Draft — not yet in force. GDPR Art. 13 requires this policy to name the data controller and give its address. Those details are still placeholders. Complete LEGAL_ENTITY in src/lib/legal.ts and have this reviewed by a lawyer before relying on it.
The data controller for the personal data described in this policy is:
Social Scheduler Platform
[TO BE COMPLETED]
privacy@socialschedulerplatform.com
Social Scheduler Platform ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media content generation platform at socialschedulerplatform.com (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
When you sign in using Google OAuth, we receive and store:
We only request the minimum permissions needed to authenticate you. We do NOT access your Google Drive, Gmail, Contacts, Calendar, or any other Google services.
We use your information solely to provide and improve our Service:
We do NOT use your content to train AI models, and we do not sell it. Your content remains yours.
To be precise about the limit of that promise: generating content requires sending your prompt to a third-party AI provider, and we cannot bind them to our own commitments. Their handling is governed by their terms, linked from our Subprocessors page. As a rule, do not put anything into a prompt that you would not be comfortable sending to a third party.
If you are in the UK or the EEA, we rely on the following bases under Art. 6(1) UK GDPR / GDPR:
We do NOT sell, rent, or trade your personal information. We share data only in these limited circumstances:
We use third-party services to operate the platform. Each one receives only what it needs:
Our database runs on infrastructure we operate ourselves, as does our error tracking — session cookies and request headers are stripped from error reports before they are stored.
The Subprocessors page lists each provider, exactly what data it receives, and where it operates. These providers process data only as needed to deliver their service.
We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.
In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
We retain your data only as long as necessary:
When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law.
You have the following rights regarding your personal data:
To exercise these rights, contact us at privacy@socialschedulerplatform.com or use the self-service options in your account settings. We respond within 30 days, and we will not charge you or degrade your service for exercising these rights.
If you are in the UK or the EEA and think we have handled your data improperly, you have the right to complain to your data protection supervisory authority — in the UK, the Information Commissioner's Office. We would appreciate the chance to put things right first.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not knowingly process the personal information of anyone under 16. You may request access to or deletion of your information using the contact address above.
We implement industry-standard security measures to protect your data:
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
We use cookies and similar technologies for:
You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.
Our Cookie Policy lists every cookie and local-storage key by name, what sets it, and how long it lasts.
Social Scheduler Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
Your data may be processed in countries other than your own, including the United States. These countries may have different data protection laws. By using our Service, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place to protect your information.
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will provide notice via email or through the Service. Continued use after changes constitutes acceptance.
If you have questions about this Privacy Policy or our data practices, please contact us:
We will respond to privacy inquiries within 30 days.
Social Scheduler Platform's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we limit our use of Google user data to providing authentication services. We do not use Google data for advertising, do not sell Google data, and do not use Google data for any purpose other than providing and improving user-facing features of our Service.
By using Social Scheduler Platform, you acknowledge that you have read and understand this Privacy Policy.