Privacy Policy

1. Introduction

My Social Agent ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We may collect the following types of information:

• Account Information: Email address, name, and password when you create an account
• Profile Information: Business name, industry, and preferences you provide
• Content: Images, text, and other content you upload or create using our service
• Social Media Data: Information from connected social media accounts (with your authorization) — see section 5 for exactly what we read and why
• Usage Data: How you interact with our service, including features used and actions taken
• Device Information: Browser type, IP address, and device identifiers

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Generate content, and publish it to your own connected accounts when you ask us to
• Communicate with you about your account and our services
• Analyze usage patterns to improve user experience
• Protect against fraud and unauthorized access
• Comply with legal obligations

4. Information Sharing

We may share your information with:

• Social Media Platforms: To publish content to your connected accounts, at your request
• Service Providers: Third parties that help us operate our service (e.g., cloud hosting, AI providers)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

5. Connected Social Media Accounts

You can connect social media accounts you own — such as Instagram, TikTok, or X — so that My Social Agent can publish content to them on your behalf. Connecting an account is entirely optional, and the service works without it. This section explains exactly what that involves.

What we receive

When you connect an account, the platform asks you to approve a specific, limited set of permissions. We receive only what those permissions cover:

• Instagram: your account's ID, username, and account type (Business or Creator), plus permission to publish content you have created to that account. We use the Instagram API with Instagram Login and request only the instagram_business_basic and instagram_business_content_publish permissions.
• TikTok: your basic profile information (open ID, display name, avatar) and permission to upload and publish videos to your account.
• X: your basic profile information and permission to post content to your account.
• Access credentials: the access and refresh tokens the platform issues so that we can act on your behalf until you disconnect.

We do not read your direct messages, your followers' personal information, or the content of other people's accounts.

How we use it

• Only to publish your own content, to your own account. We never publish to any account other than the one you connected, and we never publish on behalf of one user to another user's account.
• Only when you ask. Content is published when you explicitly choose to publish it, or at a time you explicitly scheduled. We do not post automatically or without your instruction.
• To show you which account is linked. We display the connected username so you can confirm you are publishing to the right place, and we attribute published content to it.

How we protect and share it

Access and refresh tokens are encrypted at rest using industry-standard symmetric encryption, with the encryption key held in a managed secrets store, separate from the database. Tokens are decrypted only in memory, only for the moment needed to carry out an action you requested.

We do not sell platform data, use it for advertising or profiling, or share it with any third party other than the platform it came from. Platform data is never used to train machine learning models.

How to disconnect

You can disconnect a social media account at any time from your account settings in My Social Agent. When you disconnect, we deactivate the connection and erase the stored access credentials for it.

You can also revoke our access directly from the platform — for example, on Instagram via Settings → Apps and websites → Active → Remove “My Social Agent”. Revoking access from the platform immediately stops us being able to act on your behalf. For full deletion of your account and data, see our Data Deletion page.

Content already published to your social media account lives on that platform and is governed by that platform's own terms. Disconnecting from My Social Agent does not remove posts that are already live — you can delete those from the platform itself.

6. Data Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services.

You may request deletion of your data at any time. When you do, we delete your account and associated data — including any connected social media credentials — within 30 days, except for records we are required to keep for legal, accounting, and fraud-prevention reasons. Full instructions and the complete list of what is deleted and what is retained are on our Data Deletion page.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent at any time

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control cookies through your browser settings.

10. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these websites.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@mysocialagent.ai