This policy explains what personal data MySocioRep collects, why, and the choices you have. It is written to meet the Nigeria Data Protection Act 2023 and the EU/UK GDPR.
What we collect
- Account data: name, email, password (stored only as a salted hash), timezone.
- Content you provide: resumes and documents you upload, projects and activity log entries, profile facts, tone settings, and the posts and images created from them.
- Connected accounts: profile details and access tokens for the LinkedIn, X, Instagram and Threads accounts and Facebook Pages you add. Tokens are encrypted at rest with AES-256-GCM.
- Performance data: impressions and engagement counts for posts we published, read from the platforms.
- Link clicks: when someone follows a tracked link in a post you published, we count the click with a hash of their IP address and browser that changes every day and can't be turned back into either. We don't store IP addresses. If you add our snippet to your website, it reports sign-ups or sales to us with the click that led to them and the page address without its query string - no names, emails or other details about your visitors.
- Billing data: plan, payment amounts, dates and references. Card and bank details are handled by Flutterwave and never reach our servers.
- Technical data: IP address and request logs, used for security and abuse prevention.
How we use it
- To provide the Service: building your persona, writing and scheduling posts, publishing to accounts you connect, and measuring results.
- To bill you and send receipts and account notices.
- To keep the Service secure and prevent abuse.
We do not sell your personal data, and we do not use your content to train our own models.
Who we share it with
- AI providers (such as OpenAI) process your content to generate drafts and images, under terms that do not permit them to train on API data.
- Flutterwave processes payments.
- LinkedIn, X and Meta (Facebook, Instagram and Threads) receive the posts you publish. Instagram and Threads fetch each post's image from a link on our servers.
- Hosting and email providers that run the Service on our behalf.
Retention
We keep your data while your account is open. When you delete your account, your content, uploads and connected-account tokens are deleted immediately; billing records may be retained where the law requires.
Your rights
You can access and export your data (Account & security → Export), correct it in the app, and delete your account at any time. You may also object to processing or complain to your data protection authority. To exercise any right, contact support@mysociorep.com.
Security
Passwords are hashed with bcrypt, tokens are encrypted, sessions use secure HTTP-only cookies, and uploaded documents are never publicly accessible.
Contact
Privacy questions: support@mysociorep.com.