Privacy Policy

1. Information we collect

• Account information: your name, email address, and password (stored as a secure hash, never in plain text).
• Business information: the business name, category, description, logo, brand colors, tone, and products/services you provide during onboarding.
• Connected social accounts: when you connect Instagram or Facebook through Meta's official login, we receive and store a Page/Instagram account identifier and an access token, which we use solely to publish content on your behalf. We never see or store your Facebook password.
• Generated content: the images, captions, and hashtags SocialPilot generates for you, and the publishing schedule you configure.
• Billing information: subscription and payment details are handled entirely by Stripe, our payment processor. We store only your subscription status and plan - we never see or store your card number.
• Usage data: basic technical logs (e.g. request timestamps) used for debugging and reliability.

2. How we use this information

• To generate on-brand social media content on your behalf.
• To publish that content to the Instagram and Facebook accounts you connect, on the schedule you set.
• To operate, maintain, and improve the Service.
• To process payments and manage your subscription.
• To communicate with you about your account or the Service.

3. How we share information

We share information only as needed to operate the Service: with Meta (Facebook/Instagram) to publish your content, with our infrastructure providers (hosting, database, and file storage) to run the application, and with Stripe to process payments. We do not sell your personal information to third parties.

4. Data retention and deletion

We retain your information for as long as your account is active. You can request deletion of your account and associated data at any time - see our Data Deletion Instructions page for how to do this.

5. Your choices

You can disconnect a connected Instagram or Facebook account at any time from your dashboard, which immediately revokes our access to publish on your behalf. You can edit or delete your business information from Brand Settings at any time.

6. Security

Access tokens for connected social accounts are encrypted at rest. We use industry-standard practices to protect your data, but no method of transmission or storage is 100% secure.

7. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.

8. Contact us

Questions about this Privacy Policy? Contact us at support@socialpilot.app.