Privacy Policy — DSPV Social Studio

Operated by DSPV Media (Drake Smith Media Services). Effective 2026-09-28. Replaces the version of 2026-09-23.

DSPV Social Studio ("the Service") is the marketing platform DSPV Media runs for the real estate agents it works with. It publishes content an agent has approved to that agent's own Instagram, TikTok and LinkedIn accounts (and LinkedIn Pages the agent administers), reports how the content performed, and helps the agent respond to people who ask about their services in comments and messages. This policy covers two groups of people:

• Agents, the account owners who connect their accounts to the Service; and
• People who interact with an agent's account by commenting on a post, sending a message, or filling in a form or landing page linked from a post.

Questions: drake@dspvmedia.com.

1. Information we collect

From agents who connect an account

• Account identifiers: Instagram professional account id and username, the linked Facebook Page id where one exists, TikTok account id and username, and LinkedIn member id, name and profile photo, plus the id and name of any LinkedIn Page the agent administers and connects.
• Access tokens that let the Service act on the agent's behalf. Tokens are encrypted at rest (AES-256-GCM); the encryption key is held only in our application environment, never in the database.
• Content: the photos, videos, graphics and captions the agent approves for publishing, their approval history, and the resulting post ids.
• Performance data: insights the platforms provide about the agent's own account and posts, such as views, reach, likes, comments, shares, saves and follower counts.
• LinkedIn exports the agent uploads: analytics files and data archives the agent downloads from LinkedIn and chooses to upload, used only to report on the agent's own posts.

From people who interact with an agent's account

• Comments left on the agent's posts, with the commenter's public username and platform user id.
• Messages sent to the agent's account, with the sender's username and platform user id.
• Contact details you choose to give, such as your name, phone number or email address, in a message or on a form linked from a post, along with the question you asked and any consent you gave to be contacted.

We do not collect passwords, payment details, your browsing activity on other sites, or the content of conversations you have with anyone other than the agent's account.

2. How we use it

• To publish content the agent has approved, at the time the agent chose.
• To show the agent reports on how their content is performing.
• When you comment on a post and ask for information (for example by commenting a keyword the post names), to send you one private reply with that information. Any further messages are sent only after you reply.
• To pass your question and contact details to the agent you contacted, so they can answer you, including by adding them to that agent's customer relationship management (CRM) system.
• To send you text messages or emails only if you asked for them and agreed to be contacted that way. You can stop them at any time by replying STOP to a text or using the unsubscribe link in an email.

Automated replies are identified as automated. Every post is approved by the agent before it publishes. We do not use this data for advertising targeting, we do not sell or rent it, and we do not use it to make decisions about anyone's eligibility for housing, credit, insurance or employment.

LinkedIn. On LinkedIn the Service only publishes the agent's approved posts and reports how those posts performed. We do not read or store the profiles of people who comment on or react to an agent's personal LinkedIn posts, and we never use LinkedIn member data to create leads, add people to a CRM, or combine it with other data. Someone becomes a contact only by filling in one of our forms or texting us themselves. Comments on a LinkedIn Page the agent administers may be shown to the agent so they can reply, and are not used for anything else.

3. How we store and protect it

Data is stored in a private PostgreSQL database on DSPV-operated infrastructure in the United States. Access tokens are encrypted as described above. Access is limited to DSPV Media staff who operate the Service and to the agent whose account the data belongs to.

4. Who we share it with

• The agent whose account you interacted with, and the CRM provider that agent uses.
• Meta Platforms and TikTok, through their official APIs, to publish content, read insights and reply to comments and messages.
• LinkedIn, through its official APIs, to publish the agent's approved posts and read analytics for the agent's own posts and Pages.
• Service providers that process data on our behalf under contract and only to run the Service: hosting, text-message and email delivery, and AI services that help draft captions and suggested replies for an agent to review.
• Anyone we are required to share it with by law.

We do not share it with anyone else.

5. Retention and deletion

We keep an agent's data while their account is active with the Service. When an Instagram account is disconnected, in the Service's Settings or by removing the app in your Instagram or Facebook settings, we delete its stored access token immediately and stop acting on the account. For any other account, or if you would rather ask us, email us and we delete the stored access token within one business day. Comments, messages and contact details are kept while the agent remains a client so the agent can continue the conversation; the copy passed to the agent's own CRM is controlled by the agent. LinkedIn data is kept no longer than LinkedIn's terms allow: post analytics read through LinkedIn's API for less than 48 hours unless LinkedIn permits longer, LinkedIn Page analytics for up to 12 months, and any LinkedIn comment text for no more than 48 hours. LinkedIn export files an agent uploads are kept while the agent is a client and deleted on request. Anyone, agent or not, can ask us to delete their data. See our Data Deletion instructions. We complete deletion requests within 30 days.

6. Your California privacy rights

If you live in California you have the right to know what personal information we hold about you, to have it corrected or deleted, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email drake@dspvmedia.com.

7. Children

The Service is for adults looking for real estate services. It is not directed to children under 16, and we do not knowingly collect their information.

8. Changes

We may update this policy. Material changes will show a new effective date above.

9. Contact

DSPV Media — Winchester, CA 92596 — drake@dspvmedia.com.