Privacy Policy
Last updated: October 4, 2026
This policy explains how Shutterabia Media LLC (“Shutterabia”, “we”, “us”) handles information in the Bannerabia app at app.bannerabia.com (the “App”) and on this website, bannerabia.com (the “Site”). In the App, a “Client” is a business whose social media accounts are managed in Bannerabia.
1. Who is responsible for your data
The data controller is Shutterabia Media LLC, 2603 Augusta Dr, Ste 175, Houston, TX 77057, United States. Email: info@shutterabia.com. Phone: +1 (832) 544-0005.
When an agency uses Bannerabia to manage its own clients' accounts, that agency decides what to connect and publish; we process that data on its behalf to provide the App.
2. What we collect
Account information
- Your name, email address and password. Passwords are stored only as a one-way hash, never in readable form.
- Your organization and Client names, team memberships and roles, timezone and notification preferences.
- Session data needed to keep you signed in (a login cookie on app.bannerabia.com).
Data from platforms you connect
When an Owner connects a platform account, we receive data through that platform's official API, limited to the permissions you approve on the platform's own sign-in screen:
- Account and page identifiers and names (for example, a Facebook Page ID, Instagram account ID, Google Business Profile location, LinkedIn Page, YouTube channel).
- Access tokens (and refresh tokens where the platform issues them) that let the App act on that account. Tokens for accounts connected through the App are stored encrypted.
- Comments on the connected accounts' posts and reviews of the connected business, so they can appear in the Inbox, along with replies made through the App.
- Insights and analytics for the connected accounts and their posts (for example reach, engagement and follower counts), stored as snapshots.
- Basic publishing status and posting limits reported by the platform.
Content you create or upload
- Drafts, captions, schedules, approvals and replies.
- Images and videos you upload to the Media library.
- Client guidelines (notes about a Client's voice and what to avoid) and Agent chat conversations.
AI provider keys
If you connect an AI provider (for example Anthropic, OpenAI, Google Gemini, DeepSeek, Moonshot or OpenRouter), we store the key or connection credential encrypted, and we keep usage records (such as runs and estimated cost) so you can see what the assistant is doing.
Activity records
We keep records of important actions (for example who approved, published, connected or deleted something) for security and troubleshooting.
This website
bannerabia.com is a static website. It does not use analytics, advertising or tracking cookies. Our hosting provider (Cloudflare) may process standard technical data such as IP addresses to deliver and protect the Site.
3. How we use data
- To provide the App: let you draft, approve, schedule and publish content, read and reply to comments and reviews, and show analytics.
- Platform data is used only to do what you ask in the App: publishing or scheduling content that has been approved, showing comments and reviews in the Inbox and posting the replies you approve, hiding or unhiding comments you choose, and showing insights. We do not use platform data for advertising, profiling or any unrelated purpose.
- To generate drafts with the AI provider you choose. When the assistant works on a Client, the relevant context (such as Client guidelines, recent posts, comments or reviews, and your instructions) is sent to that AI provider under your own account with them.
- To send account emails: email verification, password resets, team invitations, and the notifications you turn on.
- To keep the App secure, prevent abuse, fix problems, and meet legal obligations.
4. We do not sell your data
We do not sell, rent or trade personal data or platform data, and we do not share it with data brokers or advertisers. We do not use data received from Meta, TikTok, Google, LinkedIn or YouTube to train AI models.
5. Who we share data with
We share data only with the service providers needed to run the App, and only for that purpose:
- Meta (Facebook and Instagram), Google (Google Business Profile and YouTube), LinkedIn, and TikTok (once available) — through their official APIs, to publish and manage the content you approve on the accounts you connect.
- Cloudflare — website hosting, network delivery and security.
- Resend — delivery of account and notification emails.
- The AI provider you choose — to generate drafts, plans and replies. Their handling of data is governed by your agreement with them.
We may also disclose data if required by law, or to protect the rights and safety of our users or the public. If Shutterabia is involved in a merger or sale, data may transfer to the successor under this policy.
6. How long we keep data
- Account and Client data is kept while the account or Client is active.
- When an Owner deletes a Client in the App, it is closed right away and enters a 30-day recovery period. After that period it is scheduled for permanent deletion.
- When you disconnect a platform in the App, its stored access token is revoked and no longer used. The encrypted token record is removed when the Client is permanently deleted.
- Activity and security records may be kept for a limited period after deletion where needed for security, fraud prevention or legal reasons.
See Data deletion for how to delete your account and data.
7. Security
- Platform access tokens for accounts connected through the App, and AI provider keys, are encrypted at rest with AES-256-GCM, using a separate data key for each organization.
- Passwords are stored only as hashes.
- Data is sent over encrypted HTTPS connections.
- Access inside the App is limited by role (Owner, Staff, Contributor, Reviewer, Client), and sensitive actions such as deleting a Client require your password.
No system is perfectly secure. If we learn of a breach that affects your data, we will notify you as required by law.
8. Your rights and choices
- Access and correction — you can see and edit most of your data in the App, or ask us for a copy.
- Deletion — you can delete a Client in the App or ask us to delete your account. See Data deletion.
- Disconnect platforms — disconnect any account in the App, or remove Bannerabia from the platform's own settings (for Facebook: Settings → Apps and Websites).
- Email choices — turn notification emails on or off in the App. Account emails such as password resets are always sent.
Depending on where you live (for example California, or the European Economic Area and UK), you may have additional rights under local law. Email info@shutterabia.com to make a request; we will respond within the time the law requires.
9. Children
Bannerabia is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
10. International users
We are based in the United States, and data is processed in the United States and wherever our service providers operate.
11. Changes to this policy
We may update this policy. When we do, we will change the date at the top of this page, and for significant changes we will notify account Owners by email or in the App.
12. Contact
Shutterabia Media LLC
2603 Augusta Dr, Ste 175, Houston, TX 77057, United States
Email: info@shutterabia.com or shutterabia@gmail.com
Phone: +1 (832) 544-0005