Privacy Policy — Maestro

This Privacy Policy explains how Maestro (“Maestro”, “we”, “us”) collects, uses, and protects information when you use our mobile app, client approval portal, and website (together, the “Service”). Maestro is operated by Afransi Technologies, 21 Admiralty Wy, Lekki Phase 1, Lagos 106104, Lagos, Nigeria.

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

Note: Maestro is a tool for social media managers. If you are a client reviewing content through the approval portal, the social media manager who invited you is responsible for the content shown to you; we process that content on their behalf.

Information we collect

Account information. When you register, we collect your name, email address, and a securely hashed password. We never store your password in plain text.

Brand and workspace data. Information you add about the brands you manage — workspace names, industry, brand colors, brand-voice settings (tone, values, guidelines, example posts, forbidden words), and the name and email address of clients you invite to review content.

Content you create. Post captions, drafts, and images you upload, plus AI brand-voice scores and feedback generated for that content.

Approval activity. When a client opens a review link, we record approvals, change requests, rejections, and any feedback they leave.

Technical and log data. To keep the Service secure and reliable we keep server logs containing request metadata only — HTTP method, URL path, response status, timing, IP address, and the authenticated user ID. We do not log request bodies, passwords, or tokens.

We do not collect analytics from social platforms, and Maestro does not auto-publish to any social network.

How we use your information

To provide and operate the Service (accounts, workspaces, drafting, approvals).
To run AI brand-voice analysis on the content you submit for checking.
To send transactional emails — email verification codes (OTP) and client approval requests. We do not send marketing email without your consent.
To secure the Service, prevent abuse, debug issues, and meet legal obligations.

We do not sell your personal information, and we do not use your content to train third-party AI models for other customers.

Service providers (subprocessors)

We share data with vetted providers only as needed to run the Service:

Anthropic — post captions and brand-voice settings you submit for checking are sent to Anthropic’s API to generate the brand-voice analysis.
Amazon Web Services (S3) — stores images you upload, in a private bucket served via expiring signed links.
Resend — delivers transactional email (verification codes, approval requests).
Hosting — the Service runs on infrastructure operated by us at Digital Ocean.

These providers process data under their own terms and only to provide their service to us.

Email verification

New accounts must verify their email with a one-time code before access is granted. This protects against fraudulent sign-ups using addresses that aren’t yours.

Data retention

We keep your account and workspace data for as long as your account is active. Server logs are retained for a limited period (currently about 14 days) and then deleted. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To make a request, email us at support@afransi.ng. We will respond within the timeframe required by applicable law.

Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, private media storage with expiring access links, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.

International transfers

Your information may be processed in countries other than where you live, including by the providers listed above. Where required, we rely on appropriate safeguards for such transfers.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

Contact

Questions about this Policy or your data? Email support@afransi.ng or write to Afransi Technologies Limited, 21 Admiralty Wy, Lekki Phase 1, Lagos 106104, Lagos, Nigeria.