8digit Creative LLC
Privacy
Version 2026-11-10.data-protection-1 · November 10, 2026
Who we are
8digit Creative LLC operates 8digit Planner (“Planner”), a service for planning, reviewing, approving and publishing social media content, and is responsible for the personal data described here. Workspace Owners decide what their workspace holds and who can access it; we process that content to provide Planner to them. Questions and requests: franco@8digitcreative.com.
Information we collect
Account: your name, email address and whether it is verified, a password hash when you sign in with email, and your Google account ID, name, email and profile picture when you sign in with Google; that picture loads from Google. Workspace: memberships, roles, assigned brands and permissions, invitations and Activity records. Content: uploaded files and their versions, captions, comments, annotations, approvals and folders. Billing: your plan, billing references and payment status; full card details stay with the payment processor. Preferences: notification and email choices and, if you turn on WhatsApp notices, your phone number and the consent you gave. Usage and technical data: the usage events described below, an estimated country at sign-up, and server logs with IP addresses and request details.
How we use it
We use this information to run Planner: to sign you in, show each person only the workspaces, brands and content they may access, store and deliver files, process video for playback, send the notices you choose, bill subscriptions, publish to connected accounts and answer support requests. We also use it to protect the service, with rate limits, abuse prevention and audit records, and to improve it through aggregate reporting. Opening a post is not an approval. We do not sell personal data or use it for advertising.
Usage events
Planner records product usage events: the steps of signing in, signing up and the free trial (such as verifying an email, creating a brand or a post, uploading a file, sharing for review or opening Checkout), steps taken in Get started, and a daily count of the tools each connected AI app calls. Each event keeps the step, when it happened, how you arrived (for example, an invitation or a shared link), the device type and your account and workspace when they exist. It never keeps your IP address, browser details, email or what you typed. We use these events only to see where people get stuck and which features are used. They stay in Planner's own database, are not shared with third parties and are deleted after 180 days. How an account first arrived is also kept with the account record.
Estimated country
When an account is created we estimate the country of the connection from its IP address, using a geolocation database stored on our own servers, for aggregate sign-up reporting. No IP address is sent to another company for this, the country record does not keep the IP address, and the estimate may reflect a VPN or proxy.
Emails
We send service emails, such as sign-in codes, invitations, review requests, approvals and billing notices, through a transactional email provider. It receives each email's recipient and content, which can include names, workspace, brand and post titles, links and a small preview of the content, and it keeps a contact list with your email, first name and email preferences. The Terms include product news and promotional emails from 8digit Planner; you can turn them off in Notifications or unsubscribe from any promotional email, and we keep that choice so we do not email you again. Links in our emails pass through the email provider's click tracking, which records that a link was opened, and when you open Planner from one of our emails while signed in, we record which email it was. We do not use open-tracking pixels, and we do not add client reviewers to an agency's marketing list.
AI features
When someone asks for an AI-generated caption, Planner sends what that caption needs to an AI model provider: the image or frames of the video, a transcript of its audio, the brand's name and caption style, and examples or screenshots added to that style. Our video processing provider produces the transcript, and short audio clips may go to the AI model provider to detect the language. When someone asks for an AI image edit, Planner sends the image, the marks drawn on it and the instructions. These providers process the data to return the result. AI apps you connect to Planner yourself, through its connector or API, receive only what your connection allows them to read, under your own agreement with that app. If you allow it on that connection, that includes the follower counts and post metrics you can see in Planner for the brands you connected, and Planner sends them only to that app.
WhatsApp notices
WhatsApp is optional. You add your own number in Notifications and confirm it with a code we send there; if you pay for a plan, Checkout also asks for a phone number, which we only suggest for this. Once confirmed, a WhatsApp messaging provider receives your number, your sign-in codes and each notice you chose: the post or file title, the brand, a small preview image, the publish date for approval reminders and a link back to Planner. Notices never include files, comments or approval buttons. Reply STOP or remove your number in Notifications to turn WhatsApp off.
Payments and review access
Stripe processes payment information on its checkout page. Planner stores billing references and service status. Reviewers receive access only to explicitly shared posts or granted review weeks; review access does not include the media library or original-file downloads. Media displayed on a device can still be copied or recorded by its user.
Connected social accounts
In Social accounts, an authorized team member, or the account's owner through a connection link from the workspace, can connect a brand's Instagram professional account, Facebook Page, Threads profile or TikTok account through Instagram, Facebook, Threads or TikTok login. From Meta and TikTok we use what publishing and its results need: the account's ID, its username or Page name and its profile picture, to show which account is connected and to choose it on a post, and the list of Pages the person manages, so they can pick one; for a Threads profile, also its follower count, which Threads provides as a profile insight; for a TikTok account, its nickname and the settings TikTok gives for a new post (who can view it, whether comments, Duet and Stitch are turned off, and the longest video), read when a post is prepared and not stored. At a post's scheduled date and time, or when someone selects Publish now, Planner publishes the approved version, or the version the workspace Owner chose to publish without approval, with its files and caption, and keeps the link to the published post. On paid plans and during the free trial, Planner reads once a day how many followers each connected account has, using the access our publishing service provider keeps for it, without storing that access, and keeps only that number for each day to show the workspace's team how the account grows. When a workspace has post metrics, we also read the metrics of the posts Planner published for that account (views, reach, likes or reactions, comments or replies, shares, reposts, quotes, saves or favorites and, for Reels, Stories and TikTok videos, average watch time) to show them to the workspace's team on each post and in Performance. We read them a few times in the 30 days after publishing and keep only those numbers; other figures in the response, such as video view time by age, gender or country, are discarded without being stored or shown. Follower counts and post metrics are kept while the account and the post exist in the workspace. We never compare one customer's data with another customer's. We do not read messages, the text of comments, who follows an account, account-level insights other than the follower count or ads data. We do not sell this data or use it for advertising, and we share it only with the service providers described in this notice and, if a team member allows it on their own connection, the AI app they connected to Planner. A connected account's profile picture can also become its brand's photo in Planner: when a team member who manages brands chooses it in Brand settings, or, while the brand has no photo of its own, its Instagram account's picture or else its Facebook Page's. Planner then keeps a copy of that picture as the brand's photo, seen only within the workspace.
Disconnecting and removing a social account
Disconnect stops publishing to the account, and reading its followers and post metrics, and disconnects it at our publishing service provider; the figures already read stay. The account stays in Social accounts, greyed out with its username and picture, so it can be reconnected. Remove account disconnects it if it is still connected and deletes the username and picture Planner keeps for it in Social accounts, and any copy used as its brand's photo, with its follower counts and its posts' metrics; the workspace's Activity keeps its record of who connected, disconnected or removed the account. For up to 30 days after an account is connected, on any plan, we keep a one-way code made from its network and username, never the username itself, and then delete it. On the Free plan, that code is what keeps the account's place for those 30 days. You can also remove 8digit Planner's access from your Instagram, Facebook, Threads or TikTok settings, or ask franco@8digitcreative.com to delete the data of a connected account, including those Activity records. Encrypted database backups that still contain it expire within seven days. Posts already published stay on the network; delete them there.
YouTube
Planner uses YouTube API Services to publish to the YouTube channels a workspace connects, so Google's Privacy Policy also applies: https://policies.google.com/privacy. From YouTube we use the channel's ID, name and profile picture, to show which channel is connected and to choose it on a post, and each video's link and status after it is published. We upload to the channel the file, title and caption of the posts your team schedules, with the visibility and audience you choose. Our publishing service provider keeps the access Google gives and uses it to upload. With that access, each published video's views, likes, comments, shares and average watch time are read from YouTube's Data and Analytics APIs several times during its first 30 days, and shown only to the workspace, or to an AI app a team member connected and allowed to read them, apart from other networks' figures. Once a week Planner uses that access, without storing it, to read the channel's name, picture and subscriber count again and to learn whether access was withdrawn; if a channel hides its subscriber count, Planner shows none. At least every 30 days it checks that each video with figures still exists, and deletes the figures of those that don't. We do not read the text of comments, who commented or liked, or the channel's other videos, we share this data with no one but that provider and that AI app, and we do not use it for advertising. Unlike other accounts, a channel disconnected from Social accounts does not keep its name, picture, subscriber counts or figures, and Activity and a post's links say YouTube without naming the channel. If you disconnect or remove a channel, or withdraw access, Planner deletes its name, picture, any copy of the picture used as its brand's photo, subscriber counts and figures within seven days. You can withdraw access at any time from Google's security settings: https://security.google.com/settings/security/permissions. For questions, write to franco@8digitcreative.com. 8digit Planner's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.
X
Planner publishes to the X accounts a workspace connects, through our publishing service provider, which keeps the access X gives and uses it to publish. From X we use the account's ID, username and profile picture, to show which account is connected and to choose it on a post, and each post's link after it is published. We send X the files and the caption, or the X caption, of the approved version. With that access, used for each read and not stored, Planner reads each published post's views, likes, replies, reposts, quotes and saves at about 24 hours and 7 days, and the account's follower count about once a week, and shows them only to the workspace, or to an AI app a team member connected and allowed to read them. They stay until the post or the account is removed from Planner. We do not read an X account's messages, the text of its replies, or who liked or reposted, and we do not use this data for advertising. You can remove 8digit Planner's access from your X settings at any time. The rest of this notice about connected accounts, disconnecting and removing them applies too.
Planner publishes to the LinkedIn profiles and Pages a workspace connects, through our publishing service provider, which keeps the access LinkedIn gives and uses it to publish. From LinkedIn we use the ID, name and picture of the profile or Page, to show which one is connected and to choose it on a post, and each post's link after it is published. We send LinkedIn the files and the caption of the approved version. With that access, used for each read and not stored, Planner reads the profile's or Page's follower count and each published post's views, reach, likes, comments, shares and, on a Page, clicks, and shows them only to the workspace, or to an AI app a team member connected and allowed to read them. About once a week it also reads the name and picture again and learns whether access was withdrawn. We do not read messages, connections, or who liked or commented, and we do not use this data for advertising. Unlike other accounts, a LinkedIn profile or Page disconnected from Social accounts does not keep its name, picture or a copy of the picture used as its brand's photo, and Activity and a post's links say LinkedIn without naming it. If access is withdrawn, Planner deletes its name, picture, any copy of the picture used as its brand's photo, follower counts and figures, and it deletes follower counts and figures one year after they were published or read in any case. You can remove 8digit Planner's access from your LinkedIn settings at any time. The rest of this notice about connected accounts, disconnecting and removing them applies too.
Service providers
We rely on service providers that process data only on our instructions and for the function they serve: a cloud hosting provider runs the application and its database; a cloud storage provider keeps original files and encrypted database backups; a video processing provider encodes and streams video and transcribes audio for captions; a transactional email provider sends email; a payment processor, Stripe, handles checkout, subscriptions and payment methods; an AI model provider generates captions and image edits; a WhatsApp messaging provider sends WhatsApp notices; and our publishing service provider publishes posts to connected social accounts, reads their post metrics on our instructions and keeps their access tokens, which are never stored in Planner's database. Google provides sign-in with Google. We send the complete list of our providers by email to anyone who asks at franco@8digitcreative.com. These providers may process data in the United States and other countries.
Cookies and preferences
Planner sets only its own cookies: the sign-in session (seven days for team members, longer for Guest reviewers) and short-lived cookies, of ten to thirty minutes, that complete a sign-in or an account connection. Browser storage remembers preferences such as your theme, calendar view, selected brand, open folders and the notices you have seen, and session storage keeps steps in progress, such as an invitation being accepted or an AI caption being prepared. Planner uses no advertising or analytics cookies. Signing out or clearing browser data may remove some local preferences; it does not delete your workspace from our servers.
How we protect data
We protect the data in Planner, including information received from Google APIs, with technical and organizational safeguards designed to keep it confidential. We use encryption to protect your information in transit (HTTPS with TLS 1.2 or later) and at rest: stored files are encrypted by our cloud storage provider, and database backups are encrypted. Our database is not reachable from the internet. Passwords, sign-in sessions and API tokens are stored only as one-way hashes, never in plain text. Access tokens for connected social accounts, including YouTube, are kept by our publishing service provider and never stored in Planner's database. Each person sees only the workspaces, brands and content they have been given, and access to production systems is limited to authorized 8digit Creative LLC personnel.
Retention and deletion
We keep a workspace's content while the workspace exists; when a trial or paid plan ends, the workspace continues on Free with its content. Files moved to Trash are permanently deleted after seven days, and AI image edits that are not used after seven days. When a workspace Owner asks us to close a workspace or account, we delete its content and files after verifying the request. Encrypted database backups expire within seven days, so deletion reaches them within that time. Usage events are deleted after 180 days. Billing references, invoices, payment events and purchase consent are kept for accounting, payment disputes and legal obligations. Contact us to ask about or delete a specific record; we will explain any record we must keep.
Your rights and requests
You can ask to access, correct, export or delete your personal data, to close your account, or to stop promotional email, by writing to franco@8digitcreative.com. Workspace Owners control access to their workspace's content, so we may refer a request about that content to them. We verify identity and authority before releasing or changing account information, and contacting support does not give us access to private client content. Do not include passwords, full card details or unrelated client material in your request.
Requests from public authorities
If a government or other public authority asks us for personal data, we review whether the request is lawful, challenge it if it is not, disclose only the minimum information the request requires and document the request and our response.
Changes to this notice
When this notice or the Terms change, the version and date at the top of the page change. A material change, such as using your data for a new purpose you have not agreed to, is asked for separately before it applies to you.