Who we are
Aim-Hi is a marketing studio for small businesses. We run this website and the Aim-Hi dashboard, where you can track your social media accounts, see what is trending, write posts and get images and videos made for them. In this policy, “Aim-Hi”, “we” and “us” mean us, and “you” means anyone who visits the site or uses the dashboard.
The short version: we collect what we need to run the service: your email address, the social accounts you choose to connect, and the content you make with us. We don't sell your data, and we don't use it for advertising.
What we collect
Information you give us
- Your email address, when you sign up or log in. We email you a one-time code; we don't use passwords.
- Your display name, if you set one.
- Social accounts you add: the platform and handle, and any posts you import from a CSV or JSON file.
- What you write in the Studio: topics, tones, audiences, keywords, drafts, captions, and image or video prompts.
- Files you upload, and images and videos we make for you.
- Messages you send us, and details you give when you book a call.
Information collected automatically
- A session cookie that keeps you logged in (see Cookies).
- Basic technical data that servers record with every request, such as IP address, browser type, pages requested and timestamps. We use it to keep the service running and secure.
- Privacy-friendly site analytics: counts of page views, collected by our hosting provider, so we can see which pages are used.
Instagram data
If you connect an Instagram professional account, either by logging in to Instagram or by pasting an access token, Instagram asks for your permission first. We ask only for:
- instagram_business_basic: your profile (username, name, profile picture, follower count) and your posts (captions, media, links, timestamps, likes and comments counts).
- instagram_business_manage_insights: post insights such as views, reach and shares.
We store the access token Instagram gives us so we can sync your posts and metrics every few hours. We use this data only to show you your own analytics, trends and post suggestions in the dashboard. We don't post on your behalf, read your direct messages, or share your Instagram data with other Instagram users or advertisers.
You can disconnect at any time by removing the account on the Accounts page, which deletes the stored token and the synced posts. You can also remove Aim-Hi's access from Instagram's own settings under Apps and websites.
How we use it
- To log you in and keep your account secure.
- To provide the dashboard: syncing and ranking posts, finding trending hashtags, and showing engagement over time.
- To write drafts and make images and videos when you ask for them.
- To deliver content our team makes for you, if you are a client.
- To reply to you and send emails about your account. We don't send marketing emails unless you've asked for them.
- To keep the service working, fix problems and prevent abuse.
- To meet our legal obligations.
Where the law asks for a legal basis (for example under the GDPR), we rely on performing our contract with you, our legitimate interest in running and improving a secure service, your consent where we ask for it (such as connecting Instagram), and legal obligations.
How long we keep it
- Login codes expire after 10 minutes.
- Sessions end after 30 days, or when you log out.
- Account data, connected accounts, posts and media are kept while your account is active, and deleted when you remove them or ask us to delete your account.
- Server logs and backups are kept for a limited time and then deleted on a rolling basis.
Your choices and rights
Depending on where you live, you may have the right to:
- see the personal information we hold about you and get a copy of it;
- correct it if it is wrong;
- have it deleted;
- object to or limit how we use it;
- withdraw consent you have given, such as disconnecting Instagram;
- complain to your local data protection authority.
To exercise any of these rights, contact us. We will reply within 30 days. We won't treat you differently for exercising your rights.
Deleting your data
You can remove a connected social account and its posts yourself from the Accounts page in the dashboard. To delete your whole Aim-Hi account and everything in it, email us from the address you log in with and ask us to delete it. We will delete your data within 30 days, apart from anything we must keep by law, and confirm when it's done.
Security
We protect your information with encryption in transit (HTTPS), passwordless login with short-lived codes, and access tokens stored on our servers and never shown in the browser. No service can promise perfect security, but we work to protect your data and will tell you promptly if a breach affects you.
Children
Aim-Hi is for businesses and is not meant for anyone under 16. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy as Aim-Hi changes. We will change the date at the top when we do, and tell you by email or in the dashboard before any significant change takes effect.
Contact us
Questions, requests or complaints about privacy: email privacy@aim-hi.com.