MoldMojoLLC
Privacy policy
Last updated: 13 September 2026
Who operates this service
MoldMojo Analytics is an invitation-only service operated by MoldMojoLLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. MoldMojoLLC is responsible for the personal information described in this notice. Contact privacy@olishoppy.com for privacy questions or requests. Anton administers the service on behalf of the operator.
Scope
This notice covers the analytics website and its Instagram and Facebook connections. The application and marketing processes on OliShoppy’s main website are separate. Connecting a social account here does not subscribe you to marketing emails.
Information we collect
We process your invited member name, email address, membership status and authentication information. When you authorize Meta access, we receive identifiers and profile information for authorized Instagram professional accounts and Facebook Pages, such as names, usernames, profile images and follower counts. We also receive media identifiers, captions, links, thumbnails, publication dates and available performance metrics, including views, reach, likes, comment counts, shares, saves and watch time. Availability varies by platform and permissions. We store authorization scopes, encrypted access tokens, expiry information and synchronization status. We do not receive your Instagram or Facebook password. Hosting and authentication providers may process IP addresses, browser/device information and request logs to deliver and protect the service.
Why we use it
We use this information to authenticate invited members, connect accounts they manage, retrieve account and content performance, calculate weekly leaderboards, display the brand account directory, troubleshoot connections and protect access. We do not use Meta account data to send marketing emails, sell personal information or build advertising audiences. The analytics integration does not publish posts or read private messages.
Who can see it
Authorized brand members can see connected account profiles, manager display names, content links and performance information in the directory and leaderboards. Administrators can manage membership and connections. Access tokens and passwords are not displayed in these views. Vercel provides hosting, Supabase provides database and authentication services, and GitHub Actions schedules synchronization requests. These providers process information needed for their services. Meta processes authorization and API requests under its own policies. We may also disclose information where required by law or necessary to protect legal rights.
Cookies and security
We use cookies needed for sign-in and authorization security. Access to analytics is restricted to invited members, and social access tokens are encrypted before database storage. No system can guarantee absolute security. Do not share invitation links, passwords or tokens.
Retention and disconnection
We retain membership information while needed to manage access, and account/content metrics while needed for the brand’s performance history and the purposes above. Tokens are retained while a connection is maintained and are cleared by the app’s Disconnect action. Disconnecting stops future scheduled collection for that connection but does not erase previously saved analytics. Deleting website membership also does not automatically erase retained social analytics. Request full deletion using the data-deletion page. Limited records may need to be retained for legal obligations, security or resolving disputes; we will explain applicable exceptions when responding. Backup and provider log copies are subject to their retention cycles.
Your choices and rights
You can choose whether to connect a social account, disconnect it within the app, or withdraw the app’s permissions through Meta. You can request access, correction, deletion or restriction of your personal information by emailing privacy@olishoppy.com. Depending on applicable law, you may also have rights to portability, to object to processing and to complain to a data-protection authority. We may request proportionate information to verify your identity or authority over an account. Do not send passwords or access tokens.
Legal bases and international processing
Where European or UK data-protection law applies, we rely on legitimate interests in administering the internal brand service, measuring brand performance and securing access, subject to your rights. Where processing is necessary to perform a contract with you, that is the applicable basis; where consent is required, we request it and you may withdraw it. Granting a Meta permission is a technical authorization and does not by itself replace a required legal basis. The operator is in the United States and service providers may process information in other countries. Applicable transfers must use legally required safeguards; contact us for details about the safeguards relevant to your information.
Contact and updates
Email privacy@olishoppy.com or write to MoldMojoLLC at the address above. We will respond to privacy requests within the time required by applicable law. We may update this notice when the service or its practices change; the date below identifies the current version.