Platform review · All providers

Reviewer data-handling summary

Concise map of data BrandMilo receives, why it is stored, and when it is removed. For platform reviewers and privacy readers. No secrets.

No secrets on this page

Test passwords, access tokens, and private credentials are shared only through the provider’s secure submission channel never published here.

Public use-case statement

BrandMilo processes authorized commerce and social data to generate reviewed drafts and publish through official APIs. This page summarizes categories for reviewers without exposing credentials.

Availability

Applies across current and planned integrations. Retention follows the Privacy Policy category table and public deletion summary.

Scopes / permissions

See each provider review pack for scope tables. This summary focuses on data categories.

OAuth / authorization steps

User authorizes a provider on the provider’s website.
BrandMilo receives tokens and account identifiers.
App stores encrypted credentials and permitted content metadata.
User can disconnect or request deletion at any time.

Reviewer steps

Read this summary alongside the relevant provider review pack.
Confirm Privacy Policy and Data Deletion pages match the described flows.
Confirm no passwords are collected for third-party platforms.

Demo video script

Demo video placeholder

Embed or link the recorded demo here after capture. Script outline:

Privacy Policy footer link
Data Deletion page
Integrations disconnect UI (when implemented)
This data-handling summary

Evidence checklist

PlannedOAuth tokens encrypted; removed/disabled on disconnect
PlannedShop/account IDs stored while needed
ReadyEtsy listing data for drafts only (no Phase 1 orders)
PlannedImages as URL and/or permitted cache
PlannedPinterest boards for destination selection
PlannedDrafts until draft/account deletion
PlannedSchedules until completion/cancel/deletion
PlannedProvider results retained under policy
PlannedUsage logs retained for a limited period

Data notes

OAuth tokens: maintain API access; encrypted; removed/disabled on disconnect/deletion
Shop/account ID: identify authorized resource; removed under deletion rules
Etsy listing data: display + draft generation; stored until deletion/retention expiry
Product images: compose posts; URL and/or permitted cache; removed with content deletion
Pinterest boards: destination selection; removed by resync, disconnect, or deletion
Draft content: review and publishing; stored until draft/account deletion
Schedule: publication timing; stored until completion, cancellation, or deletion
Provider result: status and reconciliation; retained under configured policy
Usage logs: security and reliability; limited retention

Reviewer access notes

This page intentionally contains no test passwords, tokens, or private keys.
Security reports: security@brandmilo.com

Support during review: privacy@brandmilo.com

Limitations & disclosures

Exact retention windows follow the Privacy Policy (example: BrandMilo retains account and workspace data while an account remains active. Following a verified deletion request, data is removed from active production systems within 30 days unless continued retention is required for security, fraud prevention, dispute resolution, tax, accounting, or legal obligations. Residual copies may remain in encrypted backups for up to 35 days before automatic expiration.)
Subprocessors are listed on /legal/subprocessors