Privacy Policy

We collect the minimum information necessary to operate the Service:

• Account information.When you sign in with Google, we receive your name, email address, and profile image from Google’s authentication service.
• Connected platform data. When you connect a social account (TikTok, Instagram, YouTube, or similar), we receive an authorization token from that platform plus the scopes you approve. We use the token only to read and publish content on your behalf within the scopes you grant.
• Public content data. We retrieve posts, captions, comments, audio metadata, hashtags, and engagement metrics from your connected accounts in order to analyze them.
• Content you create. Files you upload, drafts, schedules, and assets generated through the Service are stored so you can manage and publish them.
• Billing information. If you purchase a paid plan, our payment processor collects payment details and returns to us a customer identifier, the plan you selected, and transaction status. We do not receive or store your full card number.
• Usage and device information. We log basic technical data such as IP address, browser type, pages accessed, and timestamps to operate, secure, and improve the Service.
• Cookies. We use strictly necessary cookies to keep you signed in and to remember preferences. We do not use third-party advertising or cross-site tracking cookies.

We use the information we collect to:

• Provide, operate, secure, and improve the Service.
• Analyze your connected content and produce reports, recommendations, and generated assets at your request.
• Authenticate you and protect against fraud or abuse.
• Process payments and manage subscriptions.
• Communicate with you about your account, security, billing, or material changes to the Service.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information. We share it only in these limited circumstances:

• Service providers. We use carefully chosen vendors to host the Service, run analytics workloads, send transactional email, and process payments. They access only what is needed to perform their function and are bound by confidentiality obligations.
• Connected platforms. When you publish or schedule content through the Service, we transmit that content to the platform you selected.
• Legal compliance. We may disclose information when required to do so by law, subpoena, or other lawful process, or to protect our rights, property, or safety, or that of our users.
• Business transfers. If SocialRex is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. Continued use would remain subject to a privacy policy at least as protective as this one.

We use industry-standard safeguards to protect your information. Authentication tokens for connected platforms are encrypted at rest using AES-256-GCM. Network traffic is encrypted in transit via TLS. Access to production systems is limited to authorized personnel and audited. No method of transmission or storage is perfectly secure, but we work to apply reasonable administrative, technical, and physical controls.

We retain account and content data for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time, after which we delete or anonymize your personal information within a reasonable period, except where retention is required for legal, accounting, or security purposes.

Depending on your location, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You may also disconnect any connected social account at any time from the dashboard, which revokes the stored authorization token. To exercise any of these rights, contact us using the details below.

We operate the Service from the United States and may process and store information in other jurisdictions where our service providers operate. Where required, we use appropriate transfer mechanisms to protect your information.

The Service is not directed to children under 16 and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you through the Service or by email. Continued use of the Service after a change becomes effective constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact privacy@socialrex.com.