privacy policy

We may collect and process the following types of personal data.

Account information

This includes your name, email address, password or authentication credentials, company name, workspace name, role, preferences and account settings.

Social account information

When you connect a supported social media account, we may collect information made available to us through that platform’s authorised API, depending on the permissions you grant. This may include:

• social profile, page, channel or account identifiers;
• account display name, username, avatar or profile image;
• connected business pages, organisations, channels or professional accounts;
• access tokens, refresh tokens and permission scopes;
• posts, media, captions, publishing status and scheduling metadata;
• social performance data such as impressions, reach, clicks, engagement, likes, comments, shares, views, follower counts, video performance and other available analytics.

The exact data available depends on the social platform, your account type, the permissions you approve and the API access granted to Frank Rabbit.

Content you create in Frank Rabbit

This includes posts, captions, images, videos, drafts, scheduled content, campaign information, notes, tags, approval status and related publishing data.

Usage and technical information

We may collect information about how you use our website and platform, including log data, IP address, device type, browser type, operating system, pages visited, actions taken, error logs, referral source and approximate location derived from IP address.

Billing information

If paid plans are available, we may collect billing details such as plan type, billing address, payment status, invoices and transaction references. Payment card details are processed by our payment provider and are not stored directly by Frank Rabbit unless otherwise stated.

Communications

If you contact us, join a waitlist, request support or respond to surveys, we may collect your name, email address, message content and related communications.

Cookies and similar technologies

We use cookies and similar technologies on our website and platform. More information is available in our Cookie Policy.

We collect personal data when:

• you visit our website;
• you create an account;
• you log in or use the platform;
• you connect a social media account through OAuth or another authorised integration;
• you create, upload, schedule or publish content;
• you view or use analytics features;
• you contact us or request support;
• you subscribe to updates, join a waitlist or request early access;
• our systems automatically collect technical and usage data.

We use personal data for the following purposes:

To provide the Frank Rabbit service

We use your data to create and manage your account, authenticate you, connect your social accounts, schedule and publish content, display analytics, manage workspaces and provide the features you request.

To connect to social platforms

When you connect platforms such as LinkedIn, Instagram, TikTok or YouTube, we use the permissions you grant to perform actions you request, such as displaying connected accounts, publishing approved content and importing available analytics.

We do not post content to your social accounts unless you or an authorised user in your workspace has created, scheduled, approved or otherwise requested that action through Frank Rabbit.

To provide analytics

We use authorised social platform data to display performance analytics inside Frank Rabbit. This may include account, post, media, video, channel or page-level performance metrics, depending on the platform and permissions granted.

To improve and secure the service

We use usage, technical and log data to maintain, troubleshoot, improve and secure the platform, detect errors, prevent abuse and monitor performance.

Where UK GDPR or EU GDPR applies, we rely on the following lawful bases:

Contract

We process personal data where necessary to provide the Frank Rabbit service, manage your account, connect integrations, publish scheduled content, display analytics and provide customer support.

Legitimate interests

We process personal data where necessary for our legitimate interests, including improving the service, monitoring platform performance, securing our systems, preventing misuse, understanding product usage and communicating with business users, provided those interests are not overridden by your rights and freedoms.

Consent

We rely on consent where required, including for certain non-essential cookies and, where applicable, marketing communications. You can withdraw consent at any time.

Legal obligation

We process personal data where required to comply with legal, regulatory, accounting, tax or reporting obligations.

Frank Rabbit only accesses social platform data after you authorise access through the relevant platform’s OAuth or permission flow.

Depending on the platform and permissions granted, we may access, process and store data from services such as LinkedIn, Instagram, TikTok and YouTube. We use this data only to provide user-facing Frank Rabbit features, including account connection, content scheduling, publishing and analytics.

For Google and YouTube data, Frank Rabbit’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a social account at any time from your Frank Rabbit account settings, where available. You may also revoke Frank Rabbit’s access directly through the relevant social platform.

We DO NOT sell your personal data.

We may share personal data with:

Service providers

We use trusted service providers to help operate Frank Rabbit, such as hosting providers, database providers, email providers, analytics tools, error monitoring tools, payment processors, customer support tools and security services.

Social media platforms

When you connect a social account or ask us to publish content, we share the necessary data with the relevant social platform to complete the action you requested.

Legal or regulatory authorities

We may share information where required by law, regulation, court order, government request or to protect our rights, users, systems or the public.

Business transfers

If Frank Rabbit is involved in a merger, acquisition, investment, restructuring or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

Some of our service providers or connected platforms may process personal data outside the United Kingdom or European Economic Area. Where required, we use appropriate safeguards such as adequacy regulations, standard contractual clauses or equivalent protections.

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, comply with legal obligations, resolve disputes and enforce agreements.

As a general guide:

• account data is kept while your account remains active;
• social account tokens are kept while the integration remains connected;
• scheduled posts, drafts and analytics data are kept while your account or workspace remains active, unless deleted earlier;
• support messages are kept for as long as needed to respond and maintain business records;
• billing records may be kept for accounting and tax purposes;
• technical logs are kept for a limited period for security, debugging and service operation.

When you delete your account or request deletion, we will delete or anonymise personal data unless we need to retain it for legal, security, accounting or legitimate business reasons.

You can request deletion of your personal data by contacting us here.

Where available, you may also:

• disconnect social media accounts from your Frank Rabbit settings;
• delete scheduled posts or drafts;
• delete your workspace or user account;
• revoke Frank Rabbit’s access directly from the connected social platform.

When a social account is disconnected, we will stop using its access token and remove or disable the connection. Some historic records may remain where needed for security, audit, legal, billing or legitimate business purposes.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include HTTPS, access controls, password hashing, token protection, encryption where appropriate, secure hosting, logging, backups, internal access restrictions and monitoring.

No online service can guarantee absolute security. You are responsible for keeping your login credentials secure and for notifying us if you believe your account has been compromised.

Depending on where you are located, you may have rights under data protection law, including the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict or object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent;
• complain to a data protection authority.

To exercise your rights, contact us here.

If you are in the UK, you also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

If you subscribe to marketing updates, join our waitlist or request product information, we may send you updates about Frank Rabbit. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

We will still send service-related messages where necessary, such as account, security, billing or legal notices.

Frank Rabbit is not intended for children. You must be at least 18 years old to create an account or use the platform.

Frank Rabbit may contain links to third-party websites, services or platforms. We are not responsible for the privacy practices, content or policies of those third parties.

When you use LinkedIn, Instagram, TikTok, YouTube or another connected platform, your use of that platform is also subject to that platform’s own terms and privacy policy.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify users, such as by posting a notice on our website or within the platform.

The “Last updated” date at the top of this policy shows when it was last revised.

For questions about this Privacy Policy or your personal data, contact:

Frank Rabbit

Email here.

Address: 128 City Road, London, EC1V 2NX

Website: https://frankrabbit.com/