Privacy policy
Last updated 3 November 2026
Who we are
SendHawk is a trading name of ScaleUp Teams Pty Ltd (ABN 58 689 259 989), a company registered in Western Australia, Australia, and a product of the CiteHawk group. Our address is 202/37 Barrack St, Perth WA 6000, Australia. Contact us at richard@citehawk.com.
What SendHawk does
SendHawk publishes and schedules posts to LinkedIn and Facebook accounts on behalf of the people and businesses who connect those accounts to it. Today it is used only for accounts administered by the CiteHawk group.
What we collect
- Account connection data. When you connect LinkedIn or Facebook, we receive the access tokens (and, for LinkedIn, refresh tokens) that those services issue, your member or user ID, your name, and the names, IDs, links and pictures of the LinkedIn organizations and Facebook Pages you choose to connect.
- Content you send us to publish. Post text, media files or media URLs, scheduled times, notes, and the IDs and URLs of the resulting posts.
- Operational data. API key identifiers, timestamps of API calls, and error messages returned by the social networks. We do not use advertising or analytics cookies. The admin area sets a single sign-in cookie.
We do not read your feeds, messages, followers or analytics, and we do not request permissions for them. The Facebook permissions we request are pages_show_list, pages_manage_posts and pages_read_engagement; the LinkedIn permissions are openid, profile, w_member_social, w_organization_social and r_organization_social.
How we use it
Only to publish, schedule, update, delete and report on the posts you ask us to handle, to keep your connection working (for example refreshing tokens before they expire), and to tell you when an account needs reconnecting. We do not sell personal information, use it for advertising, or use it to train AI models.
Where it is stored and who sees it
Data is stored in a Supabase Postgres database in Sydney, Australia (AWS ap-southeast-2), and the service runs on Vercel. Access and refresh tokens are encrypted with AES-256-GCM before they are stored. Media you upload is stored in a public storage bucket, because LinkedIn and Facebook must be able to fetch it to publish it.
We share data only with the services needed to do what you asked: LinkedIn and Meta (to publish your posts) and, for some LinkedIn accounts while our own LinkedIn integration is being approved, Zernio, a social posting provider that publishes on our behalf. We disclose information when the law requires it.
How long we keep it
Tokens are kept while an account is connected and are deleted when you disconnect it, delete its profile, or remove the app from Facebook. Post records are kept so you can see your posting history; ask us and we will delete them.
Deleting your data
You can disconnect an account at any time, or remove SendHawk in your Facebook settings (Settings → Apps and websites) or LinkedIn settings (Data privacy → Permitted services). When you remove the app from Facebook, Meta tells us and we delete the stored tokens for every Page you connected; you get a confirmation code you can check at /data-deletion. For anything else, email richard@citehawk.com and we will delete your data within 30 days.
Your rights
We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. You can ask to see or correct the information we hold about you, or complain about how we handled it, by emailing richard@citehawk.com. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We will update this page when our practices change and change the date at the top.