Privacy Policy
This Privacy Policy explains how Stand And Stretch LLC ("Stand And Stretch," "we," "us," or "our") collects, uses, and shares information. It covers our website at standandstretch.ai and standandstretch.com, our client text line ("Ping"), and the mobile applications we publish under Stand And Stretch App Dev for the Apple App Store and Google Play.
1. Information we collect
Website
- Information you provide: name, email, phone number, business details, and anything you enter in a contact, quote, or audit form.
- Usage and device data: pages viewed, referring links, browser type, and similar analytics collected through Google Analytics 4 and our first-party measurement.
- Cookies: used for analytics and, where applicable, advertising measurement. You can control cookies through your browser settings.
SMS text line ("Ping")
- Your mobile number and the content of messages you send us.
- Consent records: the date, time, and method by which you opted in, so we can honor your preferences. Ping is account servicing only; we do not send promotional texts.
- You can opt out at any time by replying STOP, or get help with HELP. See our SMS Program Terms for full details.
Mobile applications
What an app collects depends on the app. Each app's store listing and in-app disclosures state its specifics. In general:
- Account-based apps (for example, our Stand And Stretch client app): the email address you use to receive a one-time sign-in link, your account and usage activity within the app, and the marketing data already associated with your business. Sign-in is passwordless; we do not store app passwords.
- Ad-supported apps (for example, our learning apps): the app itself does not require an account or collect personal information directly. Advertising is served through the Google AdMob SDK, which may collect your IP address, advertising identifier, app interactions, and diagnostics, and shares that data with Google to provide and measure advertising. See Google's policies in Section 5.
Client platforms we manage
When a business hires us to manage its website, online store, or advertising, we access that business's own platform data on its behalf through secure, revocable connections the business authorizes. Examples include a Shopify app the merchant installs, a WordPress application password, or an advertising account grant. This access can include products, content, orders, inventory, and performance analytics from platforms such as Shopify, WordPress, Google, and Meta. We use this access only to deliver the services the business hired us for. We do not sell it, order and analytics access is read-only, and the business can revoke our access at any time from its own admin.
2. Connected social accounts and social media management
When you connect a social account to us (for example Facebook, Instagram, TikTok, X, LinkedIn, or a Google Business Profile), you authorize us to publish content you approve to that account. This applies whether the account belongs to you, to your business, or to a client whose accounts we manage. You always remain the owner of your accounts and your content.
What we receive when you connect an account
- An access token issued by the platform, which lets us publish on your behalf,
and a basic account identifier that tells us which account we are posting to.
For TikTok, for example, this is a value the platform calls
open_id, along with your nickname and avatar so you can confirm the correct account is connected. - Only the minimum scopes needed to publish. We do not request permissions we do not need, and we do not ask for access to parts of your account that are unrelated to posting.
What we do with it
- We publish video and other content to the connected account. The account owner reviews and approves every post before it goes live. Nothing is posted without the owner's approval.
- We use the access only to provide the social posting service you asked for.
What we do not do
- We do not sell this data.
- We do not use it beyond providing the service.
- We do not access your private messages or unrelated account data.
TikTok
We access and post to the TikTok accounts users connect, only to publish content the account owner has approved, and we handle that data in accordance with this policy. Our use of the TikTok Content Posting API also follows TikTok's developer and content-posting policies.
Third-party platforms
Your use of these connections is also governed by each platform's own terms and privacy policy, including TikTok, Meta (Facebook and Instagram), X, LinkedIn, and Google. We follow each platform's developer and content-posting policies.
Managing accounts on behalf of clients
When we manage a client's social accounts, the client authorizes the access, remains the owner of its accounts and content, and can revoke our access at any time. We publish only what the client approves.
Retention and deletion
You can disconnect at any time from your own platform settings. When access is revoked or a connection is removed, we delete the stored access token for that account. You can also ask us to delete your data directly; see our Account & Data Deletion page and the contact details in Section 12 for how to request deletion.
3. How we use information
- To provide, operate, and improve our services, website, text line, and apps.
- To respond to your requests, send your reports, and communicate about your account.
- To measure performance and understand how our products are used.
- To serve and measure advertising in ad-supported apps.
- To protect our services against fraud, abuse, and security threats, and to meet legal obligations.
4. How we share information
We do not sell your personal information. We share it only as follows:
- Service providers who process data on our behalf (hosting, analytics, email and SMS delivery, payment processing), under contract and only as needed to provide the service.
- Advertising partners for ad-supported apps, specifically Google AdMob, as described in Section 5.
- Legal and safety reasons: to comply with law, enforce our terms, or protect the rights, property, and safety of our users and others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice consistent with this policy.
5. Analytics and advertising
- Google Analytics 4 on our website. You can opt out with Google's browser add-on.
- Google AdMob in ad-supported apps. Google's handling of this data is governed by the Google Privacy Policy. On most devices you can reset or limit your advertising identifier in your device settings.
6. Data retention
We keep information only as long as needed for the purposes above, to provide our services, and to meet legal, accounting, or reporting requirements. When no longer needed, we delete or de-identify it.
7. Your rights and choices
- Access, correction, deletion: you may request access to, correction of, or deletion of your personal information. See our Account & Data Deletion page for how to request deletion, including app accounts.
- SMS: reply STOP to opt out at any time.
- Cookies and ads: manage cookies in your browser; manage your advertising identifier in your device settings.
8. Children's privacy
Our services are not directed to children under 13, and we do not knowingly collect personal information from them. Apps intended for general audiences are configured accordingly in each store. If you believe a child has provided us information, contact us and we will delete it.
9. Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption of sensitive credentials at rest and in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. United States processing
We operate in the United States and process information here. If you access our services from outside the United States, you understand your information is processed in the U.S.
11. Changes to this policy
We may update this policy from time to time. We will revise the effective date above and, where appropriate, provide additional notice. Continued use after an update means you accept the revised policy.
12. Contact us
Stand And Stretch LLC
PO Box 333, Midland, GA 31820
lucas@standandstretch.com
(706) 406-1746