Overview
At Socrazi, we take your privacy seriously. This policy explains what information we collect, how we use it, how we protect it, and your rights. Socrazi is an AI-powered marketing platform that integrates with multiple social media and analytics platforms to help you manage your online presence.
Google API Services Limited Use Disclosure
Socrazi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Purpose Limitation: We only use Google data (from YouTube, Google Analytics, and Google Search Console) to provide Socrazi's user-facing features that you explicitly request.
- No AI Model Training: Google API data processed through our AI features uses Google's own Gemini API (Paid tier), which does not use customer data for model training per Google's terms.
- No Prohibited Uses: We do not use Google data for advertising, credit determination, data brokering, or any purpose other than providing the Socrazi service.
- No Unauthorized Transfers: We do not sell, rent, or transfer Google user data to third parties except as necessary to provide the service.
Information We Collect
- Account Information: Your name, email address, and authentication details managed by Convex Auth.
- Usage Data: Interactions with the app, including actions like creating posts and conversations.
- Chat Data: Your prompts and conversation history with the AI features, where applicable.
- Payment Information: Managed securely by Stripe. We do not store credit card details.
Third-Party Platform Integrations
When you connect third-party accounts to Socrazi, we collect and process the following data from each platform:
Google Services (YouTube, Google Analytics, Google Search Console): YouTube: Your channel information, video metadata (titles, descriptions, thumbnails), and upload permissions to enable video publishing and scheduling. Google Analytics: Website traffic data, user behavior metrics, session information, and audience demographics (read-only access). Google Search Console: Search performance data, keyword rankings, click-through rates, and indexing status (read-only access). Authentication: Your Google account email address and profile information for authentication purposes.
TikTok: What We Collect: Your TikTok profile information, display name, avatar, video publishing permissions, and video upload capabilities. How We Use It: To publish videos to your TikTok account on your behalf when you request it, and to schedule TikTok posts.
Meta Platforms (Instagram, Threads): What We Collect: Your Instagram Business account information, username, profile picture, and content publishing permissions. For Threads: basic profile information and posting permissions. How We Use It: To publish posts, images, and captions to your Instagram and Threads accounts on your behalf when you request it.
Other Social Platforms (X, LinkedIn): X (Twitter): Your profile information, username, and tweet posting permissions. LinkedIn: Your profile information and professional update posting permissions. How We Use It: To publish posts to these platforms on your behalf when you request it, and to schedule content.
How We Use Your Data
- To provide and improve the Socrazi service
- To analyze usage and enhance functionality
- To communicate updates and support information
- To enforce our terms and ensure account security
- To enable integrations with third-party platforms you authorize
- To display analytics and insights from connected platforms
Data Protection & Security
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS with TLS 1.2+ encryption.
- Encryption at Rest: Sensitive data including OAuth access tokens and refresh tokens are encrypted at rest using AES-256 encryption.
- OAuth 2.0 with PKCE: We use OAuth 2.0 with Proof Key for Code Exchange (PKCE) for secure authentication with third-party platforms.
- Secure Token Storage: Access tokens are stored securely in our database and are never logged or exposed in error messages.
- Access Controls: Strict access controls limit who can access user data within our organization.
- Regular Security Audits: We conduct regular security reviews and updates to protect against vulnerabilities.
- Third-Party Security: We work only with trusted service providers (Stripe, Convex, Cloudflare) that meet high security standards.
Data Sharing & Third Parties
We only share your data with trusted third-party service providers necessary to operate Socrazi:
- Convex Auth: Provides authentication services. Processes your email and account information.
- Stripe: Processes payments. We do not store credit card details; Stripe handles all payment information securely.
- Convex: Database and backend infrastructure. Stores your account data, conversations, and settings.
- Cloudflare R2: Cloud storage for uploaded images and video assets.
- We do NOT sell your personal data to any third parties.
- We do NOT transfer or disclose user data to third parties for purposes other than providing the Socrazi service.
- We do NOT use your data to train generalized AI models.
Data Retention & Deletion
We retain your data only as long as necessary to provide our services:
- OAuth Access Tokens: Retained while the integration is active. Deleted immediately when you disconnect an integration.
- Analytics Data: Google Analytics and Search Console data cached in Socrazi is retained for up to 90 days for performance optimization.
- User Content: Posts, conversations, and uploaded assets are retained until you delete them or close your account.
- Account Data: Retained while your account is active. When you delete your account, we delete your personal information within 30 days.
- Legal Retention: Some data may be retained longer if required by law or to resolve disputes.
- You may request deletion of your data at any time by emailing contact@socrazi.com or by deleting your account from the settings page.
Your Rights
You have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may update or correct your personal information at any time.
- Deletion: You may request deletion of your personal data.
- Disconnect Integrations: You can disconnect any third-party integration at any time from your Socrazi settings. You can also revoke Socrazi's access from each platform's settings (e.g., Google Account settings, TikTok app settings).
- Data Portability: You may request an export of your data in a machine-readable format.
- To exercise these rights, contact us at contact@socrazi.com.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of Socrazi after changes constitutes acceptance of the updated policy.
Contact
If you have questions about this policy, please email contact@socrazi.com or reach out to Socrazi, Tokyo, Japan.