Introduction
Sazón AI ("we," "our," or "us") is operated by AXIOM Collective, located in Eagle Pass, Texas. We provide a bilingual AI marketing platform that helps Latino-owned small businesses generate social media content in English and Spanish, and publish it to Instagram, Facebook, and Google Business Profile.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have. By using Sazón AI at sazonai.com, you agree to the practices described in this policy.
What Data We Collect
Account Information
When you create an account, we collect your name, email address, and password. Authentication is handled securely through Supabase Auth. We do not store your password in plain text.
Business Information
During onboarding, we collect your business name, business type, location, and language preference. This information is used to generate culturally relevant marketing content tailored to your business.
Social Media OAuth Tokens
When you connect your Instagram, Facebook, or Google Business Profile accounts, we receive OAuth access tokens from Meta and Google. These tokens are stored encrypted in our database and are used solely to publish content on your behalf. We do not access your personal social media profiles, private messages, or any data beyond what is necessary for publishing.
AI-Generated Content and Post History
We store all content generated by our AI system, including drafts, scheduled posts, and published posts. This history allows you to review past content and helps our AI learn your brand voice over time.
Usage Analytics
We use PostHog to collect anonymized usage analytics. This includes information about how you interact with the platform (pages visited, features used, button clicks) but does not include personally identifiable information.
IP Addresses
We temporarily collect IP addresses for rate limiting on our free tool at sazonai.com/free. These addresses are not stored permanently and are not linked to user accounts.
How We Use Your Data
- Content generation: Your business information and brand voice profile are sent to our AI system to generate bilingual marketing content.
- Publishing: Your social media tokens are used to publish approved content to your connected Instagram, Facebook, and Google Business Profile accounts.
- Billing: Your subscription and payment information is processed through Stripe. We do not store credit card numbers on our servers.
- Communication: Your email address is used to send transactional emails such as weekly performance digests, account notifications, and onboarding messages.
- Product improvement: Anonymized usage analytics help us understand how the platform is used so we can improve the experience.
- Security: IP addresses are used to prevent abuse of our free tool through rate limiting.
Third-Party Services
We use the following third-party services to operate Sazón AI. Each service receives only the data necessary to perform its function:
- Supabase — Database hosting and user authentication.
- Stripe — Payment processing and subscription billing. Stripe handles all credit card data directly and is PCI compliant.
- Meta Graph API — Publishing content to your connected Instagram and Facebook accounts.
- Google Business Profile API — Publishing content and monitoring reviews on your Google Business Profile.
- Anthropic (Claude API) — AI content generation. Your business information and brand voice profile are sent to generate bilingual content. Anthropic does not use this data to train their models.
- PostHog — Anonymized product analytics.
- Resend — Transactional email delivery (digests, notifications).
- Vercel — Application hosting and deployment.
We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.
Meta Platform Data Usage
In compliance with Meta Platform Terms, we want to be explicit about how we handle data obtained through Meta APIs:
- We do not sell data obtained through Meta APIs to any third party.
- We do not use Meta data for purposes unrelated to providing our service to you.
- Meta data (including access tokens and page information) is used solely to publish content you have approved to your connected Instagram and Facebook accounts.
- You can revoke our access to your Meta accounts at any time by disconnecting them in your Sazón AI settings or through your Meta account settings.
Data Retention
- Account and business data is retained as long as your account is active.
- Content and post history is retained as long as your account is active so you can access your full content history.
- OAuth tokens are retained while your social media accounts are connected. They are deleted when you disconnect an account or delete your Sazón AI account.
- Usage analytics are retained in anonymized form and cannot be traced back to individual users.
- IP addresses used for rate limiting are stored temporarily and automatically purged.
- When you delete your account, all personal data, business data, content history, and stored tokens are permanently deleted within 30 days.
Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you.
- Correction: Update or correct any inaccurate information in your account.
- Deletion: Request that we delete your account and all associated data.
- Portability: Request an export of your data in a machine-readable format.
- Disconnect: Revoke access to any connected social media platform at any time through your settings.
- Opt out of analytics: You can opt out of PostHog analytics tracking by enabling "Do Not Track" in your browser.
To exercise any of these rights, contact us at hola@sazonai.com.
California and US Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- No Sale of Data: We do not sell your personal information. We have not sold personal information in the preceding 12 months.
To submit a CCPA request, email hola@sazonai.com with the subject line "CCPA Request."
Data Security
We take reasonable measures to protect your data, including:
- Encrypted storage of OAuth tokens and sensitive credentials.
- Row Level Security (RLS) on all database tables, ensuring users can only access their own data.
- HTTPS encryption for all data in transit.
- Secure authentication through Supabase Auth with hashed passwords.
While we strive to protect your data, no method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at hola@sazonai.com.
Children's Privacy
Sazón AI is designed for business owners and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Updates to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or through a notice on our platform. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at: