Who we are
This policy covers the SocialHandoff website at socialhandoff.com and the hosted SocialHandoff service at https://app.socialhandoff.com, both run by SocialHandoff. If you self-host SocialHandoff, your data stays on your own server and this policy does not apply to it. Questions go to support@socialhandoff.com.
What we collect
When you visit the website
We use privacy-friendly analytics that do not set tracking cookies or build profiles. If you join the waitlist, we store your email address.
When you use the hosted service
- Account data: your name, email address, and sign-in details.
- Connected accounts: the OAuth tokens or app passwords for the social accounts you connect. We encrypt these at rest with AES-256-GCM.
- Content: drafts, scheduled posts, brand memory, guardrail settings, and the audit log.
- Agent keys: stored only as SHA-256 hashes.
- Model keys you add for brand-voice rewrites, used only to call the provider you chose.
- Usage and technical logs: IP address, browser, and error logs, kept to run and secure the service.
- Billing data: handled by Lemon Squeezy, our merchant of record. We do not see or store your full card number.
How we use it
We use your data to run the service: to show drafts in your inbox, publish the posts you approve, run your guardrails, send the webhooks you configure, and keep your account secure. We email you about your account, billing, and important changes. We do not sell your data, and we do not use your content to train AI models.
Who we share it with
- Social networks you connect, when you publish or fetch metrics.
- AI model providers you choose, when you ask for a rewrite with your own key.
- Service providers that host our infrastructure, send email, and process payments, under contracts that limit their use of your data.
- Authorities, only when the law requires it.
How long we keep it
We keep your data while your account is open. After you close your account we delete your content and connected-account tokens within 30 days, except where we must keep billing records for tax law.
Your rights
You can access, correct, export, or delete your data. Depending on where you live, you may also object to or restrict certain processing. Email support@socialhandoff.com and we will respond within 30 days.
Security
We encrypt tokens at rest, hash API keys, and record every action in a hash-chained audit log. Read the security page for details.
Changes
If we change this policy in a material way, we will email account holders before the change takes effect. The date at the top shows the latest version.