Privacy policy

Who we are

MAP is a social media management service operated by SONAN DIGITAL (ASTech Digital LLC) (“we”, “us”). You can reach us at hello@sonandigital.com.

What we collect

We collect only what we need to run MAP for you:

Account details of the people on your team — name, e-mail address and role.
Business information you enter — brands, locations, opening hours, offers and other facts, photos and videos you upload, and the posts you create or approve.
Connected social accounts — when you connect Facebook, Instagram or Google Business Profile, we receive access tokens and basic page or profile information (names and IDs). Tokens are stored encrypted.
Publishing results — links to published posts and the engagement numbers the platforms provide (for example reach and likes).
Website enquiries — what you type into our demo or calendar forms.
Technical data — sign-in cookies needed to keep you logged in, and server logs. We store a one-way hash of your IP address only to limit spam on our forms.

How we use it

To plan, write, design, review and publish the posts you approve.
To show you reports about your posts.
To send you notifications you can switch off in MAP.
To reply to your enquiries.
To keep the service secure and to keep an audit trail of changes.

Facebook, Instagram and Google data

We use data from Meta (Facebook and Instagram) and Google only to publish the posts you approve on the accounts you connected, to take posts down when you ask, and to show you their results. We do not sell this data, use it for advertising, or share it with anyone else.

MAP’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

AI

To write posts and images, MAP sends the relevant brief, the approved facts for that location and your brand settings to AI providers (Anthropic and OpenAI) under their business terms. We do not send your team’s personal details to them.

How long we keep it

We keep your data while you use MAP. Records of published posts and the audit log are kept as long as your account exists, because they show what was published and by whom. When you close your account or ask us to delete your data, we delete it within 30 days, except where the law requires us to keep something longer.

Your choices and rights

Disconnect any social account in MAP at any time.
Ask for a copy of your data, a correction, or deletion — see Data deletion.
Turn notification e-mails off in your MAP settings.

Changes

If we change this policy, we will update the date above and, for important changes, tell account owners by e-mail.