Privacy policy
Fresh2Wow is operated by DMGO LLC, a Florida limited liability company based in Miami, Florida, USA ("DMGO", "we", "us"). This policy explains what personal data we collect when you use fresh2wow.com, app.fresh2wow.com and related services (the "Service"), why we collect it, who we share it with and what rights you have. We wrote it to be read. Questions: privacy@fresh2wow.com.
1. Who is responsible
DMGO LLC is the data controller for the personal data described here. For data you upload about other people (for example, content about your clients or team members you invite), you are the controller and we process it on your behalf under these terms.
2. What we collect
2.1 Data you give us
- Account: email address, display name, language preference, password-less sign-in codes and session data.
- Workspace content: brands and brand-voice profiles, post text, captions, per-network variants, scheduling data, comments and approvals, media files (images, video) you upload or import, and tags or titles you assign to them.
- Team: the email addresses of people you invite and the role you assign them.
- Waitlist: email address, page language and the source link you arrived from.
- Script sample: if you ask for the free sample at fresh2wow.com/en/script, your email address and the two lines you type (what you do and who it is for). Those two lines are sent to our AI provider to write the sample, and the sample is kept with your contact so we can email it to you. Asking for it adds you to the waitlist.
- Support: anything you send us by email or through in-app reports, including screenshots.
- Billing: plan, credit balance and transaction history. Card details are entered on Stripe's pages and never stored by us.
2.2 Data from social networks you connect
When you connect Instagram, Facebook, Threads, TikTok, YouTube, X, LinkedIn or another supported network, that network sends us, with your consent, your account identifier, handle and display name, profile picture, the pages or channels you manage, and OAuth access tokens that let us publish on your behalf. Where the network makes it available, we also retrieve the performance numbers of your own posts on the connected account (such as likes, comments, shares, saves, views and reach) and its follower count. On plans that include it, when you connect an account we also retrieve your own posts from the previous 30 to 180 days (text, link, date and those numbers) so your Dashboard does not start empty. We never receive or store your social network passwords.
2.3 Data from Google
If you connect a YouTube channel or Google Drive, Fresh2Wow uses Google API Services. We request only the scopes needed to upload videos to your channel, read basic channel data, and list and copy the files you choose from Drive. Fresh2Wow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features are also subject to the YouTube Terms of Service and the Google Privacy Policy. You can revoke our access at any time from your Google account permissions.
2.4 Data collected automatically
- Usage and diagnostics: which features you use, timestamps, error codes, request identifiers and performance timings. Our logs carry identifiers only: never post text, media, prompts, tokens or email addresses.
- Device and connection: IP address, browser type, operating system and approximate region derived from the IP address, as part of normal web server operation and security monitoring.
- Cookies: only those needed to keep you signed in and remember your preferences (language, theme). We do not use advertising cookies. See section 9.
3. Why we use it and on what legal basis
- To provide the Service — generate, review, schedule and publish your content, store your media, show your results (performance of a contract).
- To run AI features — your idea, source text, brand voice and post text are sent to the AI provider you use through the Service to generate text or images you asked for (performance of a contract). Providers process this data to return the result and do not use it to train their models under our agreements with them.
- To bill you — subscriptions, credit packs, invoices, fraud prevention (performance of a contract, legal obligation).
- To keep the Service secure and working — monitoring, abuse prevention, debugging, backups (legitimate interest).
- To communicate with you — transactional email such as sign-in codes, publish failures, credit warnings and invoices (performance of a contract); product updates and marketing email only with your consent or where the law allows for existing customers, always with an unsubscribe link (consent, legitimate interest).
- To comply with the law — tax, accounting and responding to lawful requests (legal obligation).
4. Who we share it with
We do not sell personal data and we do not share it with data brokers. We share data only with:
- The social networks you connect, when you publish: your post text, media and scheduling instructions go to that network under its own terms and privacy policy.
- Service providers (sub-processors) that host or process data for us under contracts that limit them to our instructions: Supabase (database, authentication, file storage), Vercel (web hosting), Stripe (payments), Resend (transactional email), n8n (workflow automation), Anthropic and other AI model providers listed in the app (AI generation), Google (YouTube and Drive APIs), Meta, TikTok, X and LinkedIn (publishing APIs), GoHighLevel (customer relationship and marketing email), Grafana Labs and Sentry (monitoring and error reporting). To measure our advertising we use Meta Pixel and the Meta Conversions API: we send Meta browsing, signup and purchase events with your email as a hash (never in clear text); you can limit the use of your ad data in the ad settings of your Meta account.
- Your team: members of your workspace see the content and settings of that workspace according to their role.
- Authorities and advisers when the law requires it or to protect our rights, our users or the public.
- A successor if DMGO is involved in a merger, acquisition or sale of assets; we would notify you before your data becomes subject to a different policy.
Requests from public authorities. If an authority asks us for personal data, we review that the request is lawful and properly formed, we challenge it when we consider it unlawful or overbroad, we disclose only the minimum information necessary, and we document every request and our response. Unless the law prohibits it, we notify you before handing over your data. To date we have received no such request.
5. International transfers
We are based in the United States and our providers process data mainly in the United States and the European Union. If you are in the EU, UK or Switzerland, transfers to us and to our sub-processors rely on Standard Contractual Clauses or an equivalent lawful mechanism, and on the safeguards described in section 7.
6. How long we keep it
- Account and workspace data: while your account exists. Deleting a workspace or your account removes its content from active systems within 30 days; backups rotate within a further 30 days.
- Social network tokens: deleted immediately when you disconnect the network or delete the workspace, and revoked at the network where its API allows it.
- Posts imported from an account's history: deleted when you disconnect the account, when the network tells us you withdrew the access, or when the workspace is deleted.
- Media: until you delete it or the workspace is deleted.
- Performance metrics: for the period covered by your plan's analytics window, then aggregated or deleted.
- Logs and diagnostics: up to 90 days.
- Billing records: as long as tax and accounting law requires, typically 7 years.
- Waitlist and marketing contacts: until you unsubscribe or 24 months after your last interaction.
- Script samples: 90 days. If you create an account with that email address, they are kept with it so your first brand starts from what you wrote.
7. Security
Data is encrypted in transit and at rest. Social network tokens are additionally encrypted at the application layer and are decrypted only inside our server-side functions; they never reach your browser or our automation tools. Every workspace is isolated by database-level access rules. Access by our staff is limited to what is needed to operate and support the Service and is logged. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
8. Your rights
You can access, correct, export and delete your data from the app. You can disconnect any social network at any time from Accounts, and delete your whole account or a workspace from Settings; the data deletion page explains each path. If you prefer, write to privacy@fresh2wow.com; we answer within 30 days and may ask you to verify your identity.
If you are in the EU, UK or Switzerland you also have the rights to restrict or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.
If you are a California resident you have the rights to know, delete and correct your personal information and to non-discrimination for exercising them. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. You may designate an authorized agent to make requests for you.
9. Cookies
app.fresh2wow.com sets strictly necessary cookies for authentication and preferences. fresh2wow.com sets none beyond what is required to serve the page. We do not run third-party advertising or tracking cookies. If we introduce analytics cookies we will update this section and ask for consent where required.
10. Children
The Service is for people aged 18 or older. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
11. Third-party platforms
Fresh2Wow is not affiliated with Meta, TikTok, Google, X, LinkedIn or any other network. Their handling of your data is governed by their own policies. Deleting content from Fresh2Wow does not delete posts already published on a network; do that on the network itself.
12. Changes
We will announce material changes in the app and by email at least 15 days before they take effect and update the date at the top. Continued use after that date means you accept the updated policy.
13. Contact
DMGO LLC · Miami, Florida, USA · privacy@fresh2wow.com (privacy) · support@fresh2wow.com (everything else).