Privacy Policy
1. Introduction
Social Candy ("we", "us", or "our") is a social media management platform that helps individuals and businesses schedule, publish, and manage content across social media platforms including Instagram, Facebook, X, LinkedIn, YouTube, and Google Business Profile. This Privacy Policy explains how we collect, use, and protect your information when you use our website and application.
2. Information We Collect
We collect the following types of information:
- Account Information: Your name, email address, and password when you register.
- Social Media Tokens: OAuth access tokens from the social media platforms you connect (Instagram, Facebook, X, LinkedIn, YouTube, and Google Business Profile) to enable publishing on your behalf. We store these tokens securely and never store your social media passwords.
- Content Data: Posts, captions, media URLs, and scheduling information you create within the platform.
- Usage Data: How you interact with our platform (pages visited, features used) to improve the service.
3. Waitlist
When you join the waitlist on our website, we collect:
- Your email address.
- The option you choose to describe yourself: a solo creator, a small team or an agency.
- How you found us, when available: the campaign tags in the link you followed (such as "utm_source") and the address of the page that referred you.
- Limited technical information: a one-way hashed version of your IP address (we never store the address itself) and your browser's user agent.
Why we collect it
- To invite you to early access and send you updates about it.
- To understand who is interested, so we can plan our launch.
- To protect the signup form from spam and abuse.
We collect this information because you asked to join the waitlist. You can change your mind at any time.
How we use it
We only email you about early access to Social Candy. We do not sell or rent waitlist information, and we do not use it for advertising.
Who can see it
Only our team, and service providers that host our systems or send emails for us. They may use it only to provide those services to us.
How long we keep it
Until 12 months after Social Candy launches publicly, or until you ask us to delete it, whichever comes first. If you create an account, the information you give us as a customer is covered by the rest of this policy.
Your choices
- Every email we send includes a link to stop receiving them.
- You can ask us to show, correct or delete your waitlist information by emailing [email protected]. We will respond within 30 days.
4. How We Use Your Information
We use your information to:
- Publish and schedule posts to your connected social media accounts on your behalf.
- Provide analytics and insights about your content performance.
- Send account-related notifications and updates.
- Improve and maintain the platform.
We never sell your personal information to third parties.
5. Instagram and Facebook Data
Social Candy connects to Instagram and Facebook through Meta's official APIs using OAuth 2.0. By connecting your accounts, you authorize us to:
- Read your basic profile information (username, account type).
- Publish content (photos, videos, captions) to your Instagram Business or Creator account.
- Access insights and analytics for your published content.
- Manage comments on your posts.
You can revoke this access at any time through your Instagram or Facebook settings under "Apps and Websites."
6. Data Retention
We retain your account data for as long as your account is active. OAuth tokens are stored securely and are refreshed as needed. You may delete your account and all associated data at any time by contacting us or through the Settings page.
7. Data Security
We implement industry-standard security measures including encrypted storage of access tokens, HTTPS for all data transmission, and restricted access to your data. However, no method of transmission over the internet is 100% secure.
8. Third-Party Services
Our platform integrates with:
- Meta (Instagram, Facebook) — for social media publishing. Subject to Meta's Privacy Policy.
- X, LinkedIn, YouTube (Google), and Google Business Profile — for publishing to those platforms. Each is subject to its own privacy policy.
- Cloudflare — for hosting and CDN services.
We are not responsible for the privacy practices of these third-party services.
9. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data.
- Withdraw consent for data processing at any time.
- Export your content data.
10. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us at: [email protected]