Privacy Policy

Last updated: May 29, 2026

At SocialFlow ("we", "us", or "our"), privacy is a priority. This Privacy Policy details how we collect, use, store, and share your information when you access or use our platform, website, and automated content syndication services (the "Service").

1. Information We Collect

To provide cross-platform automated publishing and audience tracking, we collect the following types of information:

Account Registration Details: When you register a SocialFlow account, we collect your name, email address, and an encrypted password hash.
OAuth Authentication Data: If you connect your social media profiles (YouTube, TikTok, Facebook, Instagram, X/Twitter, LinkedIn, Pinterest, Snapchat, Threads), we request authorization via the respective platform's secure OAuth flow. We retrieve and save your account username, display name, profile avatar URL, follower metrics, and encrypted access/refresh tokens.
User-Generated Content: We store the post texts, captions, scheduled publication times, and media file URLs (such as attached images or videos) that you upload or write in our composer.
Usage Metrics: We collect analytics data from your connected accounts (e.g. impressions, reach, engagement, and clicks) to populate your growth dashboard.

Google API Services User Data Policy Compliance:
SocialFlow's use of information received from Google APIs (such as YouTube credentials, channels, and video uploading capabilities) adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer, sell, or share YouTube user data with third-party tools, advertisements, or marketing platforms.

2. How We Use Your Information

We use the collected data for the following essential purposes:

To authenticate your identity and administer your SocialFlow account.
To automatically publish, compose, and syndicate your social media posts to the platforms you have explicitly connected.
To compile audience analytics and render graphs on your user dashboard.
To generate AI captions, topic scripts, and hashtags via the OpenAI completion APIs at your request.
To manage secure checkout transactions and subscription tiers via Stripe and PayPal.

3. Data Transfer and Third-Party Disclosures

We do not sell, trade, or lease your personal data. We only transmit your post content and authentication tokens directly to the API endpoints of the social networks you authorize (e.g. Google Cloud for YouTube uploads, Meta APIs for Instagram/Facebook posts) to complete content scheduling.

Furthermore, text prompts for AI features are forwarded to OpenAI's completion servers to generate captions, and card payments are encrypted and processed directly by Stripe or PayPal.

4. Data Retention and Deletion

Your OAuth credentials (access/refresh tokens) remain securely stored in our system until you request their removal. You can instantly delete all account metadata and connected networks from our database:

By clicking Disconnect next to any platform in your Connections Dashboard to wipe all tokens immediately.
By contacting support to permanently delete your SocialFlow account, which wipes your user profile, billing tokens, posts history, and metrics from our database tables.

5. Security of Your Information

We apply advanced administrative, technical, and physical security measures to protect your access tokens and personal records. All communication runs over secure HTTPS channels, and database access is strictly restricted.

6. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted directly to this page with an updated modification date.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or YouTube user data deletion, please contact us at: privacy@socialflow.com.