Privacy Policy for wejanno

Effective Date: October 7, 2026 Last Updated: October 7, 2026

wejanno is a social media management service operated by Aros Advisory from Ontario, Canada. This policy explains what we collect, what we do with it, and who else touches it.

It is written to be accurate rather than reassuring. Where a third party processes data on our behalf, we name them.

By accessing or using wejanno, you agree to the collection and use of information described here.

1. Who is responsible for what

When you use wejanno to manage your own social media account, you are the data controller and wejanno is the data processor. You decide what is published and who is replied to. We act on your instructions.

There is one exception and it is at the other end of this document. If you joined our waiting list before the product opened, there is no account and no instructions to act on, so we are responsible for your email address rather than somebody else. Section 10 covers that on its own.

This matters most for the people who contact you. When a follower comments on your post or sends your account a direct message, that person is not our customer. They are your audience, and you are responsible for having the right to process their messages. We process them only to deliver the service you asked for.

2. Applicable law

We operate under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private sector privacy law, and under the laws of the Province of Ontario.

If you or your audience are in Quebec, Quebec's Law 25 may also apply to the handling of that personal information. If you are in a province with its own substantially similar privacy legislation, that legislation applies in place of PIPEDA for information collected in that province.

3. Automated processing, in plain terms

wejanno uses artificial intelligence to do its core work. This section exists because you and the people who contact you deserve to know that.

3.1 We generate content with a language model

Captions, scripts and post copy are drafted by a large language model. The model is given facts about your business that you have reviewed and approved, and it is instructed to assert nothing outside them.

Nothing is published without a person approving it. Every generated piece waits in an approval queue for a human on your side to accept or reject it. The model does not have the ability to publish on its own.

3.2 We read and classify messages your followers send you

When someone comments on your post or sends your connected account a direct message, the text of that message is sent to a language model so the service can decide whether it can be answered automatically or needs a person.

This is the disclosure that matters most, so it is stated plainly:

• The message content, and the identifiers the platform attaches to it, are processed by an automated system.
• Messages that touch price, contracts, rights, legal questions or buying intent are never answered automatically. They are escalated to a person on your side, with a drafted reply that a human must review.
• Some categories are refused outright and never drafted at all.
• Message records are retained so the conversation has continuity and so you can audit what was said on your behalf.

3.3 We generate images and voice

Where a post requires imagery or narration that you have not supplied, it may be produced by a generative model. Media that you upload is used only where you have confirmed you own it.

3.4 Training

We do not sell your data and we do not use your content, or your followers' messages, to train our own models. Our vendors' training practices are governed by our agreements with them, listed in section 6.

4. What we collect

From you, when you register: your name, email address, business name and business contact details, and your account preferences.

About each connected social account: the account identifier, the profile identifier held by our connection provider, published post identifiers, and the per-post performance figures the platform reports (reach, impressions, likes, comments, shares, saves, clicks, views).

Content: the posts you draft, approve, schedule or publish through wejanno, including generated text, images and audio, and any media you upload.

From the people who contact you: the content of comments and direct messages sent to your connected account, the platform's identifiers for the sender and the conversation, and timestamps. See section 3.2 for how this is processed.

Operational records: logs, error records and the cost of the model calls made on your behalf.

4.1 What we deliberately do not collect

• We never ask for and never store a social account username or password. Platform terms prohibit it, and our database has no column for it.
• We do not hold an access token for any account you connect. See section 5.

5. How your accounts are connected, and who holds the token

This is a correction to how services of this kind normally work, and it is important.

wejanno does not hold an access token for any social account you connect. The connection is held by Zernio, a third party social media integration provider, named in section 6 as a subprocessor. You authorise Zernio directly. wejanno stores only the account and profile identifiers Zernio issues, and asks Zernio to act on your behalf.

Practically, this means the credential that could act as your account is not in our custody, and disconnecting at Zernio ends our ability to act on it regardless of what our records say.

This applies to every network. Instagram is the network enabled today, and others that Zernio supports are enabled one at a time. The arrangement described here does not change when a network is added.

6. Subprocessors

We share data only with providers necessary to run the service. Each is named, with what it receives.

We do not sell, rent or lease your information to anyone.

7. Where data is stored, including the part that leaves North America

Read this section before you rely on the service. Data does not all stay in one place, and we would rather you learn that here than later.

Most of the service runs in the United States and Canada. Our primary database and file storage are in the United States (Amazon Web Services, US West). Our web console is served from Canada and the United States. Our scheduling infrastructure is in the United States.

Data handled by Zernio is stored and processed in Europe. Zernio is a Spanish company and operates entirely within Europe, under European law. There is no United States or Canadian region available from them on any plan, so this is a property of the service rather than a setting we could change.

What that means concretely. The following are stored in Europe:

• the content of comments and direct messages sent to your connected accounts,
• the identifiers of the people who sent them,
• the access tokens for your connected accounts.

So messages your followers send you are transferred outside Canada and the United States and are held in Europe. If the people contacting you would reasonably expect their messages to stay in North America, that expectation is not met, and you should account for it in whatever notice you give your own audience.

What this changes about our accountability. Under PIPEDA, transferring personal information to a processor in another country is permitted, and we remain accountable for it. Zernio acts as a data processor under a data processing agreement, and states that it holds a SOC 2 Type II report. Their current sub-processor list, their compliance reports and their own privacy terms are published at https://trust.zernio.com, which is the authority on that list rather than this page.

wejanno is not currently offered to businesses located in Quebec. The service is not available in French, and Quebec Law 25 places specific obligations on transferring personal information outside the province that we have not yet addressed. We will say so plainly rather than take a Quebec client we are not ready to serve properly.

This does not stop someone in Quebec from sending your account a message. If a meaningful part of your audience is there, tell us before you connect an account.

Zernio's retention, which runs on its own clocks and not ours: application data is held while the account exists and deleted when it is deleted, backups are kept for 30 days, and operational logs for 90 days.

Regions for our remaining providers are recorded as we confirm them in writing. Where we have not confirmed one, we will tell you that rather than assume it.

8. Retention and deletion

• Connection: disconnecting a social account ends access to it immediately. Zernio wipes the access and refresh tokens for that account, so neither they nor we hold a credential for it or can act on it. Disconnecting one account does not affect any other account you have connected. We delete the stored identifiers on account closure.
• Disconnecting also deletes what was collected for that account. It is not only an access change. At our connection provider:
  • performance figures are purged at the moment you disconnect, including the stored per post metrics and account statistics for that account;
  • messages, comments, conversations and the contacts attached to them are held for a short grace period of about an hour, so that reconnecting the same account by mistake does not lose them, and are then permanently deleted;
  • scheduled posts belonging only to that account are cancelled and removed. The outer limits are the backup and log windows in section 7: up to 30 days in backups and up to 90 days in operational logs, after which it is gone.
• If you want the authorisation revoked at the platform too, and you may, the account owner can remove the Zernio application from that platform's own connected applications settings. Disconnecting inside wejanno is sufficient to end access. Revoking at the platform is the additional step available to you if you would rather not rely on us or on Zernio having done it.
• Content and messages: retained while your account is active, so the service has continuity and so you retain an audit trail of what was said on your behalf.
• Erasure: you may request deletion of your account and its data by contacting us. We will delete within 30 days, except where a law requires us to keep a record, such as financial records retained for tax purposes.
• What deletion does NOT do, and this is the important one. Anything already published to your social account stays published. Instagram allows no deletion from outside, so closing your wejanno account removes our copy and our access and leaves your posts exactly where they are. You have to delete those from the platform's own app yourself. The console says the same thing in the same words next to the delete button, deliberately, so that the two cannot drift apart.
• A request from one of your followers about their own messages should be directed to you, because you are the controller of that relationship. We will support you in acting on it.

9. Payments

wejanno does not currently charge for the service. No payment information is collected at this time.

When paid subscriptions begin, payment processing will be handled by Stripe. wejanno will not view, capture or store your full card number, security code or bank credentials. We will receive only the limited transaction details needed for invoicing, such as the last four digits of the card and the transaction reference.

10. The waiting list

This section is about a different person from the rest of this policy. Everywhere else, "you" is a business using wejanno to manage its own accounts, and section 1 says we act on its instructions. That is not true here. If you gave us an email address on our public page before the product opened, Aros Advisory decides what happens to that address. Nobody is acting on anyone's instructions, and it is our responsibility rather than a client's.

What we collect. Your email address, the language the page was in when you joined, a short tag recording which link brought you, and the date. If you answered the optional question about what kind of business you run, that answer too. That is all of it. We do not ask for a name, a company or a phone number, there is no account, and there is no password.

We also record what you agreed to. The exact sentence that appeared next to the field, the language it was in, and the moment you submitted it. We keep it so that we can show what you were told rather than assert it later.

What we send. A small number of emails about the launch, covering what the product does, what it costs and when it opens, followed by an invitation to the beta. That is marketing, and we would rather call it that than call it a notification. We send nothing else to this list, and we never send to it on anyone else's behalf.

We can see whether an email was opened. Our mail provider records opens and link clicks against your address. It is how we tell a list that is worth writing to from one that is not. Some mail apps hide this from us, so the figures are approximate, and nothing about you follows you off the page.

The lawful basis. Your consent, given when you submitted the form. Under Canada's anti-spam legislation that is express consent, and it lasts until you withdraw it. Under the GDPR it is consent, Article 6(1)(a). We have no other basis for these emails, and we do not claim one.

Who else touches it. Brevo, a French company, holds the list and sends the mail. It acts as a data processor under a data processing agreement, and the list is stored in the European Union. It is named in the table in section 6. Nobody else receives it. We do not sell, rent, lease or share this list, and it is not used to target advertising on any platform.

How to get out. Every email we send carries an unsubscribe link. It works with one click, it costs nothing, and it takes effect at once rather than within some number of days. You can also write to legal@wejanno.com and ask to be removed, to be told what we hold about you, to have it corrected, or to have it deleted. We answer within 30 days.

What survives an unsubscribe, and why. Your address stops being a prospect and becomes a suppression record, kept so that a later import cannot put you back on a list you already left. It receives no mail and is used for nothing else. If you ask for deletion rather than unsubscribe, we delete the record and keep only a one-way fingerprint of the address for the same purpose. If you would rather we kept nothing at all, say so and we will, and we will tell you plainly that we then have no way to stop a future import from reaching you.

How long we keep the rest. While the list is live, and no longer than 24 months after the last email you opened or clicked. If we abandon the campaign, the list goes with it.

Joining the list is not signing up. It creates no account and commits you to nothing. If you accept an invitation later and become a customer, the rest of this policy starts to apply to you, and we will say so at the time.

11. Your rights

Under PIPEDA you may ask what personal information we hold about you, ask for it to be corrected, ask for it to be deleted, and withdraw consent. Where Quebec's Law 25 applies, additional rights may be available to you, including rights relating to automated decision making. Section 3 describes the automated processing we perform.

You may complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

If you are on our waiting list rather than a customer, the same rights apply to your email address, and section 10 says how to use them.

12. Contact

wejanno, operated by Aros Advisory
701 Rossland Road, Unit 17
Whitby, Ontario L1N 8Y9
Canada
Email: legal@wejanno.com

13. Changes

We will update this policy when what we do changes. The date at the top records the last change. Where a change materially affects how your data or your followers' data is processed, we will tell you before it takes effect.