Privacy policy

This policy explains what information SocialApp collects, why, and the choices you have.

1. Information we collect

• Account details: your name, company, email address and a salted hash of your password
• Workspace content: posts, drafts, media files, comments and other content that you or your team add
• Connected social media accounts: if you connect one, the access tokens and the basic profile details the social network shares with us
• Usage data: pages visited, features used, device and browser type, and approximate location from IP address
• Messages you send us through the contact form

2. How we use it

• To provide, secure and improve the service, including publishing to the social media accounts you connect when you ask us to
• To send account, billing and security messages
• To respond to your questions
• To detect abuse, such as spam submissions and repeated sign-up attempts

3. Content about other people

Posts and other content you manage in SocialApp can include information about other people. You decide what is collected and published and why, and we process it on your instructions as your service provider. You are responsible for having the right to use and publish it.

4. Sharing

We do not sell personal information. We share it with infrastructure and communication providers that help us run the service, bound by confidentiality and data-protection terms; with the social networks you connect, only to do what you ask; and when the law requires it.

5. Retention and deletion

We keep workspace data while your account is active. The Account Owner can delete the whole organisation: after a 7 day period in which the request can be cancelled, we sign everyone out and delete the workspace content, usually within minutes. Any other user can delete their own account straight away on their workspace's data management page (the workspace address followed by /settings/data-management). Records we must keep for tax and accounting (invoices and payment records of the subscription, without contact details) are kept for 8 years after the end of the financial year. Encrypted backups are overwritten as they rotate. Contact-form messages are deleted 12 months after we have dealt with them, and at the latest 24 months after they were sent. Step by step instructions are on the Delete account page.

6. Security

Passwords are hashed, sessions use secure cookies, and access to production data is limited and logged. No system is perfectly secure, so we also encourage unique passwords and limited admin roles.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to some processing. Use the contact page, topic "Privacy or data request", to make a request and we will respond within 30 days.

8. Cookies and similar technologies

We use a small number of essential cookies, none of them for tracking or advertising: the sign-in session cookie that keeps you signed in; a security cookie that remembers a trusted device when you choose that at two-factor sign-in; and a language cookie that remembers the language you pick. We also keep your cookie choice in your browser storage.

On the public site (not inside the signed-in app) you can allow optional tracking. When the site operator has switched them on, analytics tools (Google Analytics or Google Tag Manager, and Microsoft Clarity) load only if you allow analytics, and marketing tags (the Meta Pixel and the LinkedIn Insight Tag) load only if you allow marketing. These providers can set their own cookies and receive information such as your IP address, the pages you visit and your device and browser details, under their own privacy policies.

Nothing from these providers loads before you choose, and a Do Not Track or Global Privacy Control signal from your browser is treated as a refusal. You can change your choice at any time with Cookie settings in the page footer.