Privacy Policy

Information We Collect

Account, workspace, and team details. We collect sign-up and profile information such as email address, name, avatar, timezone, workspace name, workspace settings, team member emails, roles, invitation status, and access history. Password credentials are handled by our authentication provider.

Workspace content. We process posts, drafts, captions, schedules, uploaded or generated media, thumbnails, media metadata, studio templates, AI prompts, AI outputs, publishing options, and related workflow records you create or upload.

Connected social accounts. When you connect YouTube, TikTok, Instagram, Facebook Pages, or Threads, we store account identifiers, display names, usernames, avatars, profile URLs, granted permissions, capability snapshots, token expiry, safe provider responses, and encrypted access or refresh tokens needed to publish on your behalf.

Analytics and usage. We collect platform performance metrics when available, such as views, reach, likes, comments, shares, and engagement summaries. We also collect product usage events, billing usage counters, audit logs, security events, and basic app analytics such as page or feature usage, browser/device information, referral data, and coarse location signals where provided by our analytics tools.

Billing. We receive subscription and billing records from our payment processor, including customer, checkout, order, subscription, invoice, renewal, status, and payment-method summary information. We do not store full card numbers.

How We Use Information

We use information to operate the service: authenticate users, manage workspace access, enforce team-seat and plan limits, connect social accounts, create and schedule posts, publish approved content, generate AI content you request, report account health and analytics, send transactional notifications, provide support, maintain security, troubleshoot errors, prevent abuse, and meet legal obligations.

Connected Accounts And Platform Data

OAuth permissions are requested so we can discover eligible accounts, validate permissions, store encrypted publishing credentials, publish content you approve or schedule, disconnect accounts, and report account health. Access and refresh tokens are encrypted at rest and used only by server-side account, publishing, reconnect, disconnect, deletion, and account-health workflows. They are not returned in client payloads or normal user-facing database reads.

SeamlesSocial uses YouTube API Services when you connect YouTube. YouTube-related data may include channel details, video upload metadata, publishing status, and analytics where approved. Your use of YouTube through SeamlesSocial is also subject to the Google Privacy Policy. In addition to disconnecting YouTube in SeamlesSocial, you can revoke SeamlesSocial’s access to your Google account from Google security settings.

For Facebook Pages, Instagram, and Threads, you can disconnect the account in SeamlesSocial, remove the app through Meta account/app settings, or request deletion through the process described on our data deletion page. We process Meta deauthorization and data-deletion callbacks when received.

When you connect TikTok, we access basic profile and creator information through TikTok Login Kit, and we use the TikTok Content Posting API to publish the videos and photos you approve or schedule on your behalf. We store account identifiers, display names, usernames, avatars, creator capability snapshots, and encrypted access and refresh tokens, and we use TikTok data only to provide these publishing features. Your use of TikTok through SeamlesSocial is also subject to TikTok’s Privacy Policy. In addition to disconnecting TikTok in SeamlesSocial, you can revoke access in TikTok under Settings and privacy → Security & permissions → Manage app permissions, or request deletion through our data deletion page.

AI Content Generation

When you generate captions, images, or video, your prompt and relevant workspace, media, and style inputs are sent to AI service providers to produce the requested output. Do not submit sensitive personal information, confidential third-party material, or content you do not have the right to process. You are responsible for reviewing AI outputs before publishing.

Service Providers

We share information with service providers that process it on our behalf, including cloud hosting and storage providers, authentication and database providers, payment processors, AI generation providers, email delivery providers, analytics/error-monitoring providers, and the social platforms you connect. These providers may process information in countries outside your own. We do not sell your personal information.

Data Retention

We generally keep workspace records, social accounts, posts, media, team membership records, and AI generation records until you delete them, disconnect the relevant account, or delete the workspace. Encrypted social tokens are kept until you disconnect, reconnect, or delete the workspace. Provider payloads, notifications, audit logs, usage records, analytics snapshots, and billing records may be kept for limited periods needed for security, support, tax, accounting, fraud prevention, legal compliance, and service operation.

Your Rights And Choices

Workspace owners and admins can export workspace data and request deletion of workspace data, including posts, media, team membership records, connected-account metadata, encrypted tokens, AI generations, analytics, workspace API tokens, and usage records, where legally allowed. See Delete Workspace Data for details. You can disconnect social accounts from the app and may also revoke access directly within the connected social platform. Content already published to external platforms may need to be removed directly on those platforms. Eligible stored user and platform data is removed from active product systems as soon as possible and within 7 calendar days where required by platform policy or law. We may retain minimal billing, tax, fraud-prevention, security, and redacted audit records where required.

Security

We use workspace access controls, role-based permissions, row-level security, encrypted social tokens, and secret redaction in logs. No method of transmission or storage is completely secure, but we work to protect your information.

Children’s Privacy

SeamlesSocial is not intended for, and may not be used by, anyone under 18. We do not knowingly collect personal information from children.

Changes And Contact

We may update this policy from time to time and will revise the “Last updated” date above. For privacy questions or requests, contact us at dev@oranefindley.com or through our support page.