Privacy Policy

Effective date: 2 November 2026

This Privacy Policy explains how SS Coaching, LLC, a Delaware limited liability company trading as Money Master HQ ("we", "us", "our"), collects, uses, shares and protects personal information when you use Skylane at https://skylane.moneymasterhq.com, its web app, its API at https://skylane-api.moneymasterhq.com and related emails (the "Service").

We are the controller of account and website data. When you use Skylane to manage content and connected accounts, we process that data on your instructions; see our Data Processing Summary.

1. Summary

• We only connect to social platforms through their official APIs. We never ask for or store your social media passwords.
• Platform access tokens are encrypted at rest.
• We use platform data only to provide the features you use - publishing, status checks, alerts and analytics - and never sell it.
• We do not use platform data or your content to train AI models, and our AI provider may not use it to train theirs.
• You can disconnect any platform, export your data or delete your account at any time.

2. Information we collect

2.1 Information you give us

• Account details: name, email address, password (stored only as a salted hash), time zone, workspace names and two-factor authentication settings.
• Team details: names and emails of people you invite, and their roles.
• Your Content: captions, media, drafts, comments, brand voice notes, CSV uploads, approval notes and settings.
• Notification settings: your chosen alert events and channels, including Slack or Discord webhook URLs and your own webhook URLs.
• Support messages: what you send us by email.

2.2 Information from connected platforms

When you connect a platform, we receive an access token (and, where the platform provides one, a refresh token) and the account information that platform shares with the permissions you approve. Section 5 sets out exactly what we receive from each platform and how we use it.

2.3 Payment information

Payments are processed by Whop. We receive your name, email, billing country, plan, payment status and the last digits and type of your card. We never receive or store your full card number.

2.4 Information collected automatically

• Usage and device data: IP address, browser type, pages viewed, actions in the app, and timestamps, used for security, debugging and improving the Service.
• Error reports: technical details when something goes wrong in the app, collected through Sentry, with Your Content and tokens filtered out.
• Cookies: see our Cookie Policy.

3. How we use information

We use personal information to:

1. create and run your account and workspaces;
2. publish, schedule and check the status of posts on the platforms you choose;
3. run pre-flight checks, automatic retries and reconnect warnings;
4. send the alerts you have switched on, and essential service emails (such as security, billing and account emails);
5. show analytics for your connected accounts;
6. provide AI features you ask for;
7. take payments and prevent fraud;
8. keep the Service secure and enforce our Terms and Acceptable Use Policy;
9. answer support requests; and
10. meet legal obligations.

We send marketing emails only where the law allows and you can unsubscribe at any time.

Legal bases (UK and EEA users): performance of our contract with you (items 1 to 7 and 9), our legitimate interests in running a secure, reliable service (items 3, 8 and product improvement), consent where we ask for it (such as optional cookies and marketing), and legal obligation (item 10).

4. How we share information

We do not sell or rent personal information, and we do not share platform data for advertising.

We share information only:

• with the platforms you choose, to publish your content and read the data needed for status and analytics;
• with our subprocessors, who host and run parts of the Service under contracts that require them to protect it - see the Subprocessors list;
• with people in your workspace, according to their role;
• with clients you send approval links to, who see only the posts you share;
• with the destinations you configure, such as your Slack or Discord channel or your own webhook;
• when required by law or to protect the rights, safety and security of our users, the public or us; and
• in a business transfer, such as a merger or sale, under confidentiality and with this Policy continuing to apply.

5. Platform data: what we receive and how we use it

Skylane's use of information received from each platform follows that platform's developer terms and policies. For every platform:

• we access only the data needed for the features you use;
• we use it only to provide those features to you;
• we do not sell it, use it for advertising, or use it to build profiles of people;
• we do not use it to train AI models;
• we delete access tokens straight away when you disconnect the account; and
• we delete the rest of the platform data in line with section 8 and our Data deletion page.

5.1 Meta - Facebook Pages {#meta}

What we receive: your Facebook user ID and name; the list of Pages you choose to share, with each Page's ID, name, profile picture and access token; and insights for your Page and posts.

Why: to let you choose Pages, publish posts, photos, videos, Reels and Stories to them, confirm whether each post was published, and show Page and post analytics.

Typical permissions requested: pages_show_list, pages_read_engagement, pages_manage_posts, read_insights and business_management (only where your Pages are in a Meta Business portfolio).

Removing access: disconnect in Skylane, or remove Skylane in Facebook under Settings and privacy, then Settings, then Business integrations. See our Data deletion page for Meta's data deletion callback.

5.2 Instagram {#instagram}

What we receive: your Instagram professional account ID, username, profile picture, account type, and media and account insights.

Why: to publish feed posts, carousels, Reels and Stories, post a first comment where you ask us to, confirm the result and show analytics.

Typical permissions requested: instagram_basic or instagram_business_basic, instagram_content_publish or instagram_business_content_publish, instagram_manage_comments or instagram_business_manage_comments (only to post your first comment), instagram_manage_insights or instagram_business_manage_insights, and pages_show_list where you connect through a linked Facebook Page.

Removing access: disconnect in Skylane, or remove Skylane in Instagram under Settings and privacy, then Website permissions, then Apps and websites (or in Facebook's Business integrations if connected through a Page).

5.3 Threads {#threads}

What we receive: your Threads user ID, username, profile picture, and post and account insights.

Why: to publish posts and threads, confirm the result and show analytics.

Typical permissions requested: threads_basic, threads_content_publish and threads_manage_insights.

Removing access: disconnect in Skylane, or remove Skylane in Threads under Settings, then Account, then Website permissions.

5.4 TikTok {#tiktok}

What we receive: your TikTok open ID, display name, avatar, the privacy and interaction options your account allows (from TikTok's creator information), the publishing status of each post, and basic video statistics where you grant them.

Why: to show your account in Skylane, offer only the privacy and interaction options your account allows, upload and publish videos and photo posts you schedule, confirm the result and show analytics.

Typical scopes requested: user.info.basic, video.publish, video.upload and video.list (for post status and statistics).

Your choices: TikTok requires you to choose the privacy level and interaction settings for every post. We do not choose them for you.

Removing access: disconnect in Skylane, or in the TikTok app go to Settings and privacy, then Security and permissions, then Apps and services permissions and remove Skylane.

5.5 YouTube (YouTube API Services) {#youtube}

Skylane uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

What we receive: your channel ID, channel name and thumbnail, your playlists (so you can choose one), the upload and processing status of the videos you schedule, and channel and video statistics.

Why: to upload and publish the videos and Shorts you schedule with the title, description, thumbnail, privacy, audience and playlist you choose, confirm the result and show analytics.

Typical scopes requested: https://www.googleapis.com/auth/youtube.upload, https://www.googleapis.com/auth/youtube.readonly and, only if you use custom thumbnails or playlists, https://www.googleapis.com/auth/youtube.

Storage: we store your channel ID and name, encrypted tokens, the IDs of videos published through Skylane and their statistics. Statistics obtained from YouTube API Services are refreshed or deleted in line with YouTube's API policies, and are not kept for longer than YouTube allows.

Revoking access: you can disconnect YouTube in Skylane at any time, or revoke Skylane's access through your Google security settings. When access is revoked, we delete the related tokens straight away and the YouTube data we stored within 30 days, except where the law requires us to keep it.

5.6 Google API Services: Limited Use {#google-limited-use}

Skylane's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we:

• use Google user data only to provide and improve the user-facing features you see in Skylane;
• do not transfer it to others except as needed to provide those features, for security, to comply with law, or as part of a merger or sale with your notice;
• do not use it for advertising, including retargeting or interest-based advertising;
• do not sell it; and
• do not allow humans to read it, except with your consent for specific support cases, where needed for security or to comply with law, or where the data is aggregated and anonymised for internal operations.

We do not use Google user data to develop, improve or train generalised AI or machine learning models.

5.7 LinkedIn {#linkedin}

What we receive: your LinkedIn member ID, name, profile photo and email address (if you allow it); the company pages you administer and your role on each; and post and page statistics.

Why: to publish posts to your profile and the pages you choose, check that your role allows posting, confirm the result and show analytics.

Typical permissions requested: openid, profile, email, w_member_social, and for pages w_organization_social, r_organization_social and rw_organization_admin.

Removing access: disconnect in Skylane, or in LinkedIn go to Settings, then Data privacy, then Permitted services and remove Skylane.

5.8 X {#x}

What we receive: your X user ID, username, display name and profile image, and metrics for posts published through Skylane.

Why: to publish posts and threads, confirm the result, count your monthly link post allowance and show analytics.

Typical scopes requested: tweet.read, tweet.write, users.read, media.write and offline.access.

Removing access: disconnect in Skylane, or in X go to Settings and privacy, then Security and account access, then Apps and sessions, then Connected apps and revoke Skylane.

5.9 Pinterest {#pinterest}

What we receive: your Pinterest user ID, username and profile image, your boards (so you can choose one), and Pin and account analytics.

Why: to create Pins on the boards you choose, confirm the result and show analytics.

Typical scopes requested: user_accounts:read, boards:read, pins:read and pins:write.

Removing access: disconnect in Skylane, or in Pinterest go to Settings, then Security and logins, then Apps and revoke Skylane.

5.10 Bluesky {#bluesky}

What we receive: your Bluesky DID (decentralised identifier), handle, display name and avatar, and the records of posts published through Skylane.

Why: to publish posts and threads, confirm the result and show engagement.

How we connect: through Bluesky's OAuth sign-in. We never ask for or store your Bluesky password.

Removing access: disconnect in Skylane, or revoke the session in your Bluesky account settings. Note that posts on Bluesky are public records on a decentralised network.

5.11 Google Business Profile {#google-business-profile}

What we receive: when you connect, Google sends us an access token and a refresh token for the scope https://www.googleapis.com/auth/business.manage. With it we read the Business Profile accounts you can manage (each account's ID and name) and their locations (each location's ID, business name and storefront address). From the address we keep only the town or city, to help you tell locations apart. When you publish, Google returns the post's ID, its state (live, processing, scheduled or rejected) and its public Google Search link. After publishing, we regularly read each published post's insights: how many times it was viewed on Google Search and Maps, and how many times its button was clicked.

Why: to show you the locations you can post to, publish the updates, events and offers you schedule (with the text, photo, button, dates and offer details you choose) to the locations you pick, confirm the result and show analytics.

What we do not receive: reviews, customer messages, opening hours, phone numbers or any other Business Profile data. Skylane does not read or change your business information.

Storage: we store each location's ID, name, town or city and Google account name, encrypted tokens, the IDs and links of posts published through Skylane, and their insights. Section 5.6 (Limited Use) applies to all of it.

Revoking access: you can disconnect a location in Skylane at any time, or revoke Skylane's access through your Google security settings. When access is revoked, we delete the related tokens straight away and the Business Profile data we stored within 30 days, except where the law requires us to keep it.

5.12 Importing media from Google Drive and Dropbox {#media-imports}

You can add files to your media library from Google Drive or Dropbox. You choose each file in Google's or Dropbox's own picker window, and only the files you choose are shared with Skylane.

Google Drive: Google gives your browser a short-lived access token with the scope https://www.googleapis.com/auth/drive.file, which lets Skylane open only the files you pick. Your browser sends that token and the chosen file's ID to Skylane once. We use it to read the file's name, type and size and download the file, and we do not store the token. Section 5.6 (Limited Use) applies.

Dropbox: the Dropbox Chooser gives Skylane a temporary download link, the file name and its size for each file you pick. We download the file from that link and do not keep the link. We never receive your Dropbox password or access to the rest of your Dropbox.

Storage: imported files are stored in your media library like any other upload and follow the same retention rules (section 8).

6. AI features

When you use AI features, we send the text and instructions needed for that request (for example your draft caption and brand voice notes) to our AI provider, Anthropic, and, for image, voice or video features, to the provider named in the app before you run it. We do not send platform access tokens. Our providers process this data to return a result to you and are not permitted to use it to train their models. We do not use platform data received through Google APIs, or any other platform data, to train AI models.

7. Security

We protect personal information with measures that include encryption in transit (HTTPS), encryption of platform access tokens at rest, hashed passwords, optional two-factor authentication, role-based access for team members, limited staff access, logging and monitoring. No system is perfectly secure; if a breach affects your personal information we will tell you and the authorities as the law requires.

8. How long we keep information

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict some processing, to withdraw consent, and to complain to a data protection authority. California residents have the right to know, delete and correct, and to not be discriminated against for using these rights; we do not sell or share personal information for cross-context behavioural advertising.

You can:

• export your data in Settings, then Data and privacy, then Export my data;
• delete your account in Settings, then Data and privacy, then Delete my account;
• disconnect any platform in Accounts;
• change alerts in Settings, then Notifications; or
• email info@moneymasterhq.com from your account email.

We answer requests within 30 days and may need to confirm your identity first.

10. International transfers

We and our subprocessors may process information in the United States and other countries. Where the law requires, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

11. Children

Skylane is not for anyone under 18 and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

12. Changes to this Policy

We will post any changes on this page and update the effective date. If a change is material, we will tell you by email or in the app before it takes effect.

13. Contact

Money Master HQ (SS Coaching, LLC) 500 Westover Dr #19289, Sanford, North Carolina 27330, USA Email: info@moneymasterhq.com