Privacy Policy

JMCB Technology Group ("we," "us," or "our") operates ASCEND Content Manager ("ASCEND" or the "Service"), accessible at https://ascend.jmcbtech.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using ASCEND, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register for an account.
• Profile Information: Optional details such as profile photo, job title, and business description.
• Payment Information: Billing details including name and payment card information, processed securely through Stripe. We do not store your full credit card numbers on our servers.
• User Content: Text, images, videos, voice recordings, and other media you upload or create through the Service.
• Communications: Messages, feedback, and support requests you send to us.

1.2 Information from Connected Social Media Accounts

When you connect social media accounts (TikTok, Instagram, Facebook, LinkedIn, X/Twitter, Threads), we may collect:

• Account profile information (username, display name, profile picture).
• Account authentication tokens (OAuth tokens) required to post and manage content on your behalf.
• Post performance data and analytics (engagement metrics, reach, impressions).
• Follower and audience demographic data as provided by each platform's API.

We only request the minimum permissions necessary to provide the Service. You can review and revoke these permissions at any time through your account settings or directly on each social media platform.

1.3 Information Collected Automatically

• Device Information: Browser type, operating system, device type, and screen resolution.
• Usage Data: Pages visited, features used, timestamps, click patterns, and session duration.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, connect social media platforms, generate and publish content, and process scheduling requests.
• AI Content Generation: Process your inputs (text, voice, images) through AI models to generate, adapt, and optimize content suggestions. Your content inputs may be sent to third-party AI providers for processing.
• Voice Analysis: If you use voice input features, your audio recordings are processed to transcribe and generate content. Recordings are processed in real-time and are not permanently stored unless you explicitly save the resulting content.
• Analytics and Insights: Analyze your content performance and provide recommendations for improvement.
• Process Payments: Handle subscriptions, billing, and payment processing through Stripe.
• Improve the Service: Analyze usage patterns to fix bugs, develop new features, and improve user experience.
• Communicate with You: Send account notifications, service updates, security alerts, and, with your consent, marketing communications.
• Ensure Security: Detect, prevent, and respond to fraud, unauthorized access, and other security threats.

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

3.1 Service Providers

• Supabase: Database hosting, authentication, and file storage.
• Stripe: Payment processing and subscription management.
• AI Providers: Third-party AI services used to power content generation and optimization features. Content inputs are sent for processing and are subject to the AI provider's data handling policies.
• Social Media Platforms: TikTok, Instagram, Facebook, LinkedIn, X/Twitter, and Threads receive content you choose to publish through their respective APIs.
• Analytics Providers: Services that help us understand usage patterns and improve the Service.

3.2 Legal and Safety Disclosures

We may disclose your information if required to:

• Comply with applicable laws, regulations, or legal process.
• Respond to lawful requests from government authorities.
• Protect the rights, property, or safety of JMCB Technology Group, our users, or the public.
• Enforce our Terms of Service.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.

4. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade infrastructure with encryption at rest and in transit. We implement industry-standard security measures, including:

• Encryption of data in transit using TLS/SSL.
• Encryption of sensitive data at rest.
• Secure authentication token storage with automatic token rotation.
• Regular security audits and vulnerability assessments.
• Role-based access controls for internal staff.
• Row-level security policies to ensure users can only access their own data.

While we take reasonable precautions to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as:

• Your account is active and you continue to use the Service.
• Necessary to fulfill the purposes outlined in this Privacy Policy.
• Required to comply with legal obligations, resolve disputes, or enforce agreements.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Published content that has already been posted to third-party platforms is not within our control and is subject to each platform's data retention policies.

Backup copies may be retained for up to 90 days after deletion for disaster recovery purposes, after which they are permanently purged.

5.1 How to Request Data Deletion

You can request deletion of your data at any time through the following methods:

• In-App: Go to Settings > Account > Delete Account. This will permanently remove your profile, posts, analytics, and all associated data within 30 days.
• Email: Send a data deletion request to privacy@jmcbtech.com with the subject line "Data Deletion Request" and we will process it within 30 days.
• Facebook/Instagram: When you remove ASCEND from your Facebook or Instagram account settings, we receive a deauthorization callback and automatically delete your connected account data, including access tokens, platform user IDs, and associated analytics.

Upon receiving a deletion request, we will: (1) delete your account and profile data, (2) revoke all OAuth tokens for connected platforms, (3) delete all posts, analytics, and engagement data, and (4) remove you from any marketing communications. Content already published to third-party platforms is not within our control and must be deleted directly on those platforms.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a portable, machine-readable format.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Objection: Object to certain processing of your data, including direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

To exercise any of these rights, please contact us at privacy@jmcbtech.com. We will respond to your request within 30 days.

Additional Rights for California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information.

Additional Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the rights listed above. Our legal bases for processing your information include contract performance, legitimate interests, and your consent. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

8. Third-Party Links and Integrations

ASCEND integrates with and contains links to third-party services, including social media platforms, AI providers, and payment processors. This Privacy Policy applies only to ASCEND. We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you interact with through ASCEND, including:

• TikTok, Instagram, Facebook (Meta), LinkedIn, X/Twitter, and Threads -- each platform's own privacy policy.
• Stripe -- for payment data handling.
• Supabase -- for data hosting and storage practices.

9. Children's Privacy

ASCEND is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at privacy@jmcbtech.com.

10. International Data Transfers

ASCEND is operated from the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

For users in the EEA/UK, we rely on Standard Contractual Clauses and other lawful transfer mechanisms to ensure adequate protection of your data when transferred outside the EEA/UK.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email or through a prominent notice within the Service at least 30 days before the changes take effect. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: