Privacy Policy

1. Who we are

Zendly is a social media scheduling and publishing dashboard operated by Intellium Inc., a digital agency based in Cape Town, South Africa. Intellium Inc. is the responsible party for the personal information described in this policy.

Website: https://zendly.co.za
Contact: hello@intelliuminc.co.za

2. Who this policy applies to

Zendly is used by Intellium Inc. and by clients who have authorised the agency to manage their social media accounts. You only have data in Zendly if you or your organisation connected an account to it.

3. Account data you give us directly

When an account is created on Zendly we store a name, an email address and a hashed password. These are used to sign you in and to contact you about the service. They are not used for marketing and are not shared.

4. Data we receive from connected platforms

When you connect a social media account, that platform asks you to approve a specific list of permissions. We only receive what those permissions allow. Nothing is collected before you approve, and you may decline or cancel at any point.

4.1 TikTok

Zendly requests the following from TikTok, and uses each for the stated purpose only.

• Login Kit (user.info.basic, user.info.profile): we receive your TikTok open ID, username, display name and avatar image URL. We use these to confirm which TikTok account is connected and to display it in the dashboard, so you can see which account a scheduled post will publish to.
• Display API (video.list, user.info.stats): we receive a list of your recent public posts and aggregate counts of followers, likes and views. We use these to show performance figures next to your scheduled content.
• Content Posting API, Direct Post (video.upload, video.publish): we send the post you created and receive back the publishing status and the resulting post ID. We use this to publish at the time you chose and to report whether it succeeded.

4.2 Every other connected platform

The same applies to every other network Zendly supports, including Facebook, Instagram, X, YouTube, LinkedIn, Pinterest, Threads, Reddit, Bluesky, Mastodon, Discord, Telegram, Slack, WordPress and Google Business Profile. The full list is on the Platforms page.

For each of them we receive the connected page or profile identifier, its name and avatar, the access tokens needed to publish, and basic performance figures for content published through Zendly. The purposes are the same in every case: identify the account, publish what you scheduled, report how it did. We never request more than a platform needs for those three things.

5. What we do with your content

Content means the text, images and video you upload and schedule. You keep all rights to it. Zendly stores it so that it can be published at the time you set, and serves it to the destination platform at the moment of publishing. TikTok in particular retrieves media by downloading it from our server.

We do not edit your content, we do not republish it anywhere you did not select, we do not use it in marketing, and we do not use it to train machine learning models. Zendly only ever publishes content that a person wrote and scheduled. It does not generate or post anything on its own.

6. What we do not do

• We do not sell your data.
• We do not share it with advertisers, data brokers or any third party for their own purposes.
• We do not use platform data to build advertising profiles.
• We do not use platform data or your content to train machine learning models.
• We do not access private messages, and we do not request permission to.
• We do not collect data about other users of a platform, only the account you connected.
• We do not remove or alter creator copyright mechanisms such as watermarks.

7. Where your data is stored

Zendly runs on a private server rented from DigitalOcean. Data is held in a PostgreSQL database on that server, and access is restricted to named Intellium Inc. administrators. All traffic to and from Zendly is encrypted with TLS. Media you upload is stored on the same server and served from zendly.co.za so that destination platforms can retrieve it when a post publishes.

The website makes no requests to third party hosts. Fonts and images are served from our own server, so visiting Zendly does not disclose your visit to anyone else.

8. Cookies

Zendly sets only strictly necessary cookies. These keep you signed in and protect the sign-in form against cross-site request forgery. They are not used for advertising, profiling or analytics, and no third party sets cookies through Zendly.

Because these cookies are strictly necessary to deliver a service you asked for, they do not require consent under the Protection of Personal Information Act or the General Data Protection Regulation. Clearing them signs you out.

9. How long we keep it

• Connection data (open ID, username, avatar) is kept for as long as the account stays connected.
• Access and refresh tokens are kept only while the connection is active, and are deleted when you disconnect or when the platform revokes them.
• Performance figures retrieved from a platform are cached for up to 30 days, then refreshed or discarded.
• Media you upload is kept until you delete it, or for 90 days after the post has published, whichever comes first.
• Account data is deleted within 30 days of you closing your Zendly account.

10. How to disconnect and delete your data

You can revoke our access at any time by either route below.

• In Zendly: open the channel and select Disconnect. This deletes the stored tokens and profile data for that account immediately.
• On TikTok: go to Settings and privacy, then Security and permissions, then Manage app permissions, and remove Zendly. This revokes our access at TikTok's end straight away. Facebook, Instagram, LinkedIn and Google offer the same control in their own account settings.

To have everything erased, including your Zendly account, email hello@intelliuminc.co.za from the address on the account. We action deletion requests within 30 days and confirm by email when it is done.

Disconnecting does not delete posts already published to your profile. Those live on the platform and you control them there.

11. Your rights

Intellium Inc. is based in South Africa and handles personal information in line with the Protection of Personal Information Act, 2013 (POPIA). Where the General Data Protection Regulation applies to you, we honour those rights as well.

You have the right to ask what we hold about you, to have it corrected, to have it deleted, to withdraw consent, and to object to how we use it. Email hello@intelliuminc.co.za and we will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za.

12. Children

Zendly is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact us and we will remove it.

13. Security

Access to the Zendly server is restricted to named administrators using key based authentication. Passwords are stored hashed, never in plain text. Platform tokens are stored encrypted. We keep the software patched and apply security updates as they are released.

No system is perfectly secure. If a breach occurs that affects your personal information, we will notify you and the Information Regulator as POPIA requires.

14. Third party platforms

Connecting an account means that platform's own terms and privacy policy apply to your use of it, alongside this one. TikTok's privacy policy is at tiktok.com/legal/privacy-policy.

15. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your data, we will email account holders before it takes effect.

16. Contact

Intellium Inc.
Cape Town, South Africa
hello@intelliuminc.co.za