← Back to HomeLegal

Privacy Policy

Last updated: March 1, 2026

GriotOS ("we," "us," "our") is operated by CEL3 Interactive. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the GriotOS platform and related services (the "Service"). By using the Service, you consent to the practices described herein.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored in hashed form). You may also provide a company name, profile photo, and other optional profile details.

Social Media Account Data: When you connect third-party social media accounts, we collect and securely store authentication tokens (OAuth access tokens and refresh tokens) that allow us to post content and retrieve profile information on your behalf.

Content Data: We store the posts, blog articles, media files, campaigns, and scheduling data you create within the Service.

Contact Data: If you use ConnectGriot's CRM features, we store contact information you import or create.

Usage Data: We automatically collect technical information including IP address, browser type, operating system, pages visited, and feature usage patterns.

Analytics Data: When you use InsightGriot, we retrieve and store analytics data from connected platforms.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Publish and schedule content to your connected social media accounts on your behalf
  • Display analytics and performance data from connected platforms
  • Power ForgeGriot's AI content generation features
  • Manage your contacts and CRM data within ConnectGriot
  • Send you service-related communications
  • Detect, prevent, and address technical issues and security threats

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

3. Facebook and Instagram Data

When you connect your Facebook Page or Instagram Business/Creator account, we access only the specific permissions you explicitly authorize during the OAuth flow. We do not access your private messages, friend lists, personal timeline, or any data beyond what is strictly necessary. Facebook and Instagram data is used solely to provide the Service and is never shared with third parties.

4. Data Security

We implement industry-standard security measures:

  • All OAuth tokens are encrypted at rest using Microsoft Data Protection APIs
  • All data in transit is encrypted using TLS/HTTPS
  • Passwords are salted and hashed using modern cryptographic algorithms
  • Access to production systems is restricted and audited

5. Third-Party Services

The Service integrates with third-party platforms including Twitter/X, LinkedIn, Facebook, Instagram, WordPress, Ghost, and Medium. We also use AI model providers (such as Anthropic and OpenAI) for ForgeGriot's content generation — your brand context may be sent to these services for generation, but is not stored by them beyond each request.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. When you disconnect a social media account, we immediately revoke and delete the stored authentication tokens for that platform.

7. Your Rights

You have the right to access, correct, delete, disconnect, export, and object to processing of your data. To exercise any of these rights, contact us at privacy@griotos.com.

8. Cookies

The Service uses essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

CEL3 Interactive
Email: privacy@griotos.com
Website: www.griotos.com