Privacy Policy

When you use My SocialOS, you may provide:

• Account information — your name, email address, password credentials, and company name.
• Business and brand information — details you share so the AI can work for you, such as your brand name, audience, content pillars, voice preferences, brand colors, posting preferences, timezone, and product or service details (including names, descriptions, pricing, and purchase links).
• Uploaded files — brand assets and product media such as logos, images, video, and audio you add to your libraries.
• Prompts and instructions — messages you send to Remi (our AI director), planning instructions, and content edits, which the Service also uses as context for later requests you make.
• Payment information — processed by our payment processor (Stripe); we do not store full card numbers.
• Communications — messages you send us, for example about support or sales.

When you choose to connect a supported third-party social account (which may include Instagram, Facebook, Threads, X, LinkedIn, TikTok, YouTube, or Pinterest, as each integration becomes available), we receive and store the data needed to maintain that connection and perform what you ask for. Depending on the platform and the permissions you grant, this may include: your platform account identifier and handle, basic profile information, the authorization tokens issued by the platform, the scopes you granted, and information about content the Service publishes on your behalf (such as the platform’s post identifier and URL). We collect connected-account data only to provide the functionality you request — we do not harvest your social accounts for unrelated purposes.

Maintaining a social connection requires storing the authorization credentials (OAuth tokens) the platform issues when you approve access. These credentials are stored server-side, are not accessible from your browser or by other users, are never displayed back or written to logs, and are used only to perform actions you have authorized. Disconnecting an account, or revoking access from the platform’s own settings, invalidates that authorization.

My SocialOS provides AI functionality by sending relevant inputs — such as your prompts, brand and product context, and content being worked on — to third-party AI providers for processing. Our current AI providers are Anthropic (language model processing for content generation, planning, and Remi’s assistance) and ElevenLabs (voiceover and music generation). We send these providers what is needed to fulfill your request; they process it under their own terms and privacy commitments applicable to API customers.

We use the information described above to:

• operate My SocialOS and authenticate you;
• generate, adapt, and recommend content and schedules you request;
• maintain your social connections and schedule/publish content you authorize;
• process subscription payments;
• provide customer support;
• secure the Service and prevent abuse and fraud;
• improve the Service and develop new functionality;
• comply with legal obligations.

We rely on a small set of service providers to run My SocialOS. Based on the current implementation:

• Supabase — authentication, database, and file storage (your account data, content, and uploads live here).
• Vercel — application hosting and delivery.
• Anthropic — AI language model processing.
• ElevenLabs — AI voiceover and music generation.
• Stripe — payment processing.
• Pexels — licensed stock photo and video content used in generated posts.
• Social media platforms — the platforms you choose to connect, via their official APIs.

Each provider receives only what is needed for its role, and processes it under its own terms and privacy practices.

Information we obtain through a social platform’s API is used solely to provide the My SocialOS functionality you request in relation to that platform — for example maintaining the connection, publishing content you approved, and reporting the result back to you. Our use of platform data complies with each platform’s developer terms and API policies, including any platform-specific limits on use, storage, and deletion of their data. If a platform requires deletion of its data when you disconnect or revoke access, we honor those requirements.

We do not sell your personal information. We share information only: with the service providers listed above, to perform their function; with a social platform, when you instruct us to publish or interact with it; when required by law, legal process, or to protect rights, safety, or the integrity of the Service; or as part of a business transaction such as a merger or acquisition, in which case this policy would continue to apply to the transferred data until updated.

We retain your information for as long as your account is active and as needed to provide the Service — your content, brand libraries, and publishing history are the working state of your account. We may also retain certain information for legitimate business purposes such as security, backup integrity, billing records, dispute resolution, and legal compliance. Authorization tokens for a disconnected social account are not retained for active use. We have not adopted fixed retention periods beyond these principles; when we do, this policy will be updated.

We use reasonable technical and organizational safeguards to protect your information, including encrypted connections (HTTPS), server-side isolation of authorization credentials, per-account data scoping, and access controls around administrative operations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but protecting your account and connected platforms is a design priority throughout the Service.

• Account information — you can review and update your profile, brand, and product information in the app.
• Social connections — you can disconnect a supported social account at any time, in the app or from the platform’s own security settings.
• Subscription — you can manage or cancel billing through the in-app billing controls.
• Deletion and privacy requests — you can request deletion of your account and associated data, or make other privacy inquiries, by contacting info@MySocialOS.net. We will verify the request and respond within a reasonable time, subject to data we must retain for legal or security reasons.
• Depending on where you live, you may have additional statutory rights (such as access, correction, portability, or objection). We will honor valid requests as required by the law that applies to you.

My SocialOS uses cookies that are necessary to operate the Service — primarily authentication/session cookies that keep you signed in securely. We do not currently use third-party advertising cookies or third-party analytics trackers on the Service. If that changes, this policy will be updated first.

The Service is a commercial business tool and is not directed to children. It is not intended for anyone under 16, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

My SocialOS operates from the United States, and information is processed and stored in the United States and in the regions used by our service providers. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in jurisdictions that may have different data-protection rules than your own; we protect it as described in this policy wherever it is processed.

We may update this Privacy Policy as the Service evolves. When we do, we will update the effective date at the top of this page, and for material changes we will provide reasonable notice (for example in the app or by email).

Privacy questions and requests can be sent to info@MySocialOS.net.