Privacy Policy

1. Introduction

Sociylo ("we", "us", or "our") operates the Sociylo platform available at app.sociylo.com. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.

2. Data We Collect

• Account information — name, email address, username, and password (stored as a secure hash).
• Social account credentials — OAuth access tokens for LinkedIn, Facebook, and Instagram. Tokens are stored encrypted and used solely to post content on your behalf.
• Business data — website URLs, brand identity profiles (Brand DNA), and social media posts you create or generate using the platform.
• Usage data — pages visited, actions taken, and error logs for service improvement. Collected via PostHog analytics.
• Uploaded files — images and media you upload for use in posts, stored on our MinIO object storage.

3. How We Use Your Data

• To provide and operate the Sociylo platform.
• To publish posts to your connected social media accounts when you request it.
• To generate AI-powered content using your Brand DNA profile via OpenAI (through our n8n workflow automation). Your brand data is sent to OpenAI as part of this process.
• To analyze your website URL during Brand DNA extraction.
• To send transactional emails (for example team invitations).
• To improve the platform using aggregated, anonymized analytics.

4. Third-Party Services

We use the following third-party services that may process your data:

• Meta (Facebook and Instagram) — for OAuth login and post publishing via the Meta Graph API.
• LinkedIn — for OAuth login and post publishing via the LinkedIn API.
• OpenAI — for AI content generation. Brand profile data is sent as part of prompts.
• PostHog — for product analytics (anonymized).
• MinIO — for file storage (self-hosted, EU-based).

5. Data Retention

We retain your data for as long as your account is active. If you delete your account or disconnect a social account, associated tokens and profile data are permanently deleted within 30 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent for data processing at any time.
• Disconnect any social account from within the platform at any time.

To exercise these rights, contact us at [email protected].

7. Security

We use industry-standard security measures including encrypted storage of OAuth tokens, HTTPS, httpOnly cookies for authentication, and role-based access controls.

8. Contact

For any privacy-related questions, contact us at [email protected].