Privacy Policy

We collect the minimum data needed to operate the service:

• Account data: your name, email, hashed password, workspace, and (if you sign in with Google) your Google profile picture and Google user id.
• Content data: products, media assets (images/videos), captions, hashtags, publish jobs, comments you ingest, replies you draft, leads, complaints, and Discovery reports.
• OAuth tokens for connected platforms (YouTube, Facebook Pages, Instagram Business). Tokens are encrypted at rest with Fernet.
• Usage data: server logs (IP address, user-agent, timestamps, endpoints called) retained for security and debugging.
• Cookies: a session cookie for Google Auth and a bearer-token in localStorage for JWT-based sessions.

• Provide the SociGrab platform: publish content, ingest comments, classify intent, generate reply drafts, run Discovery reports.
• Send account-related communications (verification, security notices).
• Improve product quality — aggregated, non-identifying analytics only.
• Comply with legal obligations.

Text you submit — comment text, product descriptions, Discovery query text and mined public-conversation excerpts — is sent to Anthropic's Claude Sonnet 4.5 model via Emergent's LLM integration for classification and content generation. This data is processed transiently and is not used to train foundation models under our contract with the provider.

When you connect a YouTube, Facebook Page, or Instagram Business account, SociGrab acts on your behalf via the platform's official APIs using OAuth tokens you grant. We only request the minimum scopes needed to publish and read comments on your own content. We do not sell or share this access.

• Raw uploaded videos are automatically deleted from object storage after your publish job succeeds on all selected platforms.
• Thumbnails and metadata are retained for as long as your workspace is active.
• Server logs are retained for up to 30 days.
• On workspace deletion, all associated data is deleted within 30 days (see Data Deletion policy).

You may access, correct, export, or delete your data at any time. Email privacy@socigrab.com or visit Data Deletion.

Passwords are hashed with bcrypt. OAuth tokens are encrypted with Fernet keys. Traffic is served over HTTPS. Access to production data is restricted to authorised personnel and audit-logged.

SociGrab is not intended for children under 13. We do not knowingly collect data from anyone under 13.

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-product notice.

Questions? Reach us at privacy@socigrab.com.