Back to home

Privacy Policy

Last updated: February 10, 2026

1. Information We Collect

We collect the following types of information when you use SocialFlow:

  • Account information: Name, email address, and profile data provided during registration via our authentication provider (Clerk).
  • Social media tokens: OAuth access tokens and refresh tokens for connected platforms (LinkedIn, Instagram, TikTok, Facebook, Threads, X/Twitter) to publish content on your behalf.
  • Content data: Posts, captions, media, hashtags, and scheduling information you create through the Service.
  • Usage data: Information about how you interact with the Service, including features used and actions taken.

2. How We Use Your Information

  • Content generation: Your prompts and preferences are sent to AI services (OpenAI) to generate content suggestions.
  • Publishing: Your social media tokens are used to publish content to connected platforms on your behalf.
  • Scheduling: Your content and scheduling preferences are stored to publish posts at specified times.
  • Service improvement: Usage patterns help us improve the Service.

3. Third-Party Services

We use the following third-party services to provide the Service:

  • Clerk: Authentication and user management.
  • OpenAI: AI-powered content generation.
  • Social media platforms: LinkedIn, Instagram, TikTok, Facebook, Threads, and X/Twitter APIs for content publishing.
  • Cloudinary: Media storage and delivery.
  • Railway: Application hosting and database services.

Each third-party service has its own privacy policy governing how they handle your data.

4. Data Storage and Security

Your data is stored in a secure PostgreSQL database hosted on Railway. Social media access tokens are stored encrypted. We implement industry-standard security measures to protect your information, but no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data and content within 30 days. Some data may be retained in backups for a limited period.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data and account.
  • Disconnect social media accounts at any time through the Settings page.
  • Export your content data.

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the Service. Continued use after changes constitutes acceptance.

9. Contact

If you have questions about this Privacy Policy or your data, please contact us through the Service's support channels.