Information we collect

Account information. When you sign up, we collect your name, email address, and password (or, if you sign up with Google, the basic profile information Google shares with us). We never store your password in plain text — it's hashed before it touches our database.

Organization and team information. If you create or join an organization on Ludaso, we store its name and the role each member has (admin, editor, or viewer), so we can enforce who's allowed to do what.

Content you create. The posts you draft, schedule, or publish — including any text, images, or other media you upload — are stored so you can edit, reuse, and review them later.

Connected account information. When you connect a social media account (currently LinkedIn, X and Instagram, with more platforms on the way), we store the account's public profile details (name, photo, username) and an access token that lets us publish on your behalf. See Connected social accounts below for more on this.

Usage information. Like most web services, we automatically log some technical details — IP address, browser type, device information, and how you interact with Ludaso — so we can keep the product working and fix things when they break.

Billing information. If you subscribe to a paid plan, your payment is handled by our payment processor. We don't store your full card number ourselves.

How we use your information

We use the information above to:

• Provide the core service — creating, scheduling, and publishing your posts to the accounts you've connected;
• Authenticate you and keep your account secure;
• Let you and your teammates collaborate within an organization, according to each person's role;
• Send you service-related emails, like password resets or notifications about a scheduled post;
• Understand how Ludaso is used so we can improve it and fix problems; and
• Detect and prevent abuse, fraud, or activity that violates our terms.

We don't use the content of your posts to train third-party AI models, and we don't sell your personal information to advertisers.

Connected social accounts

Connecting a social media account is always something you choose to do, and it works through that platform's own sign-in screen — we never see or store your social media password.

When you connect an account, the platform asks you to approve a specific, limited set of permissions (for example, the ability to publish a post on your behalf). We only request the permissions Ludaso actually needs to do what you've asked it to do — we don't ask for access to your private messages, contacts, or anything unrelated to posting.

The access token a platform gives us is encrypted before it's stored. We only use it to publish content you've created and explicitly chosen to share or schedule — Ludaso never posts on your behalf without an action you took, whether that's clicking “Share now” or setting a scheduled time.

You can disconnect any social account at any time from your account settings. Once you do, we delete the stored token and stop using it — future scheduled posts to that account will no longer go out.

Each platform you connect has its own privacy policy governing how it handles your data on its side. For LinkedIn, that's LinkedIn's own privacy policy. For Instagram, that's Instagram's privacy policy. We only request the permissions needed to read your Instagram profile details and publish the posts you choose to share, and you can also remove Ludaso under Instagram's Settings > Apps and websites.

Cookies

We use a small number of cookies to keep you signed in and remember which organization you're currently working in. These are essential to how Ludaso works — without them, you'd have to log in again on every page. We don't use cookies for third-party advertising.

How we share information

We don't sell your personal information. We share it only in these situations:

• With your team. If you're part of an organization, other members can see content and connected accounts according to the permissions their role grants.
• With the social platforms you connect. To publish a post, we have to send its content to the platform you're publishing to.
• With service providers. We work with a small number of trusted providers — for things like hosting, email delivery, and payment processing — who handle data on our behalf and are bound to keep it confidential.
• When the law requires it. We may disclose information if we're legally required to, or to protect the rights, safety, or property of Ludaso, our users, or others.

Data retention and deletion

We keep your information for as long as your account is active, so Ludaso keeps working the way you'd expect. If you close your account, we delete your personal information and disconnect any linked social accounts, other than what we're required to keep for legal, accounting, or security reasons. For instructions, see our Data Deletion Policy.

Security

We encrypt data in transit and encrypt sensitive data — like social account access tokens — at rest. Access to production data is limited to people who need it to operate the service. No system is perfectly secure, but we take reasonable, industry-standard steps to protect your information and to respond quickly if something goes wrong.

Your choices

You can, at any time:

• Review and update your account information from your profile settings;
• Disconnect a connected social account;
• Ask us for a copy of the personal information we hold about you, or ask us to correct or delete it; and
• Close your account entirely.

To make any of these requests, email us at privacy@ludaso.com and we'll get back to you.

Children's privacy

Ludaso is a business tool and isn't directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we'll remove it.

Changes to this policy

If we make a material change to how we handle your information, we'll update the date at the top of this page and, where appropriate, let you know directly — for example, by email.

Contact us

Questions, concerns, or requests about this policy or your data are always welcome at privacy@ludaso.com.