Privacy Policy

Overview

At Socrazi, we take your privacy seriously. This policy explains what information we collect, how we use it, how we protect it, and your rights when you create, schedule, publish, analyze, and manage messages or comments for social media posts with connected platforms.

Google API Services Limited Use Disclosure

Socrazi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Purpose Limitation: We only use Google data from YouTube to provide Socrazi's user-facing YouTube features that you explicitly request, such as connecting a channel, uploading videos, updating video metadata, syncing video statistics, and managing YouTube comments or replies.
• No Model Training: We do not use Google API data to train models or machine learning systems.
• No Prohibited Uses: We do not use Google data for advertising, credit determination, data brokering, or any purpose other than providing the Socrazi service.
• No Unauthorized Transfers: We do not sell, rent, or transfer Google user data to third parties except to trusted service providers as necessary to provide and secure the Socrazi service, or as required by law.

Information We Collect

• Account Information: Your name, email address, and authentication details managed by Convex Auth.
• Usage Data: Interactions with the app, including actions like creating posts, scheduling content, uploading assets, and managing connected accounts.
• Content Data: Post content, uploaded images and videos, drafts, scheduled posts, publishing settings, platform-specific metadata, synced analytics, comments, replies, and other content you manage in Socrazi.
• Payment Information: Managed securely by Stripe. We do not store credit card details.

Third-Party Platform Integrations

When you connect third-party accounts to Socrazi, we collect and process the following data from each platform only after you authorize the integration:

How We Use Your Data

• To provide and improve the Socrazi service
• To maintain and enhance functionality
• To communicate updates and support information
• To enforce our terms and ensure account security
• To enable integrations with third-party platforms you authorize, including token refresh and reconnection status
• To publish, schedule, analyze, and manage supported comments or replies through connected platforms when you request it

Data Protection & Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS with TLS 1.2+ encryption.
• Encryption at Rest: Sensitive data including OAuth access tokens and refresh tokens are encrypted at rest using AES-256 encryption.
• OAuth 2.0 with PKCE: We use OAuth 2.0 with Proof Key for Code Exchange (PKCE) for secure authentication with third-party platforms.
• Secure Token Storage: Access tokens are stored securely in our database and are never logged or exposed in error messages.
• Access Controls: Strict access controls limit who can access user data within our organization.
• Regular Security Audits: We conduct regular security reviews and updates to protect against vulnerabilities.
• Third-Party Security: We work only with trusted service providers (Stripe, Convex, Cloudflare) that meet high security standards.

Data Sharing & Third Parties

We only share your data with trusted third-party service providers necessary to operate Socrazi:

• Convex Auth: Provides authentication services. Processes your email and account information.
• Stripe: Processes payments. We do not store credit card details; Stripe handles all payment information securely.
• Convex: Database and backend infrastructure. Stores your account data, brands, posts, assets, and settings.
• Cloudflare R2: Cloud storage for uploaded images and video assets.
• We do NOT sell your personal data to any third parties.
• We do NOT transfer or disclose user data to third parties for purposes other than providing, securing, maintaining, or legally operating the Socrazi service.
• We do NOT use your data to train generalized models.

Data Retention & Deletion

We retain your data only as long as necessary to provide our services:

• OAuth Tokens: Encrypted access tokens, refresh tokens, token expiration times, and granted scopes are retained while the integration is active. They are deleted from Socrazi when you disconnect an integration.
• User Content: Posts, uploaded assets, and drafts are retained until you delete them or close your account.
• Account Data: Retained while your account is active. When you delete your account, we delete your personal information within 30 days.
• Legal Retention: Some data may be retained longer if required by law or to resolve disputes.
• You may request deletion of your data at any time by emailing contact@socrazi.com or by deleting your account from the settings page.

Your Rights

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update or correct your personal information at any time.
• Deletion: You may request deletion of your personal data.
• Disconnect Integrations: You can disconnect any third-party integration at any time from your Socrazi settings. You can also revoke Socrazi's access from each platform's settings (e.g., Google Account settings, TikTok app settings).
• Data Portability: You may request an export of your data in a machine-readable format.
• To exercise these rights, contact us at contact@socrazi.com.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of Socrazi after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this policy, please email contact@socrazi.com or reach out to Socrazi, Tokyo, Japan.