Privacy Policy
Last updated: October 7, 2026
01.Who we are
Phanzly ("Phanzly", "we") is an omnichannel social media management platform for businesses, operated by Edwin Ramiro Cordero Navarrete in Ecuador, who is the data controller. Phanzly lets a business connect its social accounts to publish content, manage conversations, run ads and view analytics from one dashboard.
02.Data we collect
Account data: name, email, password (hashed by our authentication provider), company/workspace name and team members you invite.
Data from platforms you connect (only after you authorize it, and only for the accounts you select):
- Facebook Pages: list of Pages you manage, Page name and picture, Page access tokens, posts, comments, reactions and Page insights; Messenger conversations of your Page.
- Instagram professional accounts: username, profile picture, media, comments, direct messages and account insights.
- WhatsApp Business: phone number and business account identifiers, message templates, and messages exchanged with your customers.
- Meta ad accounts: ad account name, currency, campaigns and performance metrics (impressions, reach, clicks, spend, conversions).
- TikTok: open ID, display name, avatar, profile link, follower/like/video counts, your public videos and their metrics, and the status of videos you publish through Phanzly.
- LinkedIn: name, profile ID and email, used to publish on your behalf.
- Telegram: bot token you provide and messages received by your bot.
- Google Calendar (optional): events you choose to sync for reminders.
Content you create in Phanzly (posts, media, scheduled items, knowledge base for the AI assistant) and basic technical logs (IP, browser, errors) for security.
03.How we use the data
- Publish and schedule the content you create to the accounts you selected.
- Show your messages and comments in the unified inbox and send the replies you or your AI assistant write.
- Show analytics and ad performance, and create or pause ad campaigns when you ask.
- Generate AI suggestions and automatic replies based on your business information.
- Operate, secure and support the service.
We do not sell personal data, do not use platform data for advertising profiling, and do not use your data to train AI models. Data from one workspace is never shown to another workspace.
04.AI processing
When you use the AI assistant, the relevant text (for example an incoming message and your business information) is sent to our AI providers (Groq and Google Gemini) only to generate the response. These providers process it on our behalf and do not use it to train their models according to their API terms.
05.Service providers (data processors)
We share data only with providers that help us run Phanzly:
- Supabase: database, authentication and file storage.
- Vercel: application hosting and scheduled jobs.
- Groq and Google (Gemini): AI text generation.
- Resend: transactional email (invitations, password resets).
- Meta, TikTok, LinkedIn, Telegram and Google: the platforms you connect, to perform the actions you request.
We may disclose data if required by law, following a review of legality and data minimization.
06.Storage and security
Data is stored in Supabase with row level security so each workspace can only access its own data. Access tokens are only used by our servers and are never exposed to other users; Marketing API tokens are additionally encrypted with AES-256-GCM. All traffic uses HTTPS.
07.Retention
We keep your data while your account is active. When you disconnect a platform we delete its access tokens immediately; when you delete your account or request deletion, we delete your data within 30 days, except where the law requires us to keep it.
08.Delete your data
You can delete your data at any time:
- Disconnect any channel in Dashboard > Channels.
- Remove Phanzly from your Facebook settings (Settings > Security > Business Integrations) or TikTok settings; we automatically delete the related data.
- Follow the instructions at phanzly.com/eliminacion-de-datos or email edwinramiro067@gmail.com.
09.Your rights
Under Ecuador's Personal Data Protection Law (LOPDP) and other applicable laws, you can access, rectify, delete, port and object to the processing of your data. Write to edwinramiro067@gmail.com; we answer within 15 days.
10.International transfers
Our providers may process data outside Ecuador (for example in the United States) with appropriate safeguards.
11.Children
Phanzly is a business tool and is not directed to children under 18.
12.Changes and contact
We will publish any change on this page. Questions: edwinramiro067@gmail.com.