Privacy Policy

• Account information: your name, email address, password (stored encrypted) and profile picture. If you sign in with Google, we receive your name, email address and picture from Google. When you ask for a sign-in code by email, we keep only a scrambled (hashed) copy of the code for 10 minutes.
• Connected social accounts: when you connect a social media account, we receive the access needed to publish and read analytics on your behalf, along with basic profile details such as the account name and picture.
• Content you create: posts, captions, photos, videos, drafts, schedules and posting queue times you create or upload.
• Analytics: numbers from your connected accounts, such as followers, impressions, reach and engagement, which we store by day to show your dashboard and history.
• Team information: the email addresses of people you invite, their roles, and the approvals, internal comments and "created by" details on posts in a shared workspace.
• Billing information: your plan and payment status. For bank transfers, the transaction reference number you give us. If you pay by card, card details are handled by our payment provider and are never stored on our servers.
• Usage and device information: basic technical data such as device type, operating system, app version and log data, used to keep the Service working and secure. If the mobile app runs into an error, it sends us a technical error report (what went wrong and on which app version) so we can fix it. In the mobile app, a push notification token for your device, which we delete when you sign out.
• Sign-in records: each time you sign in, we record the time, your IP address, an approximate location worked out from it (country, region and city, never your precise location), and your device type, operating system and browser or app version. We use this to keep your account secure and spot unusual sign-ins, and to understand where our users are.

• To provide the Service: publishing and scheduling posts, showing analytics, and managing your workspaces and team.
• To manage your subscription and check payments.
• To send you service messages by email and push notification, such as sign-in codes, password resets, team invitations, approval requests, comments, failed-post alerts and important account notices.
• To provide optional AI writing and image features when you choose to use them.
• To keep the Service secure, prevent abuse and fix problems.

We do not sell your personal information, and we do not use your content for advertising.

We share information only as needed to run the Service:

• With the social media platforms you connect, to publish your content and fetch analytics.
• With the other members of a workspace you belong to, who can see its posts, comments and team list according to their role.
• With service providers that help us operate, such as hosting, storage, email delivery, push notifications (Google Firebase), social media integration (Zernio), payment processing and AI providers. They may only use your information to provide their services to us.
• When required by law, or to protect the rights and safety of our users and the Service.

We only use cookies the Service needs to work. We do not use advertising or tracking cookies.

• Essential: keep you signed in and protect forms from misuse (session, security and "remember me" cookies).
• Preferences: remember your light or dark theme and whether the sidebar is open.

You can clear cookies in your browser at any time, but you will need to sign in again.

We keep your information for as long as your account is active. Uploaded media that is no longer needed may be deleted automatically. When you delete your account, we delete the workspaces you own, their connected social accounts and media, and delete or anonymise your personal information within 30 days, except where we must keep it for legal, tax or accounting reasons.

Sign-in records are deleted automatically after 12 months. We also keep private backups of our database for up to 30 days, so we can recover from failures; deleted information disappears from the backups as they expire.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), encrypted passwords, optional two-factor authentication and restricted access to our systems. No method of transmission or storage is completely secure, but we work to protect your data.

• View and update your profile information at any time in Settings.
• Disconnect any social account from the Service at any time.
• Turn off push notifications in your phone's settings.
• Request a copy of your data, or ask us to correct or delete it.
• Delete your account: from your account settings (website or app), or by emailing support@inbound.socialdominate.app from the email address on your account.

The Service is not intended for children under 16, and we do not knowingly collect information from them.

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date. For significant changes, we will let you know by email or in the app.

If you have questions about this policy or your data, contact us at support@inbound.socialdominate.app.