Privacy Policy

Last updated: September 18, 2026

1. Who We Are

2TwoGroup Social (the "Service") is operated by VP Group Development, LLC ("2TwoGroup," "we," "our," or "us"), a Florida limited liability company. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit 2twogroup.com or use the Service.

VP Group Development, LLC is the organization responsible for the personal information processed through the Service. Our legal and privacy point of contact is info@2twogroup.com.

2. Information We Collect

2.1 Account and profile information

We collect information you provide when you create or maintain an account, such as your name, email address, password credential in hashed form, company, phone number, profile image, timezone, and account preferences.

2.2 Connected social-account data

When you choose to connect Facebook, Instagram, TikTok, LinkedIn, X, or Pinterest, the applicable platform provides information permitted by your authorization. Depending on the platform and connection type, this may include:

  • Account, Page, organization, or board identifiers and names
  • Usernames, profile images, and account type
  • Access and refresh tokens, granted scopes, and token-expiration information
  • Facebook Page and linked Instagram professional-account information
  • Publishing eligibility, creator settings, and other data needed to present valid posting options

We receive this data only after an authorized user starts and completes the platform's authorization process. We do not receive the password used to sign in to the connected social platform.

2.3 Content and scheduling data

We process content and instructions you provide, including uploaded images and videos, captions, titles, links, labels, publishing destinations, schedules, platform-specific settings, post status, and provider post identifiers.

2.4 Billing and communications

We record the selected plan and trial start and end times for new seven-day trials; no payment method is required for the trial. If you subscribe to a paid plan, we maintain subscription, plan, usage, and billing-status information. Stripe processes payment-card details; we do not store full card numbers. We also process messages you send to support, contact-form submissions, and email notification preferences, including whether an address has opted out of marketing email and the unsubscribe token used to honor that choice.

2.5 Usage, technical, and security data

Our systems and security providers may process IP address, browser and device information, request timestamps, authentication and security events, error information, and similar operational data. If you allow analytics, Google Analytics also processes information such as pages viewed, approximate location, referring page, device and browser details, and site interactions. Cloudflare Turnstile may process device and request signals to help distinguish legitimate users from automated abuse.

3. How and Why We Use Information

We use information to:

  • Create, authenticate, secure, and support user accounts
  • Connect authorized social accounts and display available publishing destinations
  • Create, schedule, transmit, and monitor posts requested by the user
  • Store and organize media, calendars, labels, schedules, and preferences
  • Generate caption or content suggestions when a user invokes an AI-assisted feature
  • Process subscriptions, enforce plan limits, and maintain transaction records
  • Send transactional messages and respond to questions or privacy requests
  • Detect abuse, investigate failures, maintain security, and comply with law
  • Analyze and improve the reliability and usability of the Service

Where a law requires a legal basis, we process information as necessary to perform our agreement with you, based on your consent or platform authorization, to comply with legal obligations, and for legitimate interests such as operating, securing, and improving the Service. You may withdraw a platform authorization by disconnecting the account and may withdraw other consent where applicable.

4. Platforms and Service Providers

We disclose information only as reasonably necessary to provide the Service, follow your instructions, protect the Service, or comply with law. The principal recipients include:

  • Social platforms: Meta (Facebook and Instagram), TikTok, LinkedIn, X, and Pinterest receive content, publishing settings, and identifiers when you connect an account or direct us to publish.
  • Cloud infrastructure and security: Cloudflare provides application hosting, database and media storage, network delivery, and abuse-prevention services.
  • Payment processing: Stripe processes subscriptions and payments.
  • AI assistance: DeepSeek processes the prompt and content context submitted when you request an AI-generated caption or suggestion. Cloudflare Workers AI may process the same information as a fallback if the primary provider is unavailable. We do not intentionally send social access tokens to either AI service.
  • Email delivery: Resend processes recipient and message information needed to deliver transactional email.
  • Optional analytics: Google Analytics processes site-usage information when you allow analytics cookies. We disable Google advertising signals and do not send account passwords, social authorization tokens, or URL query strings to Google Analytics.
  • Professional, legal, and corporate matters: We may disclose information to advisers, authorities, or a successor in a merger, financing, reorganization, or sale, subject to appropriate protections and applicable law.

Each social platform separately controls the information it processes under its own terms and privacy policy. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Social-Platform Data and User Control

We request only the permissions needed for the features you choose. Platform data is used to identify authorized destinations, maintain the connection, and carry out the user's publishing instructions. It is not used to build advertising profiles or sold to data brokers.

Disconnecting an account removes the stored connection from the Service. Because the social platform independently manages its authorization, you may also revoke 2TwoGroup Social from the connected platform's app or security settings. Content already published to a social platform remains on that platform until it is removed there.

6. Data Retention and Deletion

We retain account information while your account is active and as needed to provide, secure, and document the Service. Connected-account data and tokens remain in active storage until the connection is removed, expires, or the account is deleted. Content and media remain until deleted by the user, removed under our storage lifecycle, or deleted with the account. Media associated with completed publishing activity may be removed from active storage after approximately 90 days.

After a verified deletion request, limited records may remain temporarily in security logs, disaster-recovery copies, or records retained for tax, payment, fraud-prevention, dispute, or legal obligations. These records are access-restricted and deleted or anonymized when the applicable retention need ends. See our Data Deletion Instructions for the current request process.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information, including encrypted network transport, access controls, credential hashing, restricted production access, provider authorization controls, and infrastructure-level protections. Some provider credentials are additionally encrypted at the application layer.

No internet service can guarantee absolute security. You are responsible for protecting your password, limiting access to your account, and notifying us promptly at info@2twogroup.com if you suspect unauthorized access.

8. Browser Storage and Similar Technologies

The Service uses necessary browser storage and similar technologies to maintain sign-in state, remember selected workspace settings, protect forms, and operate core features. With your permission, Google Analytics uses first-party analytics cookies to distinguish visits and help us understand how the Service is used. Analytics cookies are optional and are not set until you allow them. We do not use advertising cookies on the Service, and Google advertising and personalized-ad signals are disabled. Social platforms, Stripe, Cloudflare, or other third parties may use their own technologies on pages they operate, subject to their policies.

9. International Processing

We and our service providers operate in the United States and may process information in other countries. Where required, we rely on contractual or other recognized safeguards for international transfers. The privacy laws of those locations may differ from the laws where you live.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, or obtain a portable copy of certain personal information. You may also have the right to appeal a decision or complain to a privacy regulator.

Send requests to info@2twogroup.com. We may need to verify your identity and authority before fulfilling a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

You may opt out of marketing email at any time by using the unsubscribe link in the message. We retain the address and opt-out timestamp on a suppression list so that future marketing sends remain blocked. An explicit new email-list submission can resubscribe the address. Transactional or legally required messages are not marketing messages.

11. Children's Privacy

The Service is intended for business users and is not directed to anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a child provided information to the Service.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Service, law, or provider requirements. We will post the revised version here, change the effective date, and provide additional notice when required by law.

13. Contact Us