BAILA LENTO
Privacy Policy
Last updated 18 September 2026
Baila Lento is a marketing service for small businesses. This page says what we collect, why we collect it, who else sees it, and how to get it removed. It is written to be read, not to be skimmed past.
Who we are
Baila Lento is operated by SMRIT LABZ, Bengaluru, Karnataka, India. For anything on this page, write to [email protected].
What we collect
When you create an account
Your name, email address and the name of your business. We use these to sign you in and to address the work we produce to the right business.
What you tell us about your business
Your industry, website, brand voice, priorities, competitors and any questionnaire you upload. This is what your marketing is generated from. You control all of it and can change or clear it at any time.
When you connect a social account
If you connect Instagram, a Facebook Page or a Google Business Profile, we receive an access token from that platform along with the account name and its identifier. We use them only to publish work you have approved, and to read back whether a post succeeded.
We do not read your private messages, we do not access your contacts or follower lists, and we do not post anything you have not approved.
Usage information
Which features you use, when requests are made, and errors encountered. This keeps the service working and tells us what to fix.
What we never do
- We do not sell your data, and we never will.
- We do not share your business information with other customers.
- We do not use your content to train AI models for anyone else.
- We do not post to your accounts without your explicit approval of that specific piece of work.
Who else is involved
Running the service means a small number of other companies process data on our behalf:
- Supabase — stores your account, your brand settings and your work.
- OpenAI — generates the draft copy and images from your brief. Your content is not used to train their models under their API terms.
- Meta and Google — receive only the posts you approve, when you approve them.
- Railway — hosts the application.
Each is bound to use the data only to provide their part of the service.
How long we keep it
- While your account is open: your brand settings and work history, so past approvals continue to improve future drafts.
- Access tokens: until you disconnect the account or the platform expires them, whichever is sooner.
- After you close your account: deleted within 30 days, except records we are required to keep for tax or legal reasons.
Your rights
You can ask us at any time to:
- Show you everything we hold about you.
- Correct anything that is wrong.
- Delete your account and everything in it.
- Export your data in a readable format.
- Disconnect any social account, which also cancels anything queued for it.
Write to [email protected]. We reply within 30 days.
Deleting your data
To remove a connected social account, open Connectors in the app and choose Disconnect. The token is deleted immediately and anything queued for that account is cancelled.
To delete your whole account, email [email protected]from the address you registered with. Everything is removed within 30 days.
Keeping it safe
Access tokens are stored separately from everything else, encrypted at rest, and cannot be read by the application in your browser — only by the server components that publish on your behalf. Every customer’s data is isolated at the database level, so one customer cannot reach another’s.
No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority without delay.
Children
Baila Lento is for businesses. It is not intended for anyone under 18.
Changes
If we change this policy in a way that matters, we will email you before it takes effect. The date at the top always shows the current version.