from third parties. Information from payment processors, authentication and identity providers, analytics vendors, and the social or content platforms you choose to connect.

How we use information

We use personal information to provide and operate the Service; create and manage your account; process purchases; communicate with you about transactions, support, security, and product updates; personalize features; analyze usage and improve performance, including AI and recommendation features; prevent fraud and abuse; enforce our Terms; comply with legal obligations; and protect our rights, users, and systems.

Legal bases (where GDPR or similar law applies)

We rely on one or more lawful bases depending on the purpose:

• Contract — to provide the Service you request.
• Legitimate interests — for security, service administration, analytics, product improvement, and business operations.
• Consent — where we ask for it, such as certain marketing or non-essential cookies.
• Legal obligation — where we must retain or disclose information to comply with law.

Connected platforms

If you connect social accounts, Palamo uses that information to understand your content and provide better recommendations. Where you authorize it, we securely store the access credentials needed to operate connected features; these are encrypted at rest. Connected account details are not shown on public Palamo pages.

When you connect TikTok through Login Kit, we request only the permissions needed for Account Scan and performance learning: basic profile information (such as open ID, username, display name, and avatar) and a list of your public videos and related engagement metrics. We use this TikTok data to show your connected account status, sync recent content into your private workspace, and personalize recommendations. We do not use TikTok Login Kit as a general sign-in replacement for Palamo accounts, and we do not post to TikTok without your explicit approval in a separate publishing flow (when that feature is available).

Palamo does not post to your connected accounts without your permission.

How we share information

We may disclose personal information to service providers that help us operate the Service, such as hosting and infrastructure providers, payment processors, customer support tools, analytics providers, identity providers, email vendors, AI model providers, and security providers. We may also disclose information if required by law, to protect rights or safety, in connection with a merger or acquisition, or with your direction.

We do not sell your personal information for money. When advertising and analytics tools are enabled with your consent, we may share personal information with advertising partners for cross-context behavioral advertising, which California law may treat as “sharing.” You can opt out as described in the California section below.

International transfers

If we transfer personal data internationally, we use appropriate safeguards required by applicable law, such as adequacy decisions or approved contractual protections. You can request information about relevant safeguards at support@palamo.app.

Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy. Retention varies by category:

• Account and profile data — for the life of your account, plus a reasonable period after deletion to complete backups and legal obligations.
• Billing and transaction records — as required for tax, accounting, and dispute resolution (typically up to seven years where required by law).
• Support communications — long enough to resolve your request and maintain service quality records.
• Security and system logs — for a limited period needed for security monitoring, fraud prevention, and incident response.
• Connected platform data — while your connection remains active, or until you disconnect or request deletion.
• Analytics and advertising data — according to the retention settings of the relevant vendor, and only when you have opted in to those categories.

Security

We use reasonable technical and organizational measures designed to protect personal information, including access controls, encryption of sensitive credentials at rest, logging, and monitoring. However, no method of transmission or storage is completely secure.

Your rights & choices

Depending on applicable law, you may have rights to access, correct, delete, port, restrict, or object to certain processing, to withdraw consent where applicable, or to complain to a regulator. To exercise rights, contact us at support@palamo.app.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories of personal information

In the preceding 12 months, we may collect these categories:

• Identifiers — name, email, account ID, IP address, cookie IDs.
• Commercial information — subscription and billing records, purchase history.
• Internet or other electronic network activity — browsing history on our Service, interactions, logs, and analytics events (when enabled).
• Approximate geolocation — general location inferred from IP address.
• Inferences — preferences and recommendations derived from your use of the Service.

Sources and purposes

We collect this information directly from you, automatically from your device, and from service providers and connected platforms. We use it for the business and commercial purposes described in this Policy, including providing the Service, security, analytics, product improvement, and advertising measurement (when you opt in).

Sale and sharing

We do not sell personal information for money. If you opt in to advertising cookies, we may share personal information with advertising partners (such as Google and Meta) for cross-context behavioral advertising, which California law may treat as “sharing.” You can opt out at any time by:

• clicking Manage cookie preferences and turning off Advertising; or
• using the Do Not Sell or Share My Personal Information link in our footer, which opens the same preferences; or
• enabling Global Privacy Control (GPC) in your browser, which we honor as a valid opt-out of sharing.

Your California rights

California residents may have the right to:

• know what personal information we collect, use, disclose, and share;
• delete personal information, subject to certain exceptions;
• correct inaccurate personal information;
• opt out of sale or sharing of personal information;
• limit use and disclosure of sensitive personal information (we do not use SPI beyond permitted purposes); and
• not be discriminated against for exercising these rights.

To submit a request, email support@palamo.app or use the cookie preferences link above. We will verify your request and respond within 45 days, with a possible 45-day extension where permitted. You may use an authorized agent where allowed by law.

Cookies & similar technologies

We use cookies in these categories:

• Strictly necessary — authentication, security, and core functionality. These are always active.
• Analytics — helps us understand usage (for example Google Analytics or PostHog). Loaded only after you opt in.
• Advertising — supports ad measurement and personalization (for example Google Ads and Meta). Loaded only after you opt in.

Non-essential cookies and trackers are placed only after you opt in through our cookie banner or preferences. You can change your choices at any time by clicking Manage cookie preferences.

Do Not Track & Global Privacy Control

Some browsers send a “Do Not Track” (DNT) signal. Because there is no uniform industry standard for DNT, we do not respond to DNT signals alone. However, we honor Global Privacy Control (GPC) signals as a valid opt-out of sharing personal information for cross-context behavioral advertising, consistent with California law.

Children

Palamo is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children in a manner prohibited by law. If you believe a child has provided us personal information, contact us and we will review and address the issue.

Data deletion

You can request deletion of your data at any time. Removing Palamo from your Facebook Apps and Websites settings and sending a request automatically deletes the connected Meta and Instagram data we stored. To delete your full Palamo account, email us. See data deletion for instructions.

Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide additional notice as appropriate. The effective date above shows when this version began to apply.

Contact

Quilty LLC (d/b/a Palamo)
1041 N Formosa Ave, Writers Building, Suite 9, West Hollywood, CA 90046
Email: support@palamo.app