Privacy Policy

Information we collect

Account information. When you sign up we collect your name, email address and, if you sign in with a third-party provider, the basic profile it shares. Sign-in is handled by our authentication provider, Clerk. We never see your password.

Workspace and content. Everything you create or give us to run your social media: brand profiles, website URLs you ask us to read, content plans, posts and captions, images, AI influencer profiles, portraits and voice clips, review decisions, edits and feedback, schedules, and the team members you invite (their email address and role).

Website content. When you ask the agent to learn your brand, we fetch the public pages of the website you give us and extract text from them.

Uploaded photos. If you upload a portrait for an AI influencer you must confirm you have the rights and consent to use it. We re-encode the image, which removes location and camera data.

Connected social accounts. When you connect Facebook, Instagram, X or TikTok, the platform asks you to approve the access we request. We then receive and store:

• Facebook and Instagram (Meta): the list of Facebook Pages you choose to share, each Page’s ID, name, profile picture and Page access token, and the ID, username and profile picture of any Instagram professional account linked to those Pages. We use the permissions pages_show_list, pages_read_engagement, pages_manage_posts, business_management, instagram_basic and instagram_content_publish only to list your Pages and Instagram accounts and publish the posts you approve. We do not read your personal Facebook profile, friends, messages or feed.
• X: your account ID, username, profile picture and the access and refresh tokens needed to post for you.
• TikTok: your account ID, display name, avatar and the tokens needed to post for you.
• The IDs and links of the posts we publish, and whether each delivery succeeded, so you can see and retry them.

Usage information. We use Vercel Web Analytics, which counts page views without cookies and without identifying you across sites. Our hosting provider also keeps standard server logs (such as IP address, browser and time of request) for security and troubleshooting.

Support messages. If you email us, we keep the message and our reply.

How we use it

• To provide the service: learn your brand, plan and write posts, generate images and voice clips, route them for review, and publish what you approve to the accounts you connected, at the times you set.
• To remember your preferences: approvals, edits and feedback are fed back into later drafts so the writing improves.
• To run your team: invites, roles and access to each brand.
• To enforce plan limits, prevent abuse and keep the service secure.
• To answer support requests and send service emails, such as team invitations.

We do not sell your personal information, we do not use it for advertising, and we do not use your content or your social account data to train AI models.

Data from Meta and other platforms

Data we receive through Facebook, Instagram, X and TikTok is used only to provide the features you asked for in ProdSocial. We do not sell it, share it with data brokers, use it for advertising or profiling, or combine it with data from other sources to build profiles of people. Our use of this data follows the Meta Platform Terms, the X Developer Policy and the TikTok Developer Terms.

Who we share it with

We share information only with the service providers who help us run ProdSocial, and only as needed:

• Vercel for hosting, analytics and the AI Gateway that routes AI requests.
• AI model providers (such as Anthropic, OpenAI and Black Forest Labs, through the Vercel AI Gateway) receive the text and reference images needed to write posts, create images and produce voice clips. They process it to return a result to us.
• Neon for our database.
• Clerk for sign-in and account management.
• Resend to send email such as team invitations.
• The social platforms you connect, which receive the posts, captions and images you approve for publishing.

Members of your workspace can see the workspace’s brands, posts and connected channels according to their role. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy will continue to apply.

Security

Social account tokens are encrypted at rest with AES-256-GCM. Media links are signed so they can’t be guessed. All traffic uses HTTPS, and every request is checked against your workspace membership and role. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it.

How long we keep it

We keep your information while your account is active. Disconnecting a social channel deletes its stored tokens and account details right away. When you delete your account or workspace, we delete its data within 30 days, except where we must keep something longer to meet legal obligations, resolve disputes or prevent abuse. Backups are overwritten on a rolling basis.

Your rights and choices

• Access and correct: you can see and edit your brand, posts, influencers and team in the app at any time.
• Disconnect: remove any social channel from the Channels page. You can also remove ProdSocial from your Facebook, Instagram, X or TikTok settings.
• Delete: you can ask us to delete your account and all associated data. See how to delete your data.
• Export: email support@prodsocial.com for a copy of your data.

Depending on where you live (for example the EU, UK or California) you may have further rights, such as to object to or restrict processing, to data portability, or to complain to a data protection authority. We do not sell or “share” personal information as those terms are defined under California law. To use any of these rights, email support@prodsocial.com. We will respond within 30 days.

International transfers

We and our providers process data in the United States and other countries. Where required, we rely on safeguards such as the EU Standard Contractual Clauses for these transfers.

Children

ProdSocial is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email support@prodsocial.com and we will delete it.

Changes to this policy

If we make material changes we will update the date above and, where appropriate, tell you by email or in the app before they take effect.

Contact

Questions or requests about privacy: support@prodsocial.com.