Introduction
At Social media studio, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for an account
- Subscribe to our newsletter
- Contact us for support
- Use our social media scheduling services
- Participate in surveys or promotions
Automatically Collected Information
We automatically collect certain information about your device and usage patterns, including:
- IP address and location data
- Browser type and version
- Operating system
- Pages visited and time spent on our site
- Referring website information
How We Use Your Information
We use the information we collect for various purposes, including:
- Providing and maintaining our services
- Processing transactions and managing your account
- Communicating with you about updates and support
- Improving our website and services
- Analyzing usage patterns and trends
- Complying with legal obligations
- Preventing fraud and ensuring security
Google User Data and API Services
When you sign in to Social media studio using Google OAuth, we access and collect the following Google user data:
Data We Access
- Email Address: We access your Google email address to create and manage your account, send you important notifications, and enable account recovery.
- Profile Information: We access your basic profile information to personalize your experience and display your identity within the application, including:
- Your full name
- Your profile picture
- Your gender (if provided)
- Your preferred languages (if provided)
- Any other information that you've made publicly available on your Google account
How We Use Google User Data
We use the Google user data solely for the following purposes:
- Creating and authenticating your account on our platform
- Personalizing your user experience
- Communicating with you about your account and our services
- Providing customer support
Data Retention and Deletion
We retain your Google user data only as long as necessary to provide our services to you. You can request deletion of your account and associated Google user data at any time by contacting us. We do not share your Google user data with any third parties except as required to provide our core services or as required by law.
Important: Social media studio's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
YouTube Data API Services
When you connect your YouTube account to Social media studio, we access and use YouTube API Services to provide video scheduling and management features.
YouTube Data We Access
- Channel Information: We access your YouTube channel ID, name, and profile picture to display and manage your connected channel within our platform.
- Video Upload Access: We access permissions to upload videos to your YouTube channel when you schedule and publish content through our service.
- Video Management: We access permissions to view, update, and delete videos on your YouTube channel as necessary to provide our content management features.
- Channel Analytics: We may access basic analytics data related to your YouTube channel to display insights within our dashboard.
- Account Email: We access your YouTube account email to identify and authenticate your connected account.
How We Use YouTube Data
We use your YouTube data exclusively for the following purposes:
- Uploading and publishing videos to your YouTube channel as scheduled by you
- Managing your video content (updating titles, descriptions, privacy settings)
- Displaying your channel information within our platform
- Providing analytics and insights about your YouTube content performance
- Authenticating and maintaining your YouTube account connection
YouTube Data Storage and Sharing
We store your YouTube access credentials (access tokens and refresh tokens) securely in encrypted form to maintain your account connection. We do not:
- Share your YouTube data with any third parties for advertising or marketing purposes
- Use your YouTube data for any purpose other than providing our services to you
- Store video content permanently - videos are uploaded directly to your YouTube channel
- Access or modify your YouTube data without your explicit action through our platform
Revoking YouTube Access
You can revoke Social media studio's access to your YouTube account at any time by:
- Disconnecting your YouTube account from within our platform settings
- Visiting the Google security settings page and removing Social media studio's access
- Contacting us directly to request account disconnection
Upon revocation, we will delete your YouTube access credentials from our servers within 30 days, though some cached analytics data may be retained for a limited period as outlined in our data retention policy.
Social Platform Data
When you connect a social platform account, we access only the data required to provide scheduling, publishing, analytics, and inbox features. Below are platform-specific details.
Facebook Pages
Data We Access
- Page identifiers, name, and profile picture
- Page posts you create or schedule from the app
- Page comments and mentions (when inbox is enabled)
- Page message threads and messages (when inbox is enabled)
- Page insights and analytics for connected Pages
How We Use Facebook Data
- Connect and authenticate your Page
- Publish and schedule Page posts you create
- Provide an inbox to read and reply to messages and comments
- Display analytics and performance insights
Data Storage and Deletion
We store Page connection details, inbox messages/comments, and analytics for connected Pages. Workspace owners can delete this data and disconnect the Page at any time.
Instagram Business
Data We Access
- Account identifiers, username, and profile picture
- Posts, reels, stories, and captions you publish or schedule
- Comments and mentions on your media (when inbox is enabled)
- Instagram Direct messages (when inbox is enabled)
- Account, media, and story insights
How We Use Instagram Data
- Connect and authenticate your Instagram Business account
- Publish and schedule Instagram content you create
- Provide an inbox for comments, mentions, and DMs
- Display performance insights and analytics
Data Storage and Deletion
We store account connection details, inbox messages/comments, and analytics for connected accounts. Workspace owners can delete this data and disconnect the account at any time.
WhatsApp Business
Data We Access
- WABA identifiers, phone numbers, and business profile info
- Incoming and outgoing messages (when inbox is enabled)
- Media attachments such as images, videos, documents, and voice notes
How We Use WhatsApp Data
- Connect your WhatsApp Business number
- Provide a shared inbox to read and reply to customer messages
- Display conversation history for support workflows
Data Storage and Deletion
We store WhatsApp inbox messages and attachments to provide conversation history. Workspace owners can delete this data and disconnect the number at any time.
Threads
Data We Access
- Profile ID, username, and profile picture
- Content you publish or schedule (text, images, videos, carousels)
- Post identifiers returned by the Threads API
How We Use Threads Data
- Connect and authenticate your Threads account
- Publish content you create in the app
- Show post status and links after publishing
Data Storage and Deletion
We store basic account details and publishing metadata to maintain the connection. Workspace owners can delete this data and disconnect the account at any time.
LinkedIn
Data We Access
- Profile or organization identifiers and page details
- Content you publish or schedule via the app
- Page and post analytics for connected organizations
How We Use LinkedIn Data
- Connect and authenticate your LinkedIn account
- Publish and schedule LinkedIn posts
- Display analytics and performance insights
Data Storage and Deletion
We store account connection details and analytics for connected organizations. Workspace owners can delete this data and disconnect the account at any time.
TikTok
Data We Access
- Account identifiers and basic profile information
- Content you publish or schedule via the app
- Analytics data where available for connected accounts
How We Use TikTok Data
- Connect and authenticate your TikTok account
- Publish and schedule TikTok content
- Display analytics and performance insights
Data Storage and Deletion
We store account connection details and any analytics data we fetch to show performance. Workspace owners can delete this data and disconnect the account at any time.
X (Twitter)
Data We Access
- Account identifiers and basic profile information
- Content you publish or schedule via the app
- Analytics data where supported for connected accounts
How We Use X Data
- Connect and authenticate your X account
- Publish and schedule posts
- Display analytics and performance insights where available
Data Storage and Deletion
We store account connection details and any analytics data we fetch to show performance. Workspace owners can delete this data and disconnect the account at any time.
AI Assistants and MCP Connections
You can connect AI apps, such as ChatGPT, Codex, Claude, and Cursor, to your Social media studio workspace through our MCP server. An AI app gets access only after you sign in to Social media studio and approve the connection with OAuth. The access covers the workspace that you select, and your workspace permissions and plan limits still apply.
Data We Receive and Store
- A connection record: your user and workspace identifiers, the client identifier and name of the AI app, and the times of connection and last use
- The access and refresh tokens for the connection
- The requests that the AI app sends to our tools for you, for example post text, selected accounts, schedule times, and media file names, types, and sizes
- We do not receive your conversation history with the AI app. We receive only the tool requests that it sends
How We Use This Data
- To carry out the actions that you ask for, such as listing your connected accounts, saving drafts, publishing or scheduling posts, and checking media
- To apply your workspace permissions, plan limits, and usage credits
- To protect the service against misuse and to investigate security problems
Who Receives This Data
- The AI app that you connected receives the result of each request, such as account names, post content, and publication status, so that it can show the result to you
- The company that provides the AI app, for example OpenAI or Anthropic, processes that data under its own privacy policy
- The social networks that you choose receive the content that you ask the AI app to publish
Retention and Your Controls
- Access tokens expire after 1 hour. Refresh tokens expire after 30 days when the connection is not used
- Posts, drafts, and media that you create through an AI app stay in your workspace, like content that you create in the app, until you delete them
- You can disconnect an AI app at any time on the AI Agents / MCP page of your workspace. This revokes all of its tokens immediately
- You can also remove the connection in the AI app. The provider of the AI app controls the chats that it stores
Our tools never ask for passwords, payment card details, or other secrets. Do not share them in a chat with an AI app.
Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:
- With service providers who assist us in operating our website and conducting our business
- When required by law or to protect our rights and safety
- In connection with a business transfer or acquisition
- With your explicit consent
Categories of Recipients
Depending on the features that you use, these categories of recipients receive personal data from us:
- Cloud hosting, content delivery, and file storage providers that run our servers and store your media
- Our payment provider, which processes subscriptions and payments as the merchant of record
- Email delivery providers that send account and service emails
- Product analytics providers that help us understand how people use the service
- AI model providers that process your prompts and content when you use AI writing, image, or video features
- The social networks and messaging platforms that you connect, which receive the content that you publish or send
- The AI apps that you connect through MCP, as described in the AI Assistants and MCP Connections section
Data Retention
We keep personal data only as long as we need it for the purposes in this Privacy Policy:
- Account and workspace data, such as your profile, connected accounts, and settings, while your account is active
- Posts, drafts, media, inbox messages, and analytics until you delete them, disconnect the related account, or delete your account
- When you ask us to delete your account, we delete or anonymize your personal data within 30 days, except data that we must keep to meet legal, tax, accounting, or security obligations
- Access tokens for connected social accounts and AI apps until they expire, you disconnect them, or your account is deleted
- Billing records for as long as tax and accounting laws require
- Deleted data can remain in backups for a limited time until those backups are replaced
Data Security
We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access your personal information
- The right to correct inaccurate information
- The right to delete your personal information
- The right to restrict processing of your information
- The right to data portability
- The right to object to processing
To use these rights, or to ask a question about privacy, contact us at [email protected] or through our contact page. We answer within 30 days.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie settings through your browser preferences.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
Last Updated: October 15, 2026