1. Scope
This Privacy Policy applies to Under Ellum’s public website, inquiry and onboarding activities, content-production services, publishing assistance, and any future social-platform connection features that reference this policy.
Under Ellum’s client portal and direct social-platform integrations are planned capabilities and are not described here as currently operating. The connected-account provisions below apply if and when a user chooses to connect an account through an Under Ellum application or approved service provider.
2. Information we may handle
Contact and onboarding information
We may receive names, business names, email addresses, phone numbers, professional roles, websites, social-profile links, brand information, project goals, and information provided in inquiries, interviews, or onboarding materials.
Connected social-account information
If social integrations are introduced and a user connects an account, we may receive platform identifiers, account or Page identifiers, usernames, profile names, profile images, account type, granted permissions, and other profile information made available by the platform’s authorization process.
OAuth credentials
If direct integrations are introduced, Under Ellum may receive OAuth access tokens and refresh tokens needed to act within the permissions the user grants. Users should connect through the platform’s own authorization page and should never send Under Ellum a social-media password, recovery code, or token by email.
Client content and instructions
We may handle client-supplied or client-authorized videos, audio, photographs, captions, scripts, logos, music, brand assets, publishing settings, destination selections, requested schedules, revision notes, factual or professional attestations, and exact-version approvals.
Technical and delivery records
Where applicable, we may create or receive technical logs, timestamps, file identifiers or hashes, authorization events, error records, platform responses, publication identifiers, status checks, and publication receipts. Our website and service providers may also process ordinary device, browser, IP-address, and security-log information.
3. How we use information
We use information as reasonably necessary to:
- respond to inquiries and communicate about requested services;
- plan, create, revise, organize, and deliver client content;
- present exact content versions for review and record approvals;
- provide scheduling or publishing assistance when that capability is available and specifically authorized;
- connect, verify, maintain, or disconnect authorized social accounts when integrations are introduced;
- confirm intended publishing destinations and produce delivery or publication records;
- operate, troubleshoot, secure, and improve the website and service;
- prevent misuse, fraud, duplicate publication, or unauthorized access; and
- comply with applicable legal obligations and enforce applicable agreements.
We do not use a connected account to publish unrelated material or to access information outside the permissions granted by the user and the relevant platform.
5. Your choices and account control
You may decline optional information, although some information may be necessary to provide a requested service. If account connections are introduced, you may revoke Under Ellum’s access through the relevant social platform’s settings. Revocation stops future access under that authorization but may not by itself delete information already retained by Under Ellum.
You may request access, correction, disconnection, or deletion by emailing privacy@underellum.com from an address we can reasonably associate with you or your organization. For step-by-step instructions, see our Connected Account and Data Deletion Instructions.
6. Retention and deletion
We retain information only for as long as reasonably necessary for the service, the client relationship, security, dispute resolution, legal compliance, fraud prevention, and legitimate business records. Retention needs vary by category; for example, working media, approval evidence, security logs, OAuth credentials, and transaction records may require different treatment.
Under Ellum has not adopted a single fixed public retention period for every category. OAuth credentials, if introduced, should be removed or made unusable after a valid disconnection or deletion request unless continued retention is necessary for security, fraud prevention, legal compliance, or the resolution of an active issue.
Deletion requests may be limited by necessary legal, security, fraud-prevention, backup, dispute, and transaction-record requirements. When information must be retained, we will limit its continued use to the applicable purpose.
7. Security
Under Ellum uses and, as planned services are introduced, will continue to develop administrative and technical safeguards appropriate to the information and service involved. No storage or transmission method is completely secure, and we cannot guarantee absolute security.
8. Policy changes
We may update this policy as the service develops, platform requirements change, or our information practices change. The effective and last-updated dates at the top of this page identify the current version.
9. Contact
Under Ellum is a creative content studio based in the Dallas, Texas area. Questions about this policy or requests involving personal or connected-account information should be directed to: