Privacy Policy

1. Who We Are

on/special is an AI-powered social media automation service for bars and restaurants. The service is operated by Gram Strategy LLC, located in Park Ridge, Illinois. If you have any questions about this policy, contact us at jill.inglis@gramstrategy.com.

2. Information We Collect

We collect information in the following ways:

• Contact information — your name, mobile phone number, and email address when you sign up or interact with our service
• Business information — your venue name, type, location, website URL, and social media handles
• SMS message content — the text messages you send to and receive from on/special, including your daily specials and any instructions or feedback you provide
• Photos and media — food, drink, and venue photos you send via MMS during onboarding or ongoing use
• Brand information — colors, voice, tone, and other brand attributes we extract from your website or social profiles
• Usage data — information about how you interact with the service, including post approval patterns and publishing history
• Customer SMS lists — if you voluntarily provide us with a list of your customers' phone numbers for SMS marketing purposes

3. How We Use Your Information

We use the information we collect to:

• Provide the on/special service — generate, review, and publish social media content on your behalf
• Set up and maintain your brand kit, image library, and publishing schedule
• Send you daily SMS check-ins and post previews for your approval
• Send your daily specials to your customer SMS list, if you have provided one
• Improve the quality and accuracy of AI-generated content over time
• Communicate with you about your account, service updates, and pilot feedback
• Comply with legal obligations

We do not use your information for advertising purposes, and we do not sell your data to third parties.

4. SMS Messaging

By signing up for on/special, you expressly consent to receive automated SMS messages from on/special related to your social media content management. These messages include daily check-ins asking for your specials, post previews for your approval, confirmations, reminders, and service notifications.

Message frequency varies based on your chosen check-in schedule (daily, every other day, etc.). Standard message and data rates may apply.

To opt out: Reply STOP at any time to unsubscribe from all messages. Reply SUPPORT for assistance. After opting out, you will receive one final confirmation message.

Your consent to receive SMS messages is not a condition of purchase or use of any goods or services.

5. Information Sharing

We share your information only in the following limited circumstances:

• Service providers — we use third-party services to operate on/special, including Twilio (SMS delivery), Supabase (data storage), Anthropic (AI content generation), and social media platforms (content publishing). These providers only receive the information necessary to perform their specific function.
• Social media platforms — when you connect your social accounts, we share post content with those platforms (Instagram, Facebook, TikTok, Google Business) on your behalf and with your approval.
• Legal requirements — we may disclose information if required by law, court order, or other legal process.
• Business transfers — if Gram Strategy LLC is acquired or merges with another company, your information may be transferred as part of that transaction.

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Meta Platform Data (Facebook and Instagram)

When you connect your Facebook or Instagram account to on/special, we receive and store the following data from Meta:

• An access token that authorizes us to publish content on your behalf
• Your Facebook Page ID and/or Instagram account ID
• Your public username or handle

We use this data solely to publish approved posts to your connected accounts. We do not access your followers, messages, ad data, or any other Meta platform data beyond what is necessary to publish content.

Token storage: Access tokens are stored securely and are used only to publish content you have explicitly approved. Tokens are refreshed automatically and revoked when you disconnect your account.

Data deletion: You can request deletion of all Meta-related data we hold by emailing jill.inglis@gramstrategy.com. You can also submit a data deletion request directly through Facebook's apps and websites settings. When we receive a deletion request, we will remove your access tokens, page IDs, and associated account data within 30 days.

Our data deletion callback URL for Meta's platform is: https://on-special.vercel.app/api/auth/facebook/data-deletion

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the service. If you cancel or stop using on/special, we will retain your data for up to 90 days before deleting it, unless we are required to retain it longer by law.

Post content, publishing history, and analytics data may be retained in anonymized or aggregated form for service improvement purposes.

8. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), secure cloud storage, and restricted access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of SMS messages at any time by replying STOP
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at jill.inglis@gramstrategy.com. We will respond within 30 days.

10. Children's Privacy

on/special is intended for use by business owners and operators aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active users via SMS or email. Your continued use of on/special after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact:

Gram Strategy LLC
Park Ridge, Illinois
jill.inglis@gramstrategy.com