Privacy Policy

We collect the following categories of information:

Information you provide

• Name, email address, phone number, and business name
• Billing information (processed securely by Stripe — never stored on our servers)
• Business details such as hours, services, photos, and descriptions

Information from third-party platforms

When you connect your accounts, we may collect data from the following platforms:

• Google — Business Profile data (listing details, reviews, photos), Search Console data (search queries, impressions, clicks, ranking positions), and basic account information (email address)
• Facebook — Page information, page access tokens, post engagement metrics, and page insights. Collected only when you explicitly grant access via Facebook Login.
• Instagram — Business account information, media, and engagement metrics. Collected only when you explicitly grant access via Instagram authorization.

Information collected automatically

• Log data (IP address, browser type, pages visited)
• Device information (operating system, screen resolution)
• Cookies and similar tracking technologies

We use the information we collect to:

• Provide, maintain, and improve our SEO and local marketing services
• Optimize your Google Business Profile and manage your online presence
• Publish and schedule content on your connected social media accounts (Facebook and Instagram) on your behalf
• Analyze your search performance and generate ranking reports
• Process transactions and send related information
• Send service updates and promotional communications (you may opt out at any time)
• Monitor and analyze usage patterns to improve our platform
• Respond to your comments and questions

When you connect your Facebook or Instagram account to DiamondPages, we access your data solely to provide our social media management services. Here is exactly what we collect, how we use it, and how long we keep it:

What we collect

• Facebook Page name, ID, category, and access tokens
• Facebook Page post performance (reach, engagement, clicks)
• Instagram business account profile information
• Instagram media and engagement metrics (likes, comments, reach)

How we use it

• To publish posts and content on your Facebook Page and Instagram account on your behalf
• To generate performance reports showing how your social content is performing
• To optimize posting schedules and content strategy based on engagement data

How long we keep it

We retain your Facebook and Instagram data for as long as your DiamondPages account is active and the platform connection remains authorized. When you disconnect your account or cancel your subscription, we delete all stored Facebook and Instagram data within 30 days. Access tokens are revoked immediately upon disconnection.

How to request deletion

You can request deletion of your Facebook and Instagram data at any time by:

• Disconnecting your account from your DiamondPages dashboard
• Emailing us at support@diamondpages.ai
• Using Facebook's app settings to remove DiamondPages (we will receive a deletion callback and process it automatically)

Upon receiving a deletion request, we will delete all your Facebook and Instagram data within 30 days and provide a confirmation code for your records.

When you connect your Google account, we access your data solely to provide our SEO and business profile management services.

What we collect

• Google Business Profile listing information (name, address, hours, categories, photos, reviews)
• Google Search Console data (search queries, impressions, clicks, average position)
• Google account email address (for identification only)

How we use it

• To optimize your Google Business Profile listing
• To monitor and report on your search performance
• To identify ranking opportunities and track progress

OAuth access tokens are encrypted using AES-256-GCM and stored securely. You can revoke access at any time from your Google account settings or your DiamondPages dashboard.

We do not sell, trade, or rent your personal information to third parties. We may share your information with service providers who assist us in operating our platform, subject to confidentiality agreements:

• Stripe — payment processing
• Supabase — database and authentication
• Google — Business Profile and Search Console APIs (only data you authorize)
• Meta — Facebook and Instagram APIs (only data you authorize)
• Vercel — application hosting
• Brevo — transactional email delivery

We implement industry-standard security measures to protect your personal information:

• All data transmission is encrypted via SSL/TLS
• OAuth tokens are encrypted at rest using AES-256-GCM
• Payment information is processed by Stripe and never stored on our servers
• Access to production systems is restricted to authorized personnel
• We use Supabase Row Level Security to isolate client data

We retain your data according to the following schedule:

• Account data — retained for as long as your account is active, deleted within 30 days of account closure
• Audit data — retained for 12 months after generation
• Google data — retained while your Google account is connected, deleted within 30 days of disconnection
• Facebook & Instagram data — retained while your accounts are connected, deleted within 30 days of disconnection or deletion request
• Payment records — retained as required by tax and financial regulations (typically 7 years)

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and improve your experience. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features.

You have the right to:

• Access, update, or delete your personal information
• Disconnect any connected third-party account (Google, Facebook, Instagram)
• Request a copy of all data we hold about you
• Request deletion of all your data
• Opt out of promotional communications

To exercise any of these rights, contact us at support@diamondpages.ai. We will respond to your request within 30 days.

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.