Privacy
What SocialMind stores, why it stores it, and how long it keeps it.
This describes how the software behaves today. It has not been reviewed by a lawyer and is not a binding policy yet. Have it reviewed before you take a paying customer.
What we store
Account details: your name, email address, and a bcrypt hash of your password. We never store the password itself.
Workspace content: the posts you draft, the media you upload, comments left during review, and the record of who approved what.
Connected accounts: an encrypted access token for each social account or drive you connect. Tokens are encrypted at rest and are excluded from every data export.
Activity: an audit log of significant actions, including any time platform support opens your workspace.
What we do not store
Card details. Payments are handled by our payment provider; we hold a subscription reference, not a card number.
The contents of your connected drives. We store only what you import.
Getting your data out, or deleting it
A workspace admin can export everything held for that workspace as JSON, and anyone can export their own record.
Deleting your account redacts your identity and keeps the shape of your work, so a colleague's approval history does not develop holes. Deleting a workspace removes its data entirely.
Support access
Platform support can open a workspace read-only, for thirty minutes, and only with a written reason. Every grant is written to that workspace's own audit log, so you can see it.