Privacy Policy

We collect information in two ways:

• Information you give us. When you submit our project inquiry form or email us, we receive the details you choose to share — typically your name, email address, company, and a description of your project, budget, and timeline.
• Technical information. Like most websites, our hosting provider may log basic technical data such as IP address, browser type, pages visited, and referring URLs for security and performance purposes.

We use the information you provide to:

• Respond to your inquiry and discuss a potential project.
• Prepare proposals, estimates, and agreements you request.
• Operate, secure, and improve this website.

We do not sell your personal information, and we do not use inquiry details for unrelated marketing.

This site does not currently use advertising cookies. EC Presence uses strictly necessary cookies only, described in section 9. If we add privacy-respecting analytics in the future, we will update this policy to describe what is collected and how to opt out.

We keep inquiry information for as long as needed to respond and, where a project proceeds, for the duration of our working relationship and any period required by law or legitimate business record keeping. You may ask us to delete your inquiry information at any time.

EC Presence is a business tool. Businesses (or an agency acting for them) use it to manage how they appear online — their Google Business Profile, customer reviews, search performance, and social content.

Access is by invitation only; there is no public sign-up. Each customer's data is isolated at the database level, so one customer cannot access another customer's information.

For each person with an EC Presence account we store:

• Email address and name.
• An encrypted password credential, or an authentication token if you sign in with a provider.
• Which organization and which client accounts you are permitted to access, and your role.
• A record of significant actions taken in the platform — uploads, approvals, publishes, and connection changes — kept as an audit trail.

Customers enter information describing their business: its description, industry, locations, products and services, audience, brand voice, preferred and prohibited language, selling points, and objectives. Customers also upload photos and video to a private content library.

This information is used to operate the service and to generate draft content for that business. It is not shared with other customers and is not used to build products for anyone else.

A customer may choose to connect third-party accounts. Nothing is connected without an explicit authorization by someone who controls that account, and a connection can be revoked at any time.

• Google Business Profile. Business listing details, locations, posts, and customer reviews, so reviews can be displayed and answered and profile information kept current.
• Google Search Console. Aggregate search performance for the business's own website — clicks, impressions, average position, and the queries it appears for — used to report on and improve search visibility.
• Facebook and Instagram (Meta Platform Data). When a customer connects Meta, we receive: the Facebook Pages their login manages (Page name, ID, and category), any linked Instagram professional account (ID and username), access tokens for the Page the customer explicitly selects, the list of permissions actually granted, Page follower and fan counts, and — for posts published through EC Presence — the post ID and the engagement information Meta reports for those posts.

We use Meta Platform Data only to provide the features the customer connected it for: showing which Page and Instagram account are linked, verifying the connection is healthy, publishing content the customer created and approved, and reporting how that content performed. We do not use it for advertising, we do not combine it across customers, we do not use it to train AI models, and we do not sell or license it to anyone. It is shared only with the service providers listed in section 12, who process it on our instructions to host and operate EC Presence.

Access tokens for connected accounts are encrypted by our application before they are stored, and they live in a restricted area of our database that application users cannot reach, on infrastructure that also encrypts data at rest. Tokens are never shown in the browser. We request the narrowest permissions each feature requires, and we never post anything that a person has not explicitly approved inside EC Presence.

EC Presence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is:

• Used only to provide and improve the features the customer connected it for.
• Never sold, and never transferred to third parties except as required to provide those features, for security purposes, or to comply with applicable law.
• Never used for advertising.
• Never read by a human, except with the customer's explicit consent, for security or abuse investigation, to comply with applicable law, or where the data has been aggregated and anonymized.

EC Presence uses strictly necessary cookies to keep you signed in. These are scoped to presence.ecproductlab.com only and are not shared with ecproductlab.com.

EC Presence uses AI to draft review replies and social content. To do this, the business information described in section 7 — and the text of the review or the brief being responded to — is sent to our AI provider to generate a draft.

Drafts are always reviewed and approved by a person before anything is published to a public profile. There is no setting that publishes AI-generated content unattended.

We use providers that do not train their models on data submitted through their business APIs. We do not use customer data to train any model of our own.

You can remove data at any time, at three levels:

• Disconnect an integration. Removing a Google or Meta connection in EC Presence deletes the stored access tokens and stops all further syncing. You can also revoke access directly in your Google account or Facebook business integrations. Removing EC Presence there clears the stored Meta access tokens automatically.
• Automated Meta data deletion. If you file a data deletion request through Facebook, Meta notifies us automatically and we delete the stored access tokens, account identifiers, and granted permissions for your Meta login. Meta shows you a confirmation code and a status link where you can verify the request completed. Records of posts your business itself published through EC Presence are kept as ordinary business records.
• Delete specific content. Uploaded media, drafts, and business profile information can be deleted inside the platform.
• Delete everything. Email hello@ecproductlab.com from the address associated with your account, with the subject line “Data Deletion Request”. We will confirm your identity, delete your account and its associated data, and confirm in writing within 30 days.

When an account is deleted, data synced from Google or Meta is removed from our systems. Backups are purged on their normal rotation, within 90 days. Records we are legally required to keep are retained only for as long as the law requires.

We rely on a small number of providers to operate our services. Each processes information only on our behalf, under its own privacy and security commitments:

• Vercel — website and application hosting.
• Supabase — database, authentication, and file storage for EC Presence, hosted in the United States.
• Anthropic — AI content generation, as described in section 10.
• Email and form delivery — to receive and reply to inquiries.

We do not sell personal information, and we do not share it with advertisers. Links to external websites, including our products VenueCore and ChairBack, are governed by those sites' own policies.

You can request access to, correction of, or deletion of the personal information we hold about you by emailing hello@ecproductlab.com. Depending on where you live, you may have additional rights under applicable privacy laws, including the right to object to processing or to request a copy of your data in a portable format.

Our website and EC Presence are intended for businesses and adults. We do not knowingly collect information from children under 13.

We may update this policy from time to time. The effective date above reflects the latest revision. If we make a material change to how EC Presence handles connected-account data, we will notify account holders directly.

Questions about this policy can be sent to Ericsupply LLC at hello@ecproductlab.com.