Privacy Policy

1. Who We Are

on/special is an AI-powered social media marketing service for local businesses. The service is operated by Gram Strategy LLC, located in Park Ridge, Illinois. You can contact us at hello@onspecial.app.

2. Information We Collect

We collect information in the following ways:

• Contact information — names, mobile phone numbers, and email addresses provided by business owners, authorized team members, or others who interact with our service
• Business information — your business name, type, location, website URL, and connected social media or business profiles
• SMS and MMS content — messages, instructions, feedback, photos, and other media you send to or receive from on/special
• Brand and website information — colors, voice, tone, business details, publicly accessible website content, and images we obtain from information you provide or from your business website to help establish and maintain your business profile and content library
• Connected account information — identifiers, access tokens, and related information necessary to connect and publish to supported social media and business profiles
• Usage data — information about how you interact with the service, including post creation, revisions, approvals, and publishing history
• Billing and subscription information — if you purchase a paid subscription, we may receive information from Stripe such as your billing contact details, subscription plan, payment status, transaction identifiers, invoices, and limited payment method details. Payment card information entered through Stripe's payment interface is processed by Stripe.

3. How We Use Your Information

We use the information we collect to:

• Provide the On/Special service, including creating posts, processing revisions, requesting approval when applicable, and publishing content to your connected channels according to the applicable publishing workflow
• Set up and maintain your business profile, brand information, photo library, connected accounts, and authorized team members
• Send messages related to post creation, approvals, publishing, account setup, support, and service notifications
• Improve the quality, reliability, and accuracy of the service
• Communicate with you about your account and service updates
• Manage paid subscriptions, process payments through Stripe, provide billing notices and receipts, respond to billing inquiries, and address failed payments or suspected fraudulent transactions when paid plans are available
• Comply with legal obligations

We do not use your information for advertising purposes, and we do not sell your data to third parties.

4. SMS Messaging

on/special is a text-based service. When you sign up or are added as an authorized team member, you may receive SMS messages related to creating and reviewing posts, approvals, publishing, account setup, support, and service notifications.

Message frequency varies based on how you use the service. Standard message and data rates may apply.

To opt out: Reply STOP at any time to unsubscribe from text messages. After opting out, you may receive a final confirmation message. For assistance, contact hello@onspecial.app. You may also reply HELP for assistance, subject to your mobile messaging provider's supported functionality. Stopping SMS messages does not automatically cancel a paid subscription.

5. Information Sharing

We share your information only in the following limited circumstances:

• Service providers — we use third-party services to operate On/Special, including Twilio for SMS and MMS delivery, Supabase for data storage, Anthropic for AI processing, Upstash for supporting application infrastructure, and connected social media platforms for publishing. Information shared with these providers depends on the service being performed and may include messages, business details, images, and information needed to process and publish posts. If you purchase a paid subscription, Stripe will process payments and related billing information. These providers handle information under their applicable service agreements and privacy practices.
• Connected platforms — when you connect supported accounts, we share approved post content and the information necessary to publish it with those platforms, including Instagram, Facebook, and Google Business.
• Connected platforms — when you connect supported accounts, we share content authorized for publication through the applicable On/Special workflow and the information necessary to publish it with those platforms, including Instagram, Facebook, and Google Business Profile.
• Legal requirements — we may disclose information if required by law, court order, or other legal process.
• Business transfers — if Gram Strategy LLC is acquired or merges with another company, your information may be transferred as part of that transaction.

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Meta Platform Data (Facebook and Instagram)

When you connect your Facebook or Instagram account to on/special, we receive and store the following data from Meta:

• An access token that authorizes us to publish content on your behalf
• Your Facebook Page ID and/or Instagram account ID
• Your public username or handle

We use this data to connect your accounts and publish posts according to the applicable On/Special publishing workflow. Posts initiated by business owners are submitted to those owners for approval, while posts initiated by authorized team members may be published without additional owner approval. We do not use Meta account connections to access private messages, advertising data, or follower lists.

Token storage: Access tokens are stored securely and used to maintain connected accounts and publish content according to the applicable publishing workflow, including posts initiated by authorized team members. Tokens may be refreshed to maintain connections and are invalidated or removed from our systems when accounts are disconnected, subject to applicable technical and retention requirements.

Data deletion: You may request deletion of Meta-related information associated with your On/Special account by emailing hello@onspecial.app. You may also submit a request through Facebook's apps and websites settings where available. We review deletion requests and remove applicable connection information and associated personal data, subject to legal, security, and other legitimate retention requirements. Disconnecting an account does not necessarily delete previously created posts, messages, or business records.

Our data deletion callback URL for Meta's platform is: https://on-special.vercel.app/api/auth/facebook/data-deletion

7. Data Retention

We retain personal information for as long as reasonably necessary to provide and maintain On/Special, support connected accounts, maintain service records, protect our systems, and meet legal obligations. Retention periods vary depending on the type of information and the purpose for which it was collected. Account deactivation, stopping SMS messages, and canceling a subscription do not automatically delete all associated information.

When an account is closed or we receive a deletion request, we review the information associated with that account and delete or de-identify information where appropriate, subject to applicable legal requirements, security needs, outstanding disputes, backup retention, and other legitimate retention purposes. When paid subscriptions are available, certain billing and transaction records may need to be retained for accounting, tax, or legal purposes.

We may retain anonymized or aggregated information that does not identify you for service improvement and operational purposes.

8. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), secure cloud storage, and restricted access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of SMS messages at any time by replying STOP
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, email hello@onspecial.app. We will respond within 30 days.

10. Children's Privacy

on/special is intended for use by business owners and operators aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active users via SMS or email. Your continued use of on/special after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact:

Gram Strategy LLC
Park Ridge, Illinois
hello@onspecial.app