Privacy policy

Last updated 1 November 2026

This policy explains how Verified Match ltd (“we”, “us”) handles personal data when you use our content and social media management service at https://verifiedmatch.com (the “Service”). We are the data controller for the data described here. Questions: info@verifiedmatch.com.

What we collect

• Account details — your name, username, email address and a securely hashed password.
• Business details you give us — business name, description, website, location, contact details, brand colours, logos, photos and content preferences.
• Social media and Google connections — when you connect Facebook, Instagram, TikTok, LinkedIn, Google Business Profile or Google Ads through the platform's own sign-in screen, we receive an access token and basic account or page information (such as the page or profile name, ID and picture). We never ask for or store your social media passwords.
• Content — posts, captions, images, videos, comments and approval decisions created in the Service.
• Performance data — where you have allowed it, post and account statistics from the platforms (for example reach, views, likes, comments and followers).
• Technical data — sign-in times, IP address and actions taken, kept in a security log.

How we use it

• To create, schedule and publish content to the social media accounts you have connected, and only as you have authorised.
• To show your content calendar, approvals and reports.
• To generate draft captions, images and videos with AI tools, using your business details as context.
• To send service emails such as approval requests, publishing results and password resets.
• To keep the Service secure and to meet legal obligations.

Our legal bases are performing our contract with you, our legitimate interest in running a secure service, and your consent where you connect a social media account (which you can withdraw at any time).

Data from social media platforms

Data received through Facebook, Instagram, TikTok and LinkedIn APIs is used only to provide the Service to you: publishing the posts you or your agency prepare, showing your connected accounts and reporting on performance. We do not sell it, use it for advertising profiles, or share it with anyone except as described in this policy. Access tokens are encrypted and stored only on our server, and are never shown in the browser. Our use of this data follows each platform's developer terms and policies.

Google user data

If you connect a Google account, we ask only for the access needed for the features you use:

• Google Business Profile (business.manage) — to list the business locations you manage and publish updates (posts) you or your agency prepare to your Google listing.
• Google Ads (adwords) — to list the Google Ads accounts you can access and, at your request, create, update and report on advertising campaigns in those accounts.
• Basic profile (name, email address and Google account ID) — to show which Google account is connected.

We use Google user data only to provide these user-facing features. We do not sell it, use it for advertising or to build profiles, transfer it to others (except as needed to provide the Service, to comply with law, or as part of a merger with your notice), or allow humans to read it except with your permission, for security, or where the law requires. Google access tokens are encrypted on our server. You can disconnect Google at any time in the Service or at myaccount.google.com/permissions; we then delete the tokens we hold.

Verified Match ltd's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share data with

• The social media platforms and Google you connect — to publish your content, run the ads you approve and read statistics.
• AI providers (such as fal.ai and the model providers it routes to) — the text and media you choose to generate or edit are sent to them to produce the result.
• Hosting and email providers that run the Service for us.
• Authorities, if the law requires it.

Some providers may process data outside the UK/EEA; where they do, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your data while your account is active. If you disconnect a social account, we delete its tokens immediately. If your account is closed, we delete your data within 30 days, except where we must keep records for legal reasons. Backups are overwritten within 14 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and withdraw consent. Contact info@verifiedmatch.com. You can also complain to the Information Commissioner's Office (ico.org.uk). See how to delete your data.

Security

We use HTTPS, hashed passwords, encrypted social media tokens, role-based access so each business sees only its own data, and a security log of important actions.

Contact

Verified Match ltd
220-222 Warwick Road , Birmingham B11 2NB
info@verifiedmatch.com

Home · Privacy · Terms · Service agreement · Data deletion