Privacy Policy

Castlane is a social media publishing tool operated by Ancient City Associates LLC (“we”). Our team uses it to prepare posts and publish them to social media accounts that we own, or that we manage for clients who connect their accounts. This policy explains what Castlane stores, why, and how to have it removed.

What Castlane collects

• Staff sign-in. The name and email address from the Google account our staff use to sign in. Nobody else can sign in.
• Connected accounts. When an account owner connects Facebook, Instagram, Threads, LinkedIn, Pinterest, or YouTube, Castlane receives an access token (and a refresh token where the platform issues one), the permissions granted, and basic account details: the account, Page, board, or channel id, its name or username, and its profile picture.
• Content. The text, links, images, and videos written or uploaded in Castlane, and when each post should go out.
• Records. Publishing results (post ids, links, and errors), a log of actions taken in Castlane, and technical logs used to keep the service running.

Castlane uses one cookie, to keep staff signed in. It has no analytics, no advertising, and no tracking.

How Castlane uses it

Only to publish the content a person chose, to the accounts they chose, at the time they chose; to show whether each connected account is working; to renew access before it expires; and to alert our staff when something fails. Castlane does not read other people’s posts, does not sell or rent any information, does not use it for advertising, and does not use it to train AI models.

Where it is stored and how it is protected

Castlane runs on a private server hosted by Hostinger. Uploaded media and encrypted backups are stored with Cloudflare. Access tokens are encrypted (AES-256-GCM) with keys kept apart from the database, and all traffic uses HTTPS.

Who it is shared with

• The platforms you publish to, which receive the posts you send them.
• Service providers that run Castlane for us: Hostinger (hosting), Cloudflare (file storage and backups), Google (staff sign-in), and Resend (alert emails to our staff).
• Anyone we are required to share it with by law.

Nothing is shared with anyone else.

YouTube and Google

Castlane uses YouTube API Services to upload videos to channels you connect. By connecting a YouTube channel, you agree to the YouTube Terms of Service, and Google’s use of your information is governed by the Google Privacy Policy. You can remove Castlane’s access at any time from your Google security settings page.

Castlane’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping and deleting information

• Tokens are kept only while an account is connected.
• Disconnecting an account in Castlane deletes its tokens and account details right away.
• Removing Castlane in a platform’s own settings stops all publishing to that account. For Threads, Meta also notifies Castlane, which marks the account disconnected at once.
• Email us to have everything about your accounts deleted, including posts and media. We finish within 7 days, and encrypted backups expire on their own after 30 days.

Children

Castlane is a business tool and is not meant for anyone under 18.

Changes

We will post any change to this policy on this page and update the date at the top.

Contact

Ancient City Associates LLC, 2421 Carr St, Palatka, FL 32177 · hello@ancientcitygroup.com · (904) 650-6444