Privacy Policy

1. Who we are

EdgeiT LLC operates Townlight. This policy explains what information we collect, how we use it and the choices you have. Businesses that use Townlight control the business content they put into it, including their team and subscriber information; we process it on their behalf.

2. Information we collect

• Account information: name, email, a hash of your password (never the password itself), role and the businesses you belong to.
• Content you provide: what you type, posts, photos, videos and documents, and the business, product, service, event, review and team information your business enters.
• Access tokens for the social platforms you connect, stored encrypted. We never collect your social media passwords.
• Newsletter subscribers: email addresses people give your business through its newsletter sign-up page.
• Messages you send to Ask Townlight, the in-app assistant.
• Usage and technical data: sign-ins, actions taken in the Service, how many posts Townlight writes for you, device and browser information, IP address.
• Messages you send us through our website.

3. How we use it

• To provide the Service: writing drafts, running brand checks, scheduling and publishing the content you approved, sending your newsletters, and showing your insights.
• To send content to our AI model provider and to the social platforms you connected, only as needed for the action you asked for.
• To secure the Service, apply plan limits, prevent abuse and keep a record of important actions.
• To reply to you and to send service emails such as invitations, password resets, notifications you chose and billing.

We do not sell personal information and we do not use your content to train AI models.

4. Team information

Businesses can add team profiles (name, role, specialties, fun facts, photo) to feature people in their posts. This information is entered by the business, is used only for that business's content, and can be edited or removed by its owners and managers at any time. Townlight never looks up information about people elsewhere.

5. Newsletter subscribers

We store subscriber email addresses on behalf of the business that collected them and use them only to send that business's newsletter. Every newsletter has a one-click unsubscribe link; people who unsubscribe are not emailed again.

6. Sharing

We share information with service providers that help us run Townlight (hosting, database, email delivery, AI model provider, payments, error monitoring) under agreements that restrict their use of it; with social platforms when you publish; with authorities when legally required; and in a merger or acquisition, with notice to you.

7. Data from connected platforms

With your authorization we retrieve page information and post performance from Facebook, Instagram and LinkedIn, and your Business Profile locations and profile views and actions from Google, to publish your posts and show your insights. We use this data only to provide the Service to your business and delete the tokens when you disconnect; disconnecting Google also revokes our access with Google. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Removing Townlight in your Facebook settings sends us a deletion request automatically; we then delete the access tokens, profile name and page list we obtained, and give you a confirmation code you can check on our data deletion page.

8. Retention

We keep account and content data for as long as your business uses the Service and for 30 days after the account ends so you can export it, then delete it from active systems. Backups, audit and billing records may be kept longer where needed or required by law.

9. Security

Passwords are hashed, tokens are encrypted, uploads are cleaned and served from a sandbox, access is limited to your business, the database is backed up daily, and important actions are logged. See our Security page for detail. No system is perfectly secure; tell us right away if you suspect a problem.

10. Your rights

Depending on where you live you may have rights to access, correct, export or delete your personal information, or to object to certain processing. Owners can do much of this in the Service; for anything else contact us and we will respond within 30 days.

11. Cookies

We use one essential session cookie to keep you signed in and a preference cookie for the interface. We do not use advertising cookies or third-party trackers on the Service.

12. International transfers and children

Data may be processed in the country where our hosting provider operates. The Service is for businesses and is not directed to children under 16.

13. Changes and contact

We will post updates here and announce material changes in the Service. Questions or requests: lj@edgeitmarketing.com.