1. Information We Collect

When you use SocialShout, we collect information directly provided by you, as well as data obtained through authorized third-party OAuth 2.0 integrations:

• Account Information: Your name, email address, password hash, workspace name, and billing details when you register for an account.
• Social Media Account Authorization Data: When you connect social accounts (Twitter / X, Facebook, Instagram, LinkedIn, YouTube, TikTok, Pinterest), we receive official OAuth 2.0 access tokens, refresh tokens, platform user IDs, account handles, channel names, and profile avatars.
• User-Generated Content: Post drafts, captions, scheduled media files (images, videos, graphics), hashtags, and editorial approval feedback submitted within your workspaces.
• Engagement & Analytics Metrics: Aggregated statistics such as impressions, reach, clicks, likes, comments, and engagement rates fetched via official social network APIs.

2. How We Use Social Media API Data

We use third-party APIs solely to provide core publishing and analytics features requested by you:

• Publishing & Scheduling: To publish posts, images, and videos to your chosen social profiles at your scheduled times via official endpoints (Meta Graph API, Twitter API v2, LinkedIn Share API, YouTube Data API v3, TikTok Posting API, Pinterest API).
• Multi-Channel Inbox: To display incoming public comments and mentions inside your Unified Inbox so your team can triage and reply efficiently.
• Performance Intelligence: To generate visual reports showing your audience growth and post engagement.

3. Data Encryption and Token Vault Security

Security is fundamental to our architecture:

• All OAuth 2.0 access tokens and refresh tokens are encrypted at rest using military-grade AES-256-CTR encryption inside our isolated database token vault.
• All communications between your browser, our servers, and third-party social APIs are transmitted over encrypted SSL/TLS (HTTPS) channels.
• Database instances are hosted in enterprise-grade server clusters with strict access controls and automated daily backups.

4. Third-Party Platform Terms & Disclosures

By connecting your social media accounts to SocialShout, you acknowledge that your use of each platform is also governed by their respective terms and privacy policies:

• Twitter / X: Governed by X Privacy Policy and Developer Agreement.
• Meta (Facebook & Instagram): Governed by Meta Privacy Policy and Platform Terms.
• LinkedIn: Governed by LinkedIn Privacy Policy and API Terms.
• Google & YouTube: Governed by Google Privacy Policy and YouTube Terms of Service.
• Snapchat: Governed by Snapchat Privacy Policy and Snap Developer Terms.
• Pinterest: Governed by Pinterest Privacy Policy.

5. Data Retention & User Data Deletion Instructions

You have full ownership and control over your data:

• Disconnecting Accounts: You can disconnect any connected social media channel at any time directly from Workspaces > Connected Channels. Disconnecting an account immediately deletes the encrypted OAuth access token and refresh token from our active database.
• Revoking Access in Provider Portals: You can also revoke SocialShout's access directly from your security settings on Google, Meta, Twitter/X, LinkedIn, Snapchat, or Pinterest at any time.
• Complete Account Deletion: If you wish to delete your entire SocialShout user account, workspaces, and all associated post logs and media, you may send a deletion request to support@socialshout.in. All personal records and assets will be purged within 30 days.

6. Cookies and Session Storage

We use essential cookies strictly for maintaining user authentication sessions, CSRF security verification, and workspace state. We do not use intrusive third-party cross-site tracking cookies.

7. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our compliance desk: