Privacy Policy

1. Introduction

Welcome to SocioConnect. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website or use our services, and tell you about your privacy rights and how the law protects you, including the General Data Protection Regulation (GDPR).

2. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Email address.
• Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location.
• OAuth Tokens: Authorization tokens required to publish content on your behalf to third-party platforms (e.g., TikTok, Instagram, YouTube, Facebook).

3. How We Use Your Data & Legal Basis

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of a Contract: To provide the SocioConnect service, including authenticating your account and publishing your content to connected social media platforms.
• Legitimate Interests: To improve our service, troubleshoot issues, and provide customer support.

4. Security of OAuth Tokens and Data

We take the security of your linked social media accounts very seriously.

• No Passwords: We never ask for or store your social media passwords.
• Encryption: All OAuth tokens used to access third-party APIs are encrypted at rest using industry-standard AES-256-GCM encryption.
• In Transit: All data transfers between our servers, your browser, and third-party APIs occur over secure TLS/SSL connections.

5. Third-Party Sub-processors

To provide our services, we use certain third-party service providers (sub-processors) to process data on our behalf. These include:

• Vercel: Cloud hosting and serverless compute.
• ImageKit: Video and image hosting for media processing.
• Upstash / QStash: Background job queuing and scheduling.
• Groq: AI processing for content metadata generation.

We have Data Processing Agreements (DPAs) in place with these providers to ensure your data is handled securely and in compliance with GDPR.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Videos and images uploaded to SocioConnect are retained as long as your account is active, unless you manually delete them.

7. Your Legal Rights (Right to Erasure)

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data ("Right to be Forgotten").
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.

To exercise your right to erasure and request the deletion of your data and the revocation of all stored OAuth tokens, please visit our Data Deletion Request page.