Plainsight Partners: Privacy Policy

1. What we collect

• Signing in: the email address of the person signing in (only approved addresses can), and a sign-in cookie that keeps them signed in for up to 30 days.
• Our content:the text, images, videos and music we create or upload to make our posts. Where text is drawn from Hara-K Therapy sessions, it is handled under Hara-K Therapy's own privacy policy: anything that could identify a client is left out, and nothing is published without our check.
• From TikTok, for our own account:when we connect our TikTok account through TikTok's sign-in, TikTok gives us the account's profile identifier, username and display name, access tokens, and permission to publish videos to it. Before each post we ask TikTok for the account's current posting options (such as who may view the video), as TikTok requires. We do not receive the account's password or any other TikTok user's information.
• From Meta, for our own accounts:access tokens for our own Facebook Page and Instagram account, our own posts, and their statistics (such as views, likes and comment counts). These are totals for our posts; the tool doesn't collect other people's profiles or private messages.

2. How we use it

Only to sign in, to create our content, to publish it to our own accounts, and to show us how our own posts are doing. We do not sell information, use it for advertising, or share it with anyone except the service providers below.

3. Service providers

• DigitalOcean (Sydney, Australia), which hosts the tool, its database and its file storage.
• Brevo (European Union), which sends the sign-in code emails.
• Anthropic (United States), whose AI, Claude, helps us draft content; under its commercial terms it does not use our text to train its models.
• Meta (Facebook and Instagram) and TikTok, where we publish our own content.

4. How we store and protect it

The tool runs on DigitalOcean servers in Sydney, Australia, and can only be used by us after signing in. Access tokens for our social media accounts are stored encrypted. Our files are kept in private storage that only the tool can open.

5. How long we keep it

• Sign-ins end after 30 days, or when we sign out.
• TikTok access lasts 24 hours and is renewed automatically while the connection is in use, for up to a year. When a TikTok connection is removed, its tokens are deleted and the permission is withdrawn on TikTok's side too.
• Meta tokens are kept until the connection is removed, then deleted.

6. Removing our platform connections

• TikTok: in the tool, or in the TikTok app (Settings and privacy, Security and permissions, Apps and services).
• Meta: in Facebook (Settings, Business integrations) or Instagram (Settings, Apps and websites).

7. Cookies

The tool only uses cookies it needs to work: one that keeps us signed in, and a short-lived one (10 minutes) used while connecting a TikTok account. There are no analytics or advertising cookies.

8. Children

The tool is not for children and does not collect information about them.

9. Your rights and contact

You can ask to see, correct or delete information we hold about you by emailing sam@hara-k.com.au; we will respond within 30 days. If you are unhappy with how we handled your information, please tell us first; you can also contact the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes

We may update this policy; the date above shows the latest version.