Privacy Policy

Velvet Rope, operated by Geeky Bee Limited · Last updated 9 May 2026

What Velvet Rope is

Velvet Rope is a comment-moderation service for social media accounts (Facebook Pages, Instagram Business accounts, and similar platforms). It receives notifications about comments posted on accounts that have explicitly granted it access, hides those comments from public view immediately, scores them with an AI classifier, and either auto-actions the comment or routes it to the account owner's nominated team for a one-tap decision via Telegram. All decisions are written to an immutable audit log.

Information we collect and process

• Comment content: the text, author name, and platform metadata of comments posted on accounts that have granted Velvet Rope access. We retain these to enable the moderation workflow and the audit log.
• Platform access tokens: the OAuth-issued tokens granted by account owners during onboarding. Stored encrypted at rest (AES-256-GCM) with the encryption key held separately from the database.
• Vetter decisions: for each moderated comment, the decision made (approve, delete, or no action), the team-member who made it, and the timestamp. Recorded in an append-only audit log.
• AI classifier outputs: the score, flags, and reason returned by Anthropic's Claude API for each comment, used for routing decisions and for tracking AI-vs-human agreement over time.
• Telegram identifiers: usernames and chat IDs of vetter team members, to deliver moderation cards to the correct group.

What we do not collect

• We do not collect or store your platform passwords. Authentication is via OAuth tokens that you can revoke at any time.
• We do not read your private messages or DMs.
• We do not access content from accounts you have not explicitly connected.
• We do not use cookies or browser tracking technologies on this domain.
• We do not sell or share data with third parties for advertising purposes.

Third parties involved in the service

• Anthropic (Claude AI) — comment text is sent for classification. Anthropic does not retain prompts for training under our paid API contract.
• Telegram — used to deliver moderation cards and capture vetter decisions. Subject to Telegram's own privacy policy.
• Meta (Facebook / Instagram) — we receive webhook events and call the Graph API on behalf of accounts you've connected.
• Supabase (self-hosted) — our PostgreSQL database backend. Hosted on infrastructure controlled by Geeky Bee Limited.
• Hetzner — server hosting infrastructure (EU-based, Germany).

Data retention and deletion

We retain comment data and audit logs for the duration of your service contract, plus 30 days after termination. You can request immediate deletion at any time by emailing graham@geekybee.net. Audit logs may be retained beyond this period only where legally required (e.g. evidentiary preservation for active legal proceedings).

Your rights

If you are an EU/UK data subject, you have the right under GDPR/UK-GDPR to access, correct, delete, or export your personal data, and to object to or restrict processing. Email graham@geekybee.net with your request. We respond within 30 days.

Revoking access

You can revoke Velvet Rope's access to your social accounts at any time from each platform's settings:

• Facebook / Instagram: Settings & Privacy → Settings → Apps and Websites → Velvet Rope → Remove
• Other platforms: revoke the relevant API token from that platform's settings

Once revoked, no further data is collected from that account. Existing data is deleted per the retention policy above.

Security

Platform tokens are encrypted at rest (AES-256-GCM). Database access is restricted by Postgres Row-Level Security and tenant isolation policies. Communications between Velvet Rope and platforms use HTTPS exclusively. We do not log or store comment content beyond what is necessary for the moderation workflow.

Changes to this policy

We will update this page if our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to active customers by email at least 14 days before taking effect.

Contact

Geeky Bee Limited
Email: graham@geekybee.net