Privacy Policy

1. Scope and controller

Socialman.app (“Socialman,” “we,” “us,” or “our”) controls personal information collected for our own business purposes through the Service. Our address is 30 N Gould St, STE R, Sheridan, Wyoming 82801, United States, and our privacy contact is support@socialman.app.

When a business customer uses Socialman to process personal information contained in its content, messages, audiences, or connected accounts, that customer may be the controller or business and Socialman may act as its processor or service provider. In that situation, direct your request to the customer first; we will assist it as required by applicable law and our agreement.

2. Personal information we collect

Please do not submit sensitive personal information unless it is necessary, lawful, and appropriate for the feature you use. Socialman is not designed to store government identifiers, payment-card numbers, health records, biometric templates, or children’s data.

3. How we use information

Where we rely on consent, you may withdraw it at any time without affecting processing already completed. Where we rely on legitimate interests, we consider the necessity of the processing and balance it against your rights.

4. Social-platform integrations

Socialman requests only the provider permissions needed for features you choose. Depending on the provider and permissions, we may retrieve profile information, pages or channels, content, engagement, messages, and insights, and may publish or respond on your behalf. You can revoke access in Socialman’s integration settings or through the provider.

Socialman’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for personalised advertising, sell it, or permit humans to read it except with your affirmative agreement for support or security, when necessary to investigate abuse, or when required by law.

5. AI and automated features

When you choose an AI-assisted feature, the prompt and selected content may be sent to an AI or design provider, including OpenAI or a design-generation service, to produce the requested result. Do not include personal information that is not necessary for the request. AI features assist with content creation and analytics; Socialman does not use them to make decisions that produce legal or similarly significant effects about individuals.

6. Cookies and similar technologies

Socialman uses cookies and similar local technologies that are necessary to authenticate users, maintain sessions, remember the active workspace, preserve security, and keep the Service functioning. These cookies are used because they are necessary to provide the Service you request, rather than for advertising.

At the effective date above, the application does not intentionally deploy cross-site behavioural-advertising cookies. Public pages may load resources such as fonts or JavaScript from content-delivery providers, which receive technical request information such as IP address and user agent. If we introduce optional analytics or advertising cookies, we will provide appropriate notice and consent controls before activating them where required. You can block cookies in your browser, but essential features may stop working.

Where applicable, we honour legally recognised browser-based opt-out signals for activities treated as a sale or sharing. Because we do not currently sell or share personal information for cross-context behavioural advertising, such signals do not change the operation of essential Service cookies.

7. When we disclose information

We disclose personal information only as reasonably necessary to:

• Service providers: hosting, infrastructure, storage, email delivery, support, monitoring, security, and development providers processing data for us.
• Social platforms: providers you connect, so we can authenticate, retrieve information, publish content, or perform actions you request.
• AI and design providers: to process prompts or content for a feature you invoke.
• Payment and commerce providers: payment processors, merchant-of-record services, fraud-prevention providers, and accounting advisers.
• Your organisation: workspace owners, authorised members, administrators, or resellers that manage your account, subject to their permissions.
• Legal and safety recipients: courts, regulators, law enforcement, advisers, or affected parties where we reasonably believe disclosure is required by law or necessary to protect rights, safety, and security.
• Corporate transactions: a buyer, investor, successor, or adviser involved in a proposed or completed merger, financing, reorganisation, insolvency, or sale, subject to appropriate confidentiality protections.

We do not sell personal information for money. We do not share personal information for cross-context behavioural advertising based on the Service’s current configuration. We do not permit service providers to use personal information for their independent purposes except as disclosed to you or permitted by law.

8. International transfers

Socialman operates from the United States and uses providers that may process information in the United States and other countries. Those countries may have data-protection rules different from those where you live. Where required, we use an adequacy decision, approved contractual clauses, or another lawful transfer mechanism and apply supplementary safeguards appropriate to the transfer. See the GDPR Notice for more information.

9. Retention

We retain personal information only as long as needed for the purposes described above, including to provide the Service, comply with law, resolve disputes, prevent fraud, and enforce agreements. Our target retention schedule is:

• Account, workspace, content, and connected-account records: while the account or connection remains active. Following a verified deletion request, active Service records are ordinarily deleted or de-identified within 30 days.
• OAuth credentials: until you disconnect the provider, the credential expires or is revoked, or the associated account is deleted, subject to short-lived security and backup copies.
• Operational and security logs: ordinarily up to 12 months, unless needed longer for an active security event, abuse investigation, or legal claim.
• Support records: ordinarily up to 24 months after the matter closes.
• Transaction, tax, refund, and accounting records: for the period required by applicable tax, accounting, anti-fraud, and financial laws, commonly up to seven years. These records may remain after account deletion and will be restricted to those purposes.
• Backups: deleted information may remain temporarily in restricted, rotating backups until overwritten under the applicable backup cycle.

We may retain a minimal suppression record to honour an opt-out and may preserve information longer when required by law, legal hold, dispute, or security need. When retention is no longer justified, we delete or de-identify the information.

10. Security

We use administrative, organisational, and technical safeguards designed to protect personal information, including access controls, credential protection, transport security, limited staff access, monitoring, and deletion processes. No system is completely secure. You are responsible for protecting your password and connected accounts and for notifying us of suspected unauthorised access.

11. Your choices and rights

• Review and update profile information in account settings.
• Disconnect social-platform integrations at any time.
• Opt out of marketing emails using the unsubscribe control or by contacting us.
• Request access, a copy, correction, deletion, restriction, portability, or objection where applicable.
• Delete your account from the Account Deletion section in Settings or email us.
• Withdraw consent where processing relies on consent.

Send privacy requests to support@socialman.app with the subject “Privacy Request.” State the right you wish to exercise and the account email involved. We may verify your identity or authority. We will respond within the period required by applicable law, ordinarily within 30 days for GDPR requests. Rights are subject to lawful exceptions, including records we must retain.

12. U.S. state privacy disclosures

Residents of jurisdictions with applicable comprehensive privacy laws may have rights to know or access, correct, delete, obtain a portable copy, opt out of certain targeted advertising, sale, sharing, or profiling, limit certain uses of sensitive information, and appeal a denied request. We will not discriminate against you for exercising a privacy right.

The categories collected during the preceding 12 months and their sources, purposes, and recipients are described in Sections 2, 3, and 7. Socialman does not knowingly sell personal information, share it for cross-context behavioural advertising, or knowingly collect or sell information about people under 18. An authorised agent may submit a request where applicable; we may require proof of authority and identity verification.

13. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it where required.

14. Third-party services

Third-party websites and connected platforms have their own privacy practices. This Policy does not govern their independent processing. Review a provider’s privacy settings and policy before connecting it or following an external link.

15. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or our practices. We will post the revised Policy and update the date above. If a change materially affects your privacy rights, we will provide additional notice through the Service or by email where required.

16. Contact and complaints

If we cannot resolve a privacy concern, you may complain to the data-protection, attorney-general, or consumer-protection authority with jurisdiction where you live. EEA, UK, and Swiss complaint rights are explained in our GDPR Notice.