Privacy Policy

Information we collect

• Account details: your name, email address and profile picture, from email sign-up or from Google when you sign in with Google.
• Content you give us: website URLs you ask us to analyze, brand assets, uploaded media, drafts and scheduled posts.
• Connected social accounts: when you connect TikTok, Instagram, YouTube or X, we store the access tokens those platforms issue so we can publish on your behalf. Tokens are encrypted at rest.
• Basic technical data: sign-in sessions, IP address and browser details needed to keep your account secure.

How we use it

We do not sell your personal information, and we do not use it for advertising.

• To run SocialSmith: sign you in, analyze the websites you submit, generate content plans and media, and publish or schedule posts you approve.
• To keep the service secure and fix problems.
• To contact you about your account.

Google user data

When you sign in with Google we request only your basic profile and email address (the openid, email and profile scopes). We use them to create and sign in to your SocialSmith account and for nothing else.

SocialSmith's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We share data only with providers that help us run SocialSmith, and only what each needs:

• Hosting and storage: Cloudflare (application, media storage) and Neon (database).
• AI processing of the websites and content you submit: Google Gemini, Fireworks AI, fal, Exa and Apify.
• Social platforms you choose to connect, when you publish to them.

Retention and deletion

We keep your data while your account is active. You can disconnect a social account at any time, which deletes its stored tokens. To delete your account and its data, email hello@socialsmith.com and we will do so within 30 days.

Changes

If we change this policy we will update the date above, and tell you by email if the change is significant.