Privacy Policy

2. Information We Collect

We only collect data necessary to provide and operate the SocialDispatch services:

• Account Credentials: When you register an account, we collect your name, email address, password hash (salted using bcrypt), and workspace organization name.
• OAuth Access Tokens: When you connect an authorized social channel, we receive short-lived or long-lived OAuth tokens, refresh tokens, and token expiration dates granted by the social network.
• Social Account Metadata: Account identifiers required to route posts: Facebook Page ID, Page name, Instagram Business Account ID, Instagram username, X User ID, and X handle.
• User Content & Media: Text captions, images, media URLs, scheduled posting slots, and campaign drafts that you upload or compose for publishing.
• System Logs & Telemetry: Publishing job execution timestamps, BullMQ queue dispatch status, HTTP response status codes from social platform APIs, and error diagnostic logs.

SocialDispatch strictly adheres to the Meta Platform Terms, Facebook Developer Policies, and X Developer Agreement. We specifically declare:

4. How We Use Your Information

Your information is used exclusively for the following operational purposes:

• Authenticating your user session and workspace authorization levels.
• Transmitting scheduled content to the selected Facebook Pages, Instagram accounts, and X feeds at the scheduled time.
• Executing automated retry logic when downstream platform APIs experience transient network timeouts.
• Displaying post publishing status (e.g. Published, Scheduled, Failed) in your Content Calendar and Queue dashboard.
• Allowing you to disconnect or revoke access tokens at any time.

5. Zero Data Resale & Third-Party Disclosure

Data is transmitted only to the official APIs of the respective social networks (Meta Graph API, X API) that you have intentionally targeted for publishing.

6. Storage & AES-256 Token Encryption

We implement industry standard physical, administrative, and technical controls:

• All social network OAuth access tokens and app secrets are encrypted at rest using AES-256-GCM authenticated encryption.
• All network communications between your browser, our API servers, and social media platforms are strictly encrypted using TLS 1.3 / HTTPS.
• System platform credentials can be locked down via the System Platform Settings Locker with zero-trust access.

7. Data Retention & User Data Deletion

We retain your data only for as long as your workspace account is active or needed to provide you with social publishing services.

8. GDPR, CCPA/CPRA & Your Privacy Rights

Depending on your jurisdiction (such as the European Economic Area, United Kingdom, or California), you hold specific statutory rights regarding your personal information:

• Right to Access & Portability: You can request a copy of all personal data held about you.
• Right to Rectification: You can update and correct your profile information at any time.
• Right to Erasure ("Right to be Forgotten"): You can request complete erasure of your account, tokens, and post history.
• Right to Restrict or Object to Processing: You can revoke OAuth tokens to prevent future publishing.

9. Contact & Data Protection Officer

If you have questions, inquiries, or requests regarding this Privacy Policy or our social data handling practices, please contact our Data Protection Team: