Privacy policy

Who we are

Social Post Manager is operated at socialposter.mosociete.com. For any privacy question or request, email [email protected].

Information we collect

• Account details: your name, email address, workspace name, timezone, and a securely hashed password (Argon2id). We never store your password in readable form.
• Connected social accounts: when you connect Facebook, Instagram or LinkedIn, we receive the access tokens those platforms issue, plus the id, name, username and picture of the Pages, Instagram professional accounts and LinkedIn Company Pages you choose. We do not receive your social media passwords.
• Content you create: captions, links, images and videos you upload, schedules, and the publishing status of each post.
• Engagement data: counts such as reactions, likes, comments, shares, impressions and clicks for posts published through the service, as reported by each platform.
• Technical data: session cookies needed to keep you signed in, your IP address and browser type for security, and server logs.

How we use it

• To publish and schedule the posts you ask us to, on the accounts you connected.
• To show delivery status and engagement for those posts.
• To run your account: sign-in, password resets, email verification and security.
• To keep the service secure and working, for example detecting abuse and fixing errors.

We do not sell your data, use it for advertising, or share it with data brokers.

Facebook, Instagram and LinkedIn data

We use data from Meta and LinkedIn only to provide the features you use: listing the Pages and accounts you manage, publishing your posts, and reading engagement for posts published through the service. We request only the permissions those features need, we follow the Meta Platform Terms and the LinkedIn API Terms of Use, and we do not use this data for any other purpose.

Sharing

Your content is sent to the social platforms you choose when you publish. Otherwise we share data only with the hosting provider that runs our servers, or when required by law. Members of your workspace can see the workspace's posts, channels and analytics.

Security and storage

Data is stored on our own servers. Access tokens and integration secrets are encrypted (AES-256-GCM), connections use HTTPS, and every record is scoped to its workspace so other customers cannot see it. Timestamps are stored in UTC.

Retention

We keep your data while your account is active. Engagement metrics are refreshed for 90 days after a post is published. When you disconnect a channel, its access token is deleted immediately. When you ask us to delete your account, we delete your data as described on our data deletion page, normally within 30 days, except where the law requires us to keep it longer.

Your rights

You can access, correct, export or delete your data, and withdraw a platform connection at any time from the Channels page or from the platform's own settings. To make a request, email [email protected].

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Changes

If we change this policy, we will update the date at the top and, for significant changes, notify account owners by email.