Privacy Policy | Schedult

This policy explains what personal information Schedult ("Schedult", "we", "us") collects when you visit schedult.com, contact us or use our service, how we use it, and the choices you have.

Who we are

Schedult is based in Singapore. We handle personal information in line with Singapore's Personal Data Protection Act 2012 (PDPA).

Privacy questions and requests go to our Data Protection Officer. To reach them, use our contact page (https://schedult.com/contact), or open a support ticket in your client portal.

What we collect

When you sign up and use Schedult

Account details: your name, email address and business name.
Billing details: your plan and payments. Payment details are handled by Stripe, and we don't store your card number.
Your Brand Kit and files: your logo, colors, fonts, what you offer, your customers, promotions, posting times, and any photos or files you upload.
Connected social accounts: when you connect a social account, our posting partner WoopSocial keeps a secure connection (a token) so posts can be published. We never see your social media passwords.
Connected website: if you'd like blog posts sent straight to your website, we keep a secure connection (a token) that lets us post to your site. We never see your website password.
Your feedback: ratings and change requests on your posts.
Support: your support tickets and messages to us.

When you contact us

If you use our contact form, we collect your name, email address, business name and message. Contact form messages are emailed to our team so we can reply.

When you visit our website

Our hosting provider keeps basic server logs, such as your IP address, browser type, the pages requested and when. We use these to keep the site running and secure.

Our website currently uses no analytics cookies and no advertising trackers. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers to fetch them. See our Cookie Policy for more.

How we use it

To provide the service: to plan, make, schedule and publish your posts, run your client portal, and handle your change requests.
To bill you: to manage your trial, subscription and payments.
To talk to you: to send account emails such as invites, reply to support tickets and contact form messages, and send the notifications you've chosen in your portal settings.
To keep things secure: to protect your account, the service and our website.
To meet legal obligations: such as keeping tax and accounting records.

We use AI tools to help research and draft your content. When we do, the information needed for that task, such as details from your Brand Kit, is sent to the AI provider listed below.

We only use your information for these purposes, or for others we tell you about and, where needed, ask your consent for.

We don't sell your personal information, and we don't share it for advertising. We share it only with the service providers that help us run Schedult, and only what each one needs:

Stripe: payments and billing.
Supabase: accounts, our database and file storage.
WoopSocial: connecting your social accounts and publishing your posts.
Resend: sending emails, such as invites, notifications and replies to contact form messages.
Hostinger: hosting our website and portal.
Anthropic: AI used to help research and draft your content.
Unsplash: stock photos used in posts.

When we publish your posts, they appear on the social accounts and website you connected and are public there, under those platforms' own privacy policies.

We may also share information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of our business (in which case this policy would continue to apply).

Data outside Singapore

Some of the providers listed above store or process information outside Singapore. When that happens, we take reasonable steps to make sure your information gets a standard of protection comparable to the PDPA, as the PDPA requires.

How long we keep it

Account details, Brand Kit and uploaded files: while you're a client, then 90 days after you cancel.
Billing records: 5 years, as Singapore's record-keeping rules require.
Support tickets and contact form messages: 2 years.
Server logs: 30 days.

Posts already published to your social accounts or website stay there until you remove them.

How we protect it

We protect your information with access controls and encryption in transit. Each client can only reach their own data and files in the portal. Card details are handled by Stripe, and your social media and website passwords are never shared with us. No system is perfectly secure, but we work to keep your information safe and will tell you if a breach affects you, as the law requires.

Your rights and choices

You can ask us to:

Access the personal information we hold about you.
Correct anything that's wrong.
Delete your information.
Export your information in a portable format.

You can also withdraw consent you've given us at any time. If that means we can no longer provide part of the service, we'll tell you.

To make a request, contact our Data Protection Officer through our contact page or a support ticket in your client portal. We may need to confirm it's you before acting on a request. We'll reply within 30 days. We won't treat you differently for using your rights.

You can also choose which notifications reach you by email in your portal settings.

If you're unhappy with how we've handled your information, please tell us first so we can try to fix it. You can also complain to the Personal Data Protection Commission (PDPC) Singapore.

Children

Schedult is a service for businesses and isn't meant for children. We don't knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy as Schedult changes. If we make an important change, we'll let clients know before it takes effect. The date at the top of this page shows when it was last updated.