Privacy Policy

1. Legal Identity and Scope

This Privacy Policy applies to Grable Auction Inc., operating as Zynous ("Zynous", "we", "us", or "our"), a corporation registered in Canada. Zynous provides SaaS-based social media analytics, reporting, and content processing services to clients located in Canada and the United States. This Policy governs how we collect, use, store, disclose, and protect information in connection with our services.

2. Nature of Our Role

Zynous operates strictly as a data processor when providing services to clients. Clients remain the data controllers of their respective social media accounts and associated content. We access and process information solely to provide contracted SaaS services and do not assume ownership of client data.

3. Information We Collect and Process

When clients authorize API or partner access, we may collect and store:

• Social Media Page IDs
• Analytics and performance metrics
• Post content (text, captions, timestamps, engagement metrics)

We do NOT collect or store:

• Social media login credentials
• Usernames or passwords
• Direct OAuth access tokens (when partner access is used)

We only collect information necessary to provide analytics and reporting services.

4. Method of Data Collection

Data is collected exclusively through authorized API integrations or business partner permissions granted directly by clients via official platform tools (such as Meta Business Manager or LinkedIn partner access). Clients represent and warrant that they have full authority to grant such permissions.

5. Purpose of Processing

We process collected data solely to:

• Provide analytics dashboards and performance insights
• Evaluate and analyze social media performance
• Support reporting and SaaS platform functionality
• Communicate service-related information to clients

We do not sell, rent, trade, or use client data for advertising or unrelated purposes.

6. Data Storage and Infrastructure

All client data is hosted on Amazon Web Services (AWS) in the us-east-1 region (United States). Security measures include:

• Encryption at rest
• Encryption in transit (HTTPS/TLS)
• Restricted internal access
• Secure cloud infrastructure

We rely on AWS security controls consistent with industry standards.

7. Access Controls and Internal Security

Access to client data is strictly limited to authorized internal developers. There is no public-facing admin dashboard. Administrative systems operate locally and require JWT-based authentication. Internal access is limited to personnel with a legitimate operational need.

8. Data Retention

Client data is retained indefinitely unless a written deletion request is submitted. Upon verified request, data will be securely deleted within a commercially reasonable timeframe. We do not automatically purge data at fixed intervals at this time.

9. Client Rights

Clients may request:

• Deletion of stored data
• Clarification regarding stored information
• Confirmation of processing activities

Zynous does not currently provide automated data export functionality. All rights requests must be submitted in writing.

10. International Data Transfers

Because our hosting infrastructure is located in the United States, data may be transferred outside of Canada. By engaging our services, clients consent to cross-border transfer and processing consistent with applicable Canadian and United States laws.

11. Third-Party Service Providers

We utilize trusted third-party providers to support operations, including:

• Amazon Web Services (hosting infrastructure)
• Google services (Gmail, Google Docs, Google Sheets) for internal workflow and client communication

These providers operate under their own privacy and security policies.

12. Security Incident Response

In the event of a confirmed data breach affecting client data, Zynous will:

• Investigate the incident promptly
• Take reasonable steps to mitigate harm
• Notify affected clients without undue delay
• Provide relevant remediation information when available

13. Limitation of Scope

This Privacy Policy applies only to data processed through our SaaS services. It does not apply to third-party platforms such as Instagram, Facebook, or LinkedIn, which operate under their own privacy policies.

14. Governing Law

This Privacy Policy is governed by applicable laws of Canada and applicable federal and state laws of the United States where clients are located.

15. Updates to This Policy

We may update this Privacy Policy periodically. Updated versions will be posted on our website with a revised effective date. Continued use of our services constitutes acceptance of any revisions.

16. Contact Information

Grable Auction Inc. (operating as Zynous). Clients may contact us through our official website at https://zynous.com for privacy-related inquiries.