Privacy Policy
Effective Date: January 14, 2026 · Last Updated: May 1, 2026
1. About SocialConductor.AI
SocialConductor.AI provides AI-powered comment and message automation for social media creators and businesses, available for Facebook/Instagram, YouTube, TikTok, and our iOS mobile app.
2. Data We Collect
| Data Type | What It Is | Why We Collect It |
|---|---|---|
| OAuth Tokens | Access tokens for Facebook/Instagram, YouTube (Google), and TikTok | To authenticate and act on your behalf on connected platforms |
| Social Media Content | Comments, replies, messages, and post captions | To generate AI responses and manage engagement |
| Account & Page Info | Page/channel names, IDs, and basic profile data | Account identification and multi-page management |
| Device Identifier | A randomly generated UUID stored in iOS Keychain | To associate your device with your account securely |
| Push Notification Token | An Expo/APNs push token for your iOS device | To deliver real-time reply notifications |
| Usage & Activity Logs | Reply history, skip reasons, and AI-generated content | Analytics, AI learning, and debugging |
| Account Preferences | Bot settings, speed levels, simulation mode, scheduling | To operate automation per your configuration |
We do NOT collect: real names, phone numbers, payment details, precise location, contacts, photos, or any data unrelated to social media automation.
3. How We Use Your Data
- Automation: Generating and posting AI replies on your connected social accounts.
- Mobile App: Authenticating your iOS device, delivering push notifications, and showing analytics/logs.
- AI Learning: Improving reply quality using your starred/flagged examples (opt-in per account).
- Security: Detecting abuse, preventing rate-limit violations, protecting your accounts.
We never sell your data to third parties or use it to train general-purpose AI models.
4. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Meta (Facebook/Instagram) | Graph API for comment and message automation | facebook.com/privacy |
| Google (YouTube) | YouTube Data API for comment management | policies.google.com/privacy |
| TikTok | TikTok API for reply posting | tiktok.com/legal/privacy |
| Google Gemini (Vertex AI) | AI language model for reply generation | cloud.google.com/privacy |
| Expo (Push Notifications) | Push notification delivery via Apple APNs | expo.dev/privacy |
| Amazon Web Services | Cloud hosting (EC2, PostgreSQL) | aws.amazon.com/privacy |
5. Data Storage & Security
- All data is stored on AWS EC2 servers in the United States.
- OAuth tokens are encrypted at rest using Fernet symmetric encryption.
- Mobile Bearer tokens are stored exclusively in iOS Keychain — never in plaintext.
- All data in transit is encrypted via TLS/HTTPS.
- We implement CSRF protection, rate limiting, and prompt injection defenses on all API endpoints.
6. Data Retention
- Activity logs: Retained for your analytics; deletable on request.
- OAuth tokens: Retained until you disconnect the platform or request deletion.
- Push tokens: Retained until you uninstall the app or revoke notification permissions.
- Session data: Automatically purged after 7 days of inactivity.
7. Your Rights & Controls
- Disconnect: Remove any platform at any time via app Settings or web dashboard.
- Delete data: Request full deletion via our Data Deletion page or by emailing support.
- Push notifications: Disable via iOS Settings → Notifications → SocialConductor.
- Facebook data deletion: Use Facebook’s app removal flow or our deletion page.
8. Children’s Privacy
SocialConductor.AI is intended for users aged 13 and older. We do not knowingly collect data from children under 13.
9. Contact Us
Email: [email protected]
Website: socialconductor.ai
Data Deletion: socialconductor.ai/deletion