Privacy Policy

Welcome to the Zion Noah Social Command Center ("Platform"), operated by Zion Noah Capital ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media content management and lead tracking platform. Please read this policy carefully. By accessing or using the Platform, you agree to the terms described herein.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when using the Platform, including:

• Account registration details (name, email address)
• Business profile information (company name, business type, contact details)
• Social media content (captions, hooks, scripts, post copy, images, videos)
• Lead information you manually enter (name, phone, email, loan type interest, notes)
• Content scheduling data and post metadata
• Follow-up reminders and CRM notes

1.2 Social Media Platform Data

When you connect social media accounts (Instagram, LinkedIn, Facebook, X/Twitter, TikTok, YouTube), we collect and store:

• OAuth access tokens and refresh tokens (encrypted at rest)
• Platform user identifiers and profile information
• Post engagement metrics (likes, comments, shares, saves) you sync to the Platform
• API connection status and permission scopes granted

1.3 Automatically Collected Information

We automatically collect certain technical information, including:

• Log data (IP address, browser type, pages visited, timestamps)
• Session cookies used for authentication and security
• Device and browser information for compatibility purposes

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform and its features
• Authenticate your identity and maintain secure sessions
• Enable social media post scheduling and publishing on your behalf
• Generate AI-powered content suggestions using your selected topics and preferences
• Track and display lead pipeline data and engagement analytics
• Send follow-up reminders and activity notifications you configure
• Improve Platform functionality and user experience
• Comply with applicable laws and regulations in the financial services industry

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Social Media Platforms: When you authorize a connection, we transmit content to the respective platform's API (LinkedIn, Meta, X, TikTok) solely to fulfill your publishing requests.
• AI Services: Content prompts you submit to the AI Assistant are processed by our AI provider to generate responses. No personally identifiable lead data is transmitted to AI services.
• Service Providers: We use trusted infrastructure providers (database hosting, cloud storage) under strict data processing agreements.
• Legal Requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of OAuth tokens and sensitive credentials at rest
• HTTPS/TLS encryption for all data in transit
• Secure, HttpOnly session cookies with CSRF protection
• Role-based access controls limiting data access to authorized users
• Regular security reviews of third-party integrations

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and to notify us immediately of any unauthorized access at [email protected].

5. Social Media Permissions

When you connect a social media account, you grant us permission to act on your behalf within the scopes you authorize. Specifically:

You may revoke these permissions at any time from the Integrations page or directly within each platform's settings.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Platform's services. If you delete your account, we will remove your personal data within 30 days, except where retention is required by applicable law (e.g., financial records related to commercial lending activity). Aggregated, anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data ("right to be forgotten")
• Object to or restrict certain processing activities
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent for any processing based on consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

The Platform uses session cookies strictly necessary for authentication and security. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

9. Children's Privacy

The Platform is intended solely for business use by adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by email notification. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: