Privacy Policy

• Account and profile data: email address, name, password (stored only as a secure hash by our authentication provider), timezone, language and onboarding progress.
• Workspace and brand data: organization and brand names, industry, website or store URL, goals, audience, brand voice, colors, fonts, products/services, notes, and the content drafts, campaigns, approvals and AI requests you create.
• Uploaded media: logos, images, video, audio and documents you upload, with metadata such as file name, type, size, tags and dimensions.
• Connected services data: when you choose to connect a social channel, store, storage or creative provider, we receive the account identifiers, granted permissions (scopes) and the data needed for the feature you requested (for example page names or products). Many integrations are not yet available; they are labelled "Coming soon" or "Setup required" in the app.
• OAuth tokens: access/refresh tokens issued by a provider when you connect it.
• Usage and technical data: activity logs for security-sensitive actions (for example brand, membership and content changes), feature usage counts, and basic request logs needed to operate and secure the service.

If you sign in with Google or connect a Google service (such as Google Drive, YouTube or Google Business Profile, when available), we access only the data covered by the permissions shown on Google's consent screen, such as your name, email address and profile picture for sign-in, or the specific files, channels or locations you choose for a feature.

• We use Google user data only to provide and improve the user-facing Socilevel features you request, such as signing you in, importing media you select, or publishing content you have approved.
• We do not sell Google user data, and we do not use it for advertising, for building advertising profiles, or for determining creditworthiness.
• We do not transfer Google user data to others except as needed to provide or improve those features, to comply with law, for security, or as part of a merger or acquisition with notice to you.
• Humans at Socilevel do not read Google user data unless you give explicit permission (for example for support), it is necessary for security or abuse investigation, or it is required by law.
• We do not use Google user data to train generalized AI or machine-learning models.

Socilevel's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• To create and operate your account, workspaces and brands.
• To provide features you request: drafting, planning, approvals, media storage, scheduling and, once connected and approved by you, publishing and engagement.
• To keep each brand's data separate and to enforce roles and approvals.
• To secure the service, prevent abuse, and troubleshoot problems.
• To communicate with you about your account, security and support requests.

Content is never published to your connected channels without the approval steps configured in your workspace.

When you use AI features, the prompt and the relevant brand context (for example your brand voice and products) may be sent to an AI model provider to generate a response. We send only what is needed for the request. Some features currently use built-in, non-AI processing and are labelled accordingly in the app. AI output may be inaccurate; you review it before use.

The AI and creative providers currently used are Google Gemini (marketing planning), HeyGen (avatar videos), Runway (images and video), Higgsfield (video) and Canva (designs, only if you connect your Canva account). Paid image and video creation only starts after you review and approve it. Files these providers return are saved privately in your brand's Media Library. Each provider handles the data it receives under its own terms and privacy policy.

We do not sell personal information. We share data only with:

• Infrastructure providers that host our application, database, authentication and file storage.
• AI model providers, for AI features you use.
• Third-party services you choose to connect, to perform the action you requested (for example publishing an approved post).
• Members of your own workspace, according to their roles.
• Authorities, when required by law or to protect rights and safety.

A current list of service providers is available on request at support@socilevel.com.

• Access to brand data is enforced in the database, so members only see brands in workspaces they belong to.
• Uploaded files are stored privately and are accessed through short-lived links.
• Provider tokens are stored server-side, in storage that the browser cannot read, and are never sent to your browser.
• Data is encrypted in transit (HTTPS).

No system is perfectly secure. We will notify affected users of a security incident as required by law.

We keep your data while your account is active. When you delete content, media or a brand, it is removed from the active service. When your account is deleted, we delete or anonymize your personal data within 30 days, except where we must keep limited records (for example security logs or billing records) for legal, security or dispute purposes. Tokens for a disconnected service are deleted when you disconnect it.

• View and edit your profile, brands and Brand Kit in the app.
• Review Creative Memory: suggestions are saved only when you choose, used only for that brand, and can be edited, rejected or deleted at any time.
• AI Creative Director: your messages, that brand's Brand Kit and accepted memories are sent to OpenAI to draft storyboards. We ask OpenAI not to store them for its own use, keep chats with your brand until you delete them or the brand, and record usage (tokens, estimated cost) for limits and auditing.
• Delete media, drafts and brands you have permission to manage.
• Disconnect connected services and revoke access at the provider (see Data Deletion).
• Request access to, correction of, export of or deletion of your data by emailing support@socilevel.com.

Depending on where you live, you may have additional rights under local law. We will respond within the time required by applicable law.

You can revoke Socilevel's access to your Google account at any time at myaccount.google.com/permissions. For other providers, use that provider's app-permissions settings. Revoking access stops further access; to also delete data we already hold, follow the steps on our Data Deletion page.

Socilevel is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy. We will change the "Last updated" date and, for material changes, notify you in the app or by email before they take effect.

Questions or requests: support@socilevel.com. You can also visit our Support page.