01 In plain English
We collect what we need to run Social Content — your account info, the prompts and assets you create with, and the signals that keep the Service running. We don't sell your data. We don't use your content to train foundation models unless you explicitly opt in. You can export and delete your data at any time.
The sections below explain the details. If anything is unclear, write to privacy@socialcontent.app.
02 What we collect
Information you give us
- Account data — name, email, password hash, profile photo.
- Workspace data — brand profile, audience description, tone notes, your linked website URL.
- Creative inputs — prompts, briefs, uploaded images, draft posts, and edits you make in Studio.
- Billing — name and address for invoices; payment card data is handled by our payments processor and never stored on our servers.
Information collected automatically
- Usage data — feature events (e.g. "post generated"), latency, errors, browser, OS.
- Device data — IP address, approximate location derived from IP, time zone.
- Cookies & local storage — see the Cookies section below.
03 How we use what we collect
- Operate, maintain, and improve the Service.
- Generate post visuals and copy aligned with your brand profile.
- Authenticate you, prevent abuse, and keep accounts secure.
- Process payments and send transactional emails (receipts, security notices).
- Send product updates you can opt out of at any time.
- Comply with legal obligations and enforce our Terms.
04 AI processing
When you generate a post, your prompt and the relevant slice of your brand profile are sent to one or more machine-learning models. We use both our own models and third-party model providers under contractual data protection terms. Providers may not use your inputs to train their models.
We do not use your prompts, brand profile, or generated Output to train foundation models. We may use aggregated, de-identified metrics (e.g. "how often a style is chosen") to improve product surfaces.
05 When we share data
We share data only with:
- Service providers — cloud hosting, error tracking, analytics, email delivery, payment processing — under written contracts limiting use to providing the service to us.
- Connected platforms — when you publish to Instagram, we transmit the post you authorize.
- Legal — when required by law, court order, or to protect rights, property, or safety.
- Successors — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality and continuation of this Policy.
We never sell your personal information.
06 Cookies and similar technologies
We use a small set of cookies and local storage entries:
- Essential — keep you signed in, remember workspace preferences. Cannot be disabled.
- Analytics — measure feature usage to improve the Service. Anonymized.
You can manage cookies in your browser settings. Disabling essential cookies will break sign-in.
07 How long we keep data
Account, workspace, and creative content are kept for as long as your account is active. When you delete your account, we permanently remove your content within 30 days, except for records we must retain for legal, accounting, or fraud-prevention reasons (typically up to 7 years).
08 Your rights
Depending on where you live, you may have the right to access, correct, port, restrict, or delete the personal data we hold about you, and to object to certain processing. You can exercise most of these rights directly in your account settings, or by emailing privacy@socialcontent.app.
If you're in the EU/UK, our lawful bases for processing are contract performance (running the Service for you), legitimate interests (improving and securing the Service), legal obligation, and your consent where required.
09 Security
We protect your data with encryption in transit (TLS), encryption at rest for sensitive fields, scoped access controls, periodic security reviews, and a private bug-bounty program. No system is perfectly secure; please report vulnerabilities to security@socialcontent.app.
10 Children
Social Content is not directed to children under 16. We don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
11 Changes to this Policy
We may update this Policy from time to time. Material changes will be announced in-app and by email at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
12 Contact
Privacy office — email privacy@socialcontent.app. For data protection inquiries from the EU/UK, you may also contact our representative at the same address.