Privacy Policy

1. What this policy covers

This Privacy Policy explains how EchoraIQ ("we", "us") collects, uses and protects information when you use the EchoraIQ platform — our social listening, engagement and publishing workspace — and the websites that link to it.

2. Information we collect

Account information: your name, email address, workspace name and role, provided when a workspace is created or when you are invited to one.

Connected-channel data: when you connect a social account (for example Facebook, Instagram, X, YouTube, Reddit or Google Business), we receive OAuth tokens and the content those platforms authorize — such as posts, comments, messages and reviews addressed to your accounts. Tokens are envelope-encrypted at rest and used only to provide the service you configured.

Public social content: mentions and posts matched by monitors you create, retrieved from platform APIs under each platform’s terms.

Usage and security data: sign-in events, approvals and administrative actions are recorded in a tamper-evident audit log to protect your workspace.

3. How we use information

To operate the platform: display mentions, deliver your replies and posts, sync reviews, and meter usage against the limits you set.

To secure the platform: enforce role-based access, detect misuse and maintain the audit trail your administrators rely on.

We do not sell personal information, and we do not use your content to train third-party AI models. AI features are powered by a third-party model provider (OpenAI) under our own account: reply drafting, translation and message analysis process the specific text you choose, while sentiment scoring may automatically process the text of collected mentions and messages to classify them. Workspaces whose policy forbids external processing (including government workspaces) are excluded from all external AI processing automatically.

4. Sharing

We share data only with: (a) the social platforms you connect, to carry out actions you request; (b) service providers that host our infrastructure under confidentiality obligations; and (c) authorities where the law requires it. Workspace administrators control what their members can see and do.

5. Retention and deletion

Content and account data are retained while your workspace is active. Audit records may be retained for up to seven years where your organization’s policy requires it. You may disconnect a channel at any time, which revokes our access; deleting a connection removes its stored tokens. To request deletion of your account or workspace data, contact your workspace administrator or email us at the address below.

6. Security

We protect data with encryption in transit and at rest, envelope-encrypted credentials, multi-factor authentication (including passkeys), deny-by-default role-based access control and a hash-chained audit log. No system is perfectly secure, but security is the core design constraint of this platform.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete your personal information. Contact us and we will respond within a reasonable period. If you interact with a EchoraIQ customer’s social account, that customer is the controller of your message content; we process it on their behalf.

8. Changes & contact

We will post any changes to this policy on this page with an updated effective date. Questions or requests: contact your workspace administrator, or reach us at contact@echoraiq.com.