Privacy Policy

Last updated: 23 September 2026

This policy explains what data B2B Creators collects, why we collect it, where it is stored, who we share it with, and how long we keep it. It applies to the B2B Creators web application at b2b-creators.com and to the B2B Creators MCP server, which allows AI assistants such as Claude to operate the product on your behalf.

B2B Creators is operated by Social Tree Global Limited, a company registered in England and Wales, company number 09939227, registered office 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF. We are the data controller for the personal data described below.

1. Data we collect

Account data

When you create a workspace we collect your name, email address, and authentication credentials. We never store plaintext passwords. We also record your workspace name, plan tier, and the members you invite.

LinkedIn data

When you connect a LinkedIn identity — a personal profile, a company page, or an advertising account — you authorise us through LinkedIn's OAuth flow. We do not receive or store your LinkedIn password. We store the resulting access and refresh tokens, and we retrieve: profile and page identifiers, names, headlines and profile images; posts you publish or schedule through the product, including copy and attached media; performance metrics returned by LinkedIn's APIs such as impressions, engagements, follower counts, reactions, comments and demographic breakdowns where LinkedIn makes them available; and advertising account metrics including spend, impressions, clicks and creative-level performance. We only access data for the identities you explicitly connect, and only within the permission scopes you grant at authorisation.

Facebook and Instagram data (Meta)

If you connect Facebook Pages or Instagram Business accounts in Multichannel Boost, you sign in through Meta's own login screen and choose which Pages and accounts to share. We never see your Facebook password. We store: your app-scoped Meta user ID; the IDs, names and profile pictures of the Pages and Instagram Business accounts you select; the Page access tokens Meta issues for them; and the posts you publish or schedule through us (text, images, videos, links), together with the resulting post IDs, permalinks and publishing status.

We use this data only to publish and schedule your own content to the Pages and accounts you chose, and to show you whether each post went live. We do not read your messages, followers or other people's content. We never sell Meta data, never share it with advertisers or data brokers, and never use it for advertising, profiling or training AI models. Access tokens are stored encrypted at rest in a table that cannot be read from the browser — only our publishing servers can use them, and only for the account that connected them.

Retention: tokens and channel details are kept until you disconnect the channel, remove B2B Creators in your Facebook settings, or delete your account — then they are deleted immediately. Post records are kept for the life of your account. To delete your Meta data, see our data deletion instructions or email max@b2b-creators.com.

Content you create

Content plans, scheduled and published post copy, brand profiles (tone of voice, colours, fonts, positioning), uploaded images, videos and carousel PDFs, and approval feedback left by you or your clients.

Billing data

Subscription status, plan tier, and feed counts. Card details are collected and stored by our payment processor and never reach our servers.

Technical data

IP address, browser and device information, and application logs recording which actions were taken and when. Logs are used for debugging, security monitoring and abuse prevention.

MCP server data

When you connect B2B Creators to an AI assistant, the assistant sends tool calls to our server on your behalf. We log the tool name, the workspace it was called against, and the outcome. We do not receive, store or have access to your conversation with the assistant — only the specific tool call it makes and the arguments that call carries. We do not query, read or retain assistant memory, chat history, conversation summaries, or user files.

2. How we use your data

We use your data to provide the service (publishing and scheduling posts, retrieving analytics, managing influencers and teams); to authenticate you and isolate your workspace's data from every other workspace; to generate the reports and performance breakdowns you request; to bill you correctly for the feeds and seats in use; to diagnose faults, monitor security and prevent abuse; and to send service communications about outages, changes and account status.

We do not sell your data. We do not use your content or your clients' content to train AI models. We do not use your data for advertising.

3. Where your data is stored

Data is stored in the United States (AWS us-east-1, North Virginia) on infrastructure provided by Supabase. Data in transit is encrypted with TLS. Data at rest is encrypted by our infrastructure provider. Access to production data is restricted to named personnel and is logged.

Each workspace's data is isolated at the database level. Requests to our API and MCP server are authorised per caller and scoped to the workspace they belong to.

4. Third parties we share data with

We share data only with the sub-processors required to run the service.

Where you choose to connect an optional integration, data is exchanged with that provider only at your instruction and only for that action. We may also disclose data where legally required, or to protect our rights, safety or property. We will give notice of material changes to this list.

5. How long we keep your data

Account and workspace data is kept for the life of your account, then deleted within 30 days of account closure. LinkedIn access tokens are kept until you disconnect the identity or the token is revoked, whichever is sooner — disconnecting removes the token immediately. Published and scheduled post content and analytics are kept for the life of your account so that historical reporting remains available. Billing records are retained for seven years to meet UK tax and accounting obligations. Application and MCP logs are kept for 90 days, then deleted.

You can request deletion at any time. Deleting your B2B Creators account does not delete content already published to LinkedIn — that lives on LinkedIn and must be removed there.

6. Legal basis

We rely on contract to provide the service you have subscribed to; legitimate interests for security monitoring, fault diagnosis and product improvement, balanced against your rights; consent for optional integrations you choose to connect and for any marketing email, which you can withdraw at any time; and legal obligation for retention of financial records.

7. Your rights

You have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive a copy in a portable format. To exercise any of these, contact us at the address below. We will respond within one month.

You can disconnect any LinkedIn identity at any time from within the app, which revokes our access immediately. You can export your content plans and reports before closing your account.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk.

8. International transfers

Some of our sub-processors are based outside the UK and EEA. Where data is transferred internationally we rely on UK International Data Transfer Agreements, Standard Contractual Clauses, or an adequacy decision, as appropriate.

9. Children

B2B Creators is a business product and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

We will post any changes on this page and update the date at the top. Material changes will be notified by email to workspace owners at least 14 days before they take effect.

11. Contact

Social Tree Global Limited (Social Tree Global), 79–81 Borough Road, London SE1 1DN. Registered office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

Privacy enquiries: max@b2b-creators.com
Support: jsa@socialtreeglobal.com