Privacy Policy

SocialsBoost helps you publish to social media and uses AI to draft content. To do that we collect your account details, the social-account tokens you connect, and the posts you create on our platform. We don't sell your data, we don't train public AI models on your content, and you can export or delete everything any time from your dashboard.

We collect three categories of information:

Account information — your name, email, password hash, profile picture, workspace name, billing address, and the plan you're on. If you sign in with Google, we receive a unique ID, your name, and your email from Google (and nothing else).

Connected social-account data — the OAuth tokens issued by Instagram, X, LinkedIn, TikTok, YouTube, Facebook, Pinterest, and Threads when you connect an account. We use these tokens only to publish, fetch metrics, and refresh the connection. We never read your DMs or post without an explicit action from you.

Usage information — the posts you create, drafts, scheduled times, AI prompts and generations, uploaded media, comments you reply to from inside SocialsBoost, and basic device and log data (IP address, browser, pages visited).

We use the information above to:

• Run the product — publish scheduled posts, fetch analytics, and keep your dashboard up to date.
• Process payments and send billing receipts.
• Personalise the experience — remember your platforms, brand voice, and content templates.
• Send important account notices (security alerts, plan changes, scheduled-post failures).
• Improve the product through aggregated, de-identified usage analytics.
• Detect abuse, fraud, and platform-policy violations.

We do not sell, rent, or share your personal information with advertisers or data brokers.

When you use AI Caption Studio, image generation, or any AI feature, we send the prompt and any context (your brand voice, the platform, the topic) to our AI providers — currently OpenAI and Anthropic, depending on the feature. The resulting content is returned to you and stored in your workspace.

AI providers may temporarily process inputs to detect abuse but do not retain or use your content to improve their models. A current list of AI sub-processors and their data-handling terms is available on the GDPR page.

We share information only with:

• Social platforms you connect — to publish, fetch insights, and manage the connection, as authorised by you via OAuth.
• Service providers (sub-processors) — cloud hosting (AWS, Vercel), payments (PayPal, Paddle), email (Postmark), analytics (PostHog, self-hosted), AI providers (OpenAI, Anthropic). Each is bound by a data-processing agreement.
• Legal requests — if compelled by law, we will respond, but only after careful review and with the narrowest disclosure possible.
• Business transfers — if SocialsBoost is ever acquired or merged, we will notify you at least 30 days in advance.

We use a small number of first-party cookies to keep you signed in, remember your theme, and run our own product analytics. We do not use third-party advertising cookies, and we do not embed tracking pixels from advertising networks.

You can clear our cookies from your browser at any time without losing data — your work lives server-side under your account.

You can, at any time:

• Access your data — every connected account, post, and AI generation is visible from your dashboard.
• Export a JSON snapshot of your workspace from Settings → Account.
• Correct account information from Settings → Profile.
• Disconnect any social account, which revokes our tokens immediately.
• Delete your account, which permanently removes all your data within 30 days (backups roll over at 90).

For requests we can't fulfil through the dashboard, email privacy@socialsboost.com and we'll respond within 30 days.

SocialsBoost is operated from the United States. If you use our service from the European Economic Area, the UK, or Switzerland, your data is transferred to and processed in the United States and other countries where our service providers operate.

We rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK Addendum where applicable. For details see our GDPR page.

We keep your data for as long as your account is active. When you delete your account:

• Account info, posts, drafts, and AI generations are deleted from live systems within 30 days.
• OAuth tokens are revoked immediately at the social platform.
• Encrypted backups are rotated out within 90 days.
• Billing records may be retained for up to 7 years to meet tax and audit obligations.

SocialsBoost is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as we add features or as the law changes. Material changes will be notified to you by email and by an in-app banner at least 14 days before they take effect. The effective date at the top of this page always reflects the current version.

Questions about this policy or how we handle your data?

• Email: privacy@socialsboost.com
• Postal: SocialsBoost, 100 San Francisco St, San Francisco, CA 94105, USA