Privacy Policy

Socialoop Inc. ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Socialoop, you consent to the practices described in this policy. We are committed to GDPR, CCPA, and global privacy regulation compliance.

• Account information: name, email, profile picture, and password (hashed)
• Social media account tokens and connections (OAuth, read/write scopes)
• Content you create, schedule, or publish through the platform
• Usage data: features used, session duration, click patterns
• Device & browser information: IP address, user agent, timezone
• Payment information: processed via Stripe (we do not store card numbers)
• Communications: support tickets, feedback forms, and emails

• To provide, operate, and improve the Socialoop platform
• To personalize your experience with AI-powered recommendations
• To process payments and manage your subscription
• To send transactional emails (receipts, password resets, alerts)
• To send product updates and marketing communications (opt-out available)
• To detect, prevent, and investigate security incidents or abuse
• To comply with legal obligations and enforce our Terms

We do not sell your personal data. We only share data with trusted third parties as necessary to provide our Service:

• Stripe — payment processing (PCI DSS compliant)
• Vercel / AWS — hosting and infrastructure
• Resend / Postmark — transactional email delivery
• Analytics providers — aggregate, anonymized usage insights only
• Law enforcement — when legally required by valid government request

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

We implement industry-standard security measures to protect your data:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for all data in transit
• OAuth 2.0 for all social platform integrations
• Regular third-party security audits and penetration testing
• Strict access controls and employee data minimization policies

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: request a copy of the data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your personal data
• Right to restriction: limit how we process your data
• Right to portability: receive your data in a machine-readable format
• Right to object: opt out of certain processing activities

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal information, we will delete such information immediately.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes via email or a prominent notice within the platform.