Home Social Media Automation Privacy Policy Terms of Service Contact

Privacy Policy

ABC AI Lab — Social Media Automation Service · Last updated: July 19, 2026 · Effective: July 19, 2026

This Privacy Policy explains how ABC Photoshoot LLC, doing business as ABC AI Lab ("ABC AI Lab," "we," "us," or "our"), collects, uses, discloses, retains, and protects information in connection with our Social Media Automation service (the "Service"), which produces original short-form video content and publishes it to social media accounts that you own and connect and authorize. It covers our use of third-party platform APIs, including the TikTok API, the Meta (Facebook and Instagram) Graph API, Bluesky, Mastodon, and Threads. It also describes the rights available to residents of California and other US states, Florida, the EU/UK, Canada, and elsewhere.

1. Who We Are

ABC Photoshoot LLC (doing business as "ABC AI Lab") is the controller of the personal information described here. We are a Florida limited liability company located in West Palm Beach, Florida, USA. For any privacy question or request, contact our privacy team at abcphotoshootllcbooking@gmail.com (general: abcphotoshootllcbooking@gmail.com). We act as the point of contact and person responsible for privacy compliance and complaints.

2. Information We Collect

Information you provide

Platform authorization data (only when you connect an account)

Collected automatically

Under the CCPA these fall in the categories of identifiers, commercial information, internet/network activity, and geolocation (approximate, from IP). We collect this information directly from you and automatically from your use of the Service. We do not collect your platform password, your private or direct messages, your contact lists, or account data unrelated to publishing the content we create for you.

3. How & Why We Use Information (and legal bases)

We use information to: (a) provide the Service and publish the content we produce to the accounts you have connected and authorized; (b) read the delivery status of those posts so we can retry or report failures; (c) operate, maintain, secure, and improve the Service; (d) communicate with you and provide support; and (e) comply with legal obligations. Where the EU/UK GDPR applies, our legal bases are: performance of a contract (to operate the Service and publish your content), legitimate interests (securing and improving the Service, preventing abuse), consent (where required, e.g., for optional communications — withdrawable at any time), and legal obligation. We do not use personal information or platform data for advertising, ad targeting, profiling, or sale.

4. Connected Accounts & OAuth Tokens

When you connect an account we receive only the authorization needed to publish content and read the basic status of the posts we create. We store authorization tokens in restricted, access-controlled storage and use them solely to publish on your behalf. You can revoke our access at any time in your platform's settings or by contacting us; publishing to that account then stops and we delete the associated tokens. You are responsible for safeguarding your own account credentials and access.

5. Use of TikTok Data & Third-Party Technologies

Our Service integrates third-party technologies, including TikTok, through the TikTok API. When you connect a TikTok account, we use the TikTok API solely to upload and publish the video content we create for you and to read the resulting post status. Our use of information received from TikTok APIs adheres to the TikTok Developer Terms of Service and applicable TikTok policies, including limitations on the use, storage, and transfer of TikTok data.

When content is uploaded and published through the TikTok Content Posting API, certain technical information about the request may be collected and processed by TikTok, including the IP address, device and browser type, approximate geographic location, and language settings associated with the request, together with the account identifier and the media and caption you approved. This technical data is used to deliver and secure the posting operation. We do not use TikTok data for advertising, ad targeting, profiling, or resale, and we delete TikTok authorization tokens when you disconnect or request deletion.

When you connect a Facebook Page or Instagram account, we use the Meta Graph API solely to publish content and read post status, consistent with the Meta Platform Terms and Developer Policies.

6. AI-Generated Content Disclosure

The video content produced by the Service is generated using artificial intelligence. Where required by law (including the EU AI Act's transparency rules), AI-generated or synthetic media must be disclosed and, where applicable, machine-readable-labelled as artificially generated. We produce AI-generated video; you are responsible for using each platform's AI-content labelling tools when you publish, and for ensuring the content complies with the destination platform's rules.

7. How We Share Information

We share information only with:

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We honor recognized opt-out preference signals such as the Global Privacy Control (GPC) where applicable.

8. Data Retention

We retain authorization tokens and connection metadata only while your account connection is active, and delete them on disconnection or deletion request. Post-status records are retained for operational purposes and then deleted or anonymized. Contact and billing records may be retained as reasonably necessary for accounting, tax, and legal-compliance purposes. Retention is limited to what is reasonably necessary and proportionate to the purposes above.

9. Security

We apply reasonable technical and organizational measures — including access controls, encryption in transit, restricted token storage, and secure deletion — to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your own accounts and credentials.

10. Your Privacy Rights

California residents (CCPA/CPRA)

You have the right to know/access, delete, and correct your personal information; to opt out of sale or sharing (note: we do not sell or share); to limit the use of sensitive personal information (we use it only for permitted service purposes); to data portability; and to non-discrimination for exercising your rights. To exercise these rights, email abcphotoshootllcbooking@gmail.com or use the contact methods on this page. You may use an authorized agent to submit a request; we may verify your identity and the agent's authority. We aim to respond within 45 days.

Other US state residents (Virginia, Colorado, Connecticut, Texas, Oregon, and others)

You have rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, sale, and certain profiling. We recognize the Global Privacy Control where required. If we deny a request, you may appeal by replying to our decision; we will respond to appeals as required by your state's law.

Florida residents

The Florida Digital Bill of Rights applies by its terms only to very large businesses and does not impose its controller obligations on ABC AI Lab; nonetheless, we honor its core principles and extend the access, correction, deletion, and opt-out choices above to Florida residents. We do not sell your personal or sensitive data, and we do not use voice or facial-recognition or ambient recording. Our breach-notification commitments under the Florida Information Protection Act are described in Section 12.

EU / UK residents (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction, portability, objection, and (where processing is based on consent) withdrawal of consent at any time. You also have the right to lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office). We do not carry out solely-automated decision-making that produces legal or similarly significant effects about you. If a representative under Article 27 is required, we will designate one and identify them here.

Canada (PIPEDA)

You may request access to and correction of your personal information and may direct complaints to our privacy contact; we obtain meaningful consent for the purposes described and seek fresh consent if those purposes change.

11. International Users & Cross-Border Transfers

We operate and process information in the United States. If you access the Service or connect accounts from outside the US, your information will be transferred to and processed in the US. For transfers of personal data from the EU/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or an applicable adequacy decision. By using the Service, non-US users acknowledge this cross-border transfer.

12. Data Breach Notification

Consistent with the Florida Information Protection Act (Fla. Stat. § 501.171) and other applicable laws, in the event of a breach of security affecting personal information we maintain, we will notify affected individuals without unreasonable delay and no later than 30 days after determination of the breach (subject to any law-enforcement delay or good-cause extension), and will notify the Florida Department of Legal Affairs and, where applicable, consumer reporting agencies, as required by law.

13. Children's Privacy

The Service is intended for businesses and adults and is not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect data from children under 13 as defined by COPPA. If you believe a minor has provided us information, contact us and we will delete it.

14. Marketing Communications

We send only transactional and account-related messages unless you opt in to receive others. Any commercial email will identify itself, include our physical postal address, and provide a working unsubscribe mechanism that we honor promptly, consistent with the CAN-SPAM Act.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you. Your continued use of the Service after an update constitutes acceptance of the revised policy.

16. Contact

ABC Photoshoot LLC (dba ABC AI Lab) — West Palm Beach, Florida, USA
Privacy requests & complaints: abcphotoshootllcbooking@gmail.com
General: abcphotoshootllcbooking@gmail.com
Company: abcphotoshootllcbooking@gmail.com