This policy explains what GSD Consultants, LLC collects, why, how long we keep it, and how to have it deleted. It covers our website and our social media publishing service, including everything we access through Meta (Facebook and Instagram), TikTok and LinkedIn.
Who we are
GSD Consultants, LLC is an Arkansas limited liability company. We are the data controller for the information described here.
GSD Consultants, LLCCave Springs, Arkansas
United States
seansmith.gsd@gmail.com
501-278-7782
What our publishing service does
Our social media publishing service posts images to the accounts a customer chooses and connects: their own Facebook Page, Instagram professional account, TikTok account, and LinkedIn profile or company Page, on a schedule the customer sets. The customer uploads the images through our client portal. We publish them. That is the entire function of the service.
On Facebook, Instagram and TikTok, our application appears under the name ANGM by GSD Consultants, LLC. On LinkedIn it appears as ANGM by GSD Consultants, LLC (for profiles) and ANGM by GSD Consultants, LLC - Pages (for company Pages).
We do not read direct messages. We do not post comments or replies. We do not follow, unfollow or like anything on a customer's behalf. We do not collect data about a customer's followers or about anyone who interacts with their posts.
Information we collect
Information you give us
- Your name, business name, email address and phone number, so we can set up your account and contact you.
- Your client portal login: your email address and a password you choose. We store only a salted, one-way hash of your password, never the password itself.
- The images you upload for publication, and any captions you write for them. When you upload an image, it is resized and, if needed, padded with a solid border so it fits Instagram's size requirements. Images are never cropped.
- Your posting schedule and preferences, including which tools you post to.
- While Meta's review of our app is pending, the link to your personal Facebook profile, so we can add you as a tester of our app. We use it for nothing else.
- If you were referred by someone or signed up through a GSD salesperson, who referred you or sold to you, so we can credit them.
Information from Meta, when you connect your account
When you authorize our application through Instagram or Facebook, Meta gives us an access token and a limited set of data. Specifically:
| Permission | What we receive and why |
|---|---|
instagram_basic |
Your Instagram professional account's numeric ID and username. We use these to identify which account to publish to. |
instagram_content_publish |
Permission to publish images to your account. This permission is how the service works. |
pages_show_list |
The list of Facebook Pages you manage, used only to find the Page linked to your Instagram professional account. |
pages_read_engagement |
Confirmation that your Facebook Page is connected to your Instagram account. Required by Meta to establish the link between the two. |
pages_manage_posts |
Permission to publish your images to your Facebook Page. Used only if you turn on Facebook posting in your portal settings. |
We also store the access tokens Meta issues: one for your Facebook account and one for the Facebook Page you select. The tokens are what allow us to publish on your behalf. Meta sets how long they last; when one is close to expiring, you may be asked to reconnect through the portal. We delete them when you cancel.
We do not receive or store your Instagram or Facebook password. Meta never gives it to us.
Information from TikTok, when you connect your account
| Permission | What we receive and why |
|---|---|
user.info.basic |
Your TikTok account's ID, display name and avatar, so the portal can show which account is connected. |
video.upload, video.publish |
Permission to post your images to your TikTok account. We also read the posting options TikTok offers for your account (such as who can see a post) so you can choose them in the portal. |
We store the access and refresh tokens TikTok issues, encrypted. We do not receive your TikTok password.
Information from LinkedIn, when you connect your account
| Permission | What we receive and why |
|---|---|
openid, profile |
Your LinkedIn member ID and name, so the portal can show which profile is connected. |
w_member_social |
Permission to post your images to your LinkedIn profile. |
r_organization_admin |
The list of LinkedIn company Pages you are an admin of, used only so you can pick the Page to post to. |
w_organization_social |
Permission to post your images to the company Page you choose. |
We store the access tokens LinkedIn issues, encrypted. We do not receive your LinkedIn password.
Payment information
Invoices and payments are handled by Intuit QuickBooks. We send QuickBooks your name, business name and email so it can create your customer record and email your invoices. Your card or bank details are entered directly with QuickBooks and are never transmitted to or stored on our systems. We keep a record of what you were billed and whether it was paid.
Website visitors
Our website and client portal are served through Cloudflare, which records standard server request data such as IP address, browser type and the pages requested. We use this only to keep the site running and secure. The client portal sets one cookie, which keeps you logged in for up to 14 days. We do not use advertising cookies and we do not track visitors across other websites.
How we use information
- To publish your images to the accounts you connect, on your schedule.
- To keep a record of which images have been published and when, so the same image is not repeated too soon.
- To contact you about your account, a service problem, or billing.
- To bill you for the service, and to pay commissions to the salesperson who sold it, if any.
- To notify us when you sign up or ask to be added as a tester, so we can help you finish setup.
We do not sell your information. We do not share it with advertisers. We do not use your images, captions or account data to train machine learning models. We do not use your data for any purpose other than delivering and billing for the service you signed up for.
Who we share information with
We share only what is necessary, and only with these parties:
- Meta Platforms, TikTok and LinkedIn — we send your images and captions to the platforms you connect, in order to publish them. That is the point of the service.
- Cloudflare — our hosting and storage provider. Your images and account records are stored on Cloudflare infrastructure in the United States.
- Intuit QuickBooks — creates and emails your invoices and processes your payments.
- Google — when you sign up or ask to be added as a tester, your name, business name, email, phone and the tools you picked are sent to us by email through Google, so we know to help you. We also send you account emails through Google: a copy of your renewal terms after you sign up, a yearly reminder, and notices before your plan renews or its price changes.
We may also disclose information if required by law, or to protect our rights or the safety of others.
How long we keep it
| Access tokens | Deleted within 7 days of cancellation, or immediately on request. |
|---|---|
| Your images and captions | Deleted within 30 days of cancellation, or immediately on request. |
| Client portal login | Deleted within 30 days of cancellation. Login sessions expire after 14 days. |
| Posting history | Deleted within 30 days of cancellation. |
| Contact and billing records | Retained up to 7 years, as required for tax and accounting. This includes the record of your agreement to the Terms and the automatic renewal terms, and copies of the account emails we sent you, kept at least 3 years or 1 year after your plan ends, whichever is longer. |
How to delete your data
You can remove our access yourself at any time, without contacting us. Revoking access stops publishing to that platform immediately. Step-by-step instructions for Facebook, TikTok and LinkedIn are on our Data deletion page.
To have your stored data deleted, email seansmith.gsd@gmail.com with the subject line "Delete my data" from the email address you use to log in to the portal. We will delete everything except the billing records we are legally required to keep, and confirm to you by email within 30 days.
Security
Access tokens are stored encrypted and are not kept on personal computers or in shared documents. Portal passwords are stored only as salted one-way hashes. Access is limited to the people who operate the service. No system is perfect, and we do not claim otherwise. If a breach affects your data, we will tell you.
Your rights
Wherever you live, you may ask us what we hold about you, ask us to correct it, or ask us to delete it. Email the address above. If you are in a jurisdiction with specific statutory privacy rights, such as the European Economic Area, the United Kingdom or California, we will honor those rights whether or not they apply to us by law.
Children
This service is for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from children.
Changes to this policy
If we change this policy in a way that affects how we handle your information, we will email customers before the change takes effect and update the date at the top of this page.
Questions
Email seansmith.gsd@gmail.com or call 501-278-7782.