Privacy Policy

SocialPylot is a workspace for creating, scheduling, publishing and analysing content across social platforms. This policy explains what information we handle when you use SocialPylot, why we handle it, and the choices you have. It applies to the SocialPylot website and the signed-in application.

• Account data — your name, email address, password hash, avatar and workspace membership.
• Workspace content — posts, videos, blogs, captions, media uploads, templates, calendar entries, comments and approval history you create in SocialPylot.
• Connected platform data — when you connect a social account, we store the account identifier, display name, handle, granted permissions and access tokens needed to publish and read metrics on your behalf.
• Usage and diagnostics — activity logs, publishing job results, error messages and basic technical data used to operate and debug the product.

• To provide the workspace: storing drafts, scheduling and publishing your content.
• To show analytics returned by the platforms you connect.
• To power optional AI features such as captions, ideas and content scoring.
• To secure accounts, prevent abuse and troubleshoot failures.
• To send service messages about your account, publishing results and workspace activity.

Connecting a platform is always initiated by you and uses that platform's official authorisation flow. We request the narrowest set of permissions needed for the features you use — typically publishing content and reading your own performance metrics.

Access tokens are stored encrypted and are only used to perform actions you have set up in SocialPylot. Disconnecting an account in the Social Accounts page removes the stored tokens for that connection.

When you use an AI feature, the prompt and the relevant content you selected are sent to our AI provider to generate a response. AI output is a suggestion — you stay in control and nothing is published without your action. Do not paste sensitive personal data into AI prompts.

We do not sell your personal information. Data is shared only with the service providers that run SocialPylot — hosting and database infrastructure, our AI provider, and the social platforms you explicitly connect — and only to deliver the features you use.

Members of your workspace can see workspace content according to their assigned role. Invite people only if you intend them to access that content.

Workspace content, media and logs are retained while your workspace is active so features such as the calendar, analytics history and audit timeline keep working. Deleting an item removes it from your workspace; deleting your account removes your profile and the workspaces you solely own.

Access to workspace data is enforced at the database level so members can only read the workspaces they belong to. Tokens and secrets are stored encrypted, and privileged operations run server-side. No online service can promise perfect security, so please use a strong, unique password and remove connections you no longer need.

• Update your profile and notification preferences in Settings.
• Disconnect any social account at any time.
• Export or delete content you created in your workspace.
• Request account deletion by contacting us.

Questions about this policy or your data? Reach us from the contact page. See also our Terms of Service.