Privacy

Engagement Exchange is operated by Steven Haynes. Questions about privacy go to info@clearskin4u.co.uk. This page describes what the product stores and sends. It is not a compliance claim, and it does not set a retention period.

Account

Signup stores an email and a password with Supabase Auth. A profile can store a display name and an industry. The industry is collected only. It is not used to choose tasks.

Marketing email

The product-update checkbox is optional and starts unchecked. Ticking it records that choice separately from the login email. Leaving it unticked does not block the account.

Instagram

Promote and Engage can store an Instagram username. One member can use the same username for both. Another member cannot. Connecting Instagram stores a Meta access token on the server, with the account ids Meta returns. Members do not see the token. Comment checks store the expected username, the comment text that was seen, the commenter username, and, when Meta provides them, the comment id and commenter id.

Suggestions

When a suggestion is generated with the configured provider, the request goes to OpenAI at https://api.openai.com/v1/chat/completions using the model gpt-6-luna. The prompt can include the caption, description, promoting username, phrases copied from the post, earlier questions on the campaign, questions already generated for the task, and an optional rejection reason. The provider key is not stored on the suggestion. If no key is configured, no request is sent.

Credits

The credit ledger stores amounts and idempotency keys. Those keys include the member id, post id, or assignment id they belong to. Clearing a profile does not remove them.

Clearing a profile and deleting an account

Clear saved profile removes the stored Instagram connection, usernames, display name, industry, and marketing preference, then signs you out. The login, credit history, campaign text, assignment links, and comment checks stay.

Delete account is separate. It asks you to type delete, then refunds unused credits on your open campaigns once, releases username claims, deletes stored Meta tokens, replaces campaign text, comment text, and suggestion text that the credit history still points at, deletes the login, and signs you out. Credit amounts and the keys that stop a second refund stay. Those keys can still contain ids. Deleting the account does not say the remaining rows are anonymous. It does not call Meta, and it does not remove a post or comment Instagram already has.

Where it runs

The app’s serverless functions are configured for region iad1. That does not state the database region. Prompt retention is not stated. Backup retention is not stated.