Legal/Privacy Policy
Obelisk respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
- Account Information: Name, email, and other details you provide when registering.
- Usage Data: How you use Obelisk, including analytics and cookies.
- Communications: Messages or feedback you send us.
- AI Content Data: Prompts, generation parameters, and content you create using our AI tools.
- Brand Data: Brand identity information including logos, colors, fonts, guidelines, and product catalogs.
- Media Uploads: Images, videos, and other media you upload to our platform.
- TikTok Account Data: When you connect your TikTok account, we collect your TikTok Open ID (unique identifier), display name, avatar, and basic profile information (follower count, verification status), as well as OAuth access and refresh tokens.
- Instagram Account Data: When you connect your Instagram account, we collect your Instagram User ID, username, profile picture, account type, follower/following counts, and engagement metrics. If you enable messaging features, we may access message content and conversation history.
- Facebook Ads Data: When you connect your Facebook ad account, we collect ad campaign information, performance metrics (impressions, clicks, spend), and associated creative assets.
- Facebook Page Data: When you connect via Facebook, we collect your Facebook Page name, ID, page access tokens, linked Instagram Business account information, and page engagement metrics.
2. How We Use Your Information
- To provide and improve our Services
- To respond to your requests and support needs
- To send important updates and communications
- For security, analytics, and legal compliance
- To generate AI-powered content based on your inputs and preferences
- To enable workspace collaboration and team features
- To enable you to publish content to your TikTok profile when you connect your TikTok account
- To display your TikTok account information within our platform
- To maintain your connection to TikTok across sessions
- To publish content to your Instagram account when you initiate posting
- To display your Instagram profile information and analytics within Obelisk
- To enable you to view and respond to Instagram messages (when messaging is connected)
- To create, manage, and analyze Facebook ad campaigns on your behalf
- To maintain your connection to Meta platforms across sessions
3. Sharing Your Information
We do not sell your personal information. We may share data with trusted third-party service providers as needed to operate Obelisk, or if required by law.
Third-party providers include: Clerk (authentication), Google Cloud (AI image/video generation), OpenAI (AI image generation), TikTok (content publishing when you connect your account), Meta/Instagram (content publishing, messaging, and ad management), and payment processors.
4. TikTok Integration
TikTok API Scopes Disclosure
When you connect your TikTok account, we request the following permissions:
- user.info.basic: To read your basic profile information
- video.publish: To directly post content to your TikTok profile
- video.upload: To upload content as drafts for your review
Data Storage and Security
- TikTok access tokens are encrypted and stored securely
- We do not share your TikTok credentials with third parties
- Tokens are automatically refreshed and old tokens are deleted
TikTok Data Retention
- TikTok connection data is retained while your account is active
- Upon disconnection, your TikTok tokens are immediately deleted
- You can disconnect your TikTok account at any time from Settings
Your TikTok Rights
You have the right to:
- Disconnect your TikTok account at any time
- Request deletion of your TikTok connection data
- Access information about what data we store from TikTok
Third-Party Data Sharing
We do not sell or share your TikTok data with third parties. Your content is only sent to TikTok when you explicitly initiate a publish action.
International Data Transfers
Your TikTok data may be stored on servers in the United States. We ensure appropriate safeguards for international data transfers.
5. Meta Platform Integration
Obelisk integrates with Meta platforms (Instagram and Facebook) to enable content publishing, messaging, and advertising capabilities. This section explains how we handle data from these integrations.
5.1 Instagram Integration
Instagram Account Data Collected
When you connect your Instagram Business or Creator account, we collect:
- Instagram User ID (unique identifier)
- Username and display name
- Profile picture URL
- Account type (Business or Creator)
- Follower and following counts
- Media count and biography
- Engagement metrics (reach, impressions, interactions)
- OAuth access tokens (encrypted)
- If you enable messaging features: message content, sender information, and conversation history
Instagram API Permissions Disclosure
When you connect your Instagram account, we request the following permissions:
| Permission | What It Allows | How We Use It |
|---|---|---|
| instagram_business_basic | Read your Instagram profile | Display your account info in Obelisk |
| instagram_business_content_publish | Post content to your feed | Publish images, videos, reels, carousels |
| instagram_business_manage_comments | Read and reply to comments | Enable comment moderation features |
| instagram_business_manage_insights | Access engagement analytics | Show reach, impressions, engagement metrics |
| instagram_business_manage_messages | Read and send Instagram DMs | Respond to customer inquiries |
Instagram Messaging and Human Agent Disclosure
Important: When you use Obelisk to manage Instagram messages, human agents (you or your team members) may view and respond to messages from Instagram users. Message content, sender information, and conversation history are accessible to authorized users within your Obelisk workspace. We store message data to enable you to manage conversations across sessions.
Instagram Data Storage and Security
- Instagram access tokens are encrypted and stored securely
- We do not share your Instagram credentials with third parties
- Tokens are automatically refreshed and old tokens are deleted
- Message data is encrypted at rest and in transit
Instagram Data Retention
- Instagram connection data is retained while your account is active
- Upon disconnection, your Instagram tokens are deleted
- Message history is retained for a limited period after disconnection to support any pending inquiries, then deleted in accordance with our data retention practices
- You can request immediate deletion of all Instagram data at any time
Your Instagram Rights
You have the right to:
- Disconnect your Instagram account at any time from Settings
- Request deletion of your Instagram connection data
- Access information about what data we store from Instagram
- Request a copy of your Instagram data stored by Obelisk
5.2 Facebook Ads Integration
Ad Account Data Collected
When you connect your Facebook ad account, we collect:
- Ad account ID and name
- Campaign, ad set, and ad information
- Ad performance metrics (impressions, clicks, spend, conversions)
- Audience insights (aggregated, non-personally identifiable)
- Creative assets associated with ads
Facebook Ads Permissions Disclosure
When you connect your Facebook ad account, we request the following permissions:
| Permission | What It Allows | How We Use It |
|---|---|---|
| ads_read | View your ad campaigns and performance | Display ad analytics and reports |
| ads_management | Create and modify ad campaigns | Create, pause, update, or delete ads |
How Ad Data is Used
- Display ad campaign performance in the Obelisk dashboard
- Enable creation and management of ad campaigns
- Provide analytics and optimization recommendations
- We never use your ad data for our own advertising purposes
Ad Data Retention
- Ad account connection data is retained while your account is active
- Upon disconnection, ad account tokens are deleted
- Historical ad performance data is retained for reporting purposes, then deleted in accordance with our data retention practices
- You can request immediate deletion of all ad data at any time
5.3 Facebook Page Data
Page Data Collected
When you connect via Facebook, we collect the following page-related data:
- Facebook Page ID and name
- Page access tokens
- Linked Instagram Business accounts
- Page engagement metrics
Facebook Page Permissions Disclosure
We request the following page-related permissions:
| Permission | What It Allows | How We Use It |
|---|---|---|
| public_profile | Read your Facebook public profile | Display your identity in Obelisk |
| pages_show_list | List Facebook Pages you manage | Let you select which pages to connect |
| pages_read_engagement | Read Page engagement data | Display engagement metrics and analytics |
| business_management | Manage business assets | Access business account information |
5.4 Meta Platform Compliance
Prohibited Practices
In compliance with Meta Platform Terms (Section 3.a), we do NOT use data obtained through Meta Platform APIs to:
- Discriminate against individuals based on race, ethnicity, religion, age, sex, sexual orientation, gender identity, disability, or other protected characteristics
- Make eligibility determinations for housing, employment, credit, insurance, education, or government benefits
- Conduct surveillance or track individuals for law enforcement purposes
- Sell, license, or purchase Platform Data
- Build or augment user profiles without valid consent
Links to Meta Policies
For more information about how Meta handles your data, please review:
6. Cookies & Tracking
Obelisk uses cookies and similar technologies to analyze usage and enhance your experience. You can adjust your browser settings to refuse cookies.
7. Data Security
We use industry-standard security measures to protect your data. However, no system is 100% secure.
8. Your Rights
You may access, update, or delete your personal information by contacting us. You can also unsubscribe from marketing emails at any time.
9. Data Retention
We retain your information as long as needed to provide our Services and meet legal obligations.
10. Children's Privacy
Obelisk is not intended for children under 13. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy. Significant changes will be communicated. Continued use of Obelisk means you accept the new policy.
12. Contact
For privacy questions or requests, email us at jonathan@sensionai.com.