Privacy Policy
Effective November 1, 2026 · Last updated November 1, 2026 · Version 1.4.0
1. Information We Collect
We collect information you provide directly, such as your name, email address, and social media account credentials when you connect accounts. We also collect usage data, including posts you schedule, analytics you view, and features you use. When you use the Inbox, we receive and store the direct messages, comments, and mentions that people send to your connected Facebook Pages, Instagram accounts, Threads accounts and WhatsApp Business numbers, including the sender's name and platform user id (for WhatsApp, their phone number) as the platform provides them, and the photos, videos, voice messages and documents people send to a connected WhatsApp Business number, which we store so you can see them.
2. How We Use Your Information
We use your information to provide, maintain, and improve our services; to authenticate you and manage your account; to publish content to your connected social media accounts on your behalf; to show the messages, comments, and mentions your connected accounts receive in the Inbox and send your replies; if you turn on AI replies for an account, to answer its messages and comments automatically on your behalf using the knowledge you provide; and to send you service-related communications.
3. Data Sharing
We do not sell your personal data. We share data only with third-party platforms (e.g. Facebook, Twitter/X, Instagram, TikTok, WhatsApp) as required to deliver the service, and with service providers acting on our behalf under confidentiality obligations. When AI replies are on for an account, the text of each message or comment it receives and the knowledge you provide are sent to our AI providers, who process them only to generate the reply and do not use them to train their models.
5. Data Retention
We retain your account data for as long as your account is active. Scheduled posts and analytics are retained for 12 months. Inbox messages, comments, and mentions, with your replies to them, are deleted automatically 90 days after the last message in their conversation or comment thread, or as soon as you disconnect the account that received them; files sent to a WhatsApp Business number are deleted with their conversation. You may request deletion of your account and associated data at any time.
6. Deleting Your Data
Disconnecting a social account in Socimatic.ai immediately deletes its access tokens and the Inbox messages, comments, mentions and files it received. If you remove Socimatic.ai from your Facebook settings (Settings & privacy > Settings > Business integrations) and request deletion of your data there, we automatically disconnect your Facebook and Instagram accounts and delete the same data. To delete your whole Socimatic.ai account and all associated data, choose Delete account in Settings on socimatic.ai, or in the More tab of the Socimatic app, and confirm with your password. Any paid subscription ends at once and you are signed out everywhere; 30 days later we delete the account, its client logins, posts, connected accounts, folders, videos, knowledge bases, reports and files for good. Signing in before then keeps the account. We keep only what the law requires, such as billing records held by our payment provider. If you can't sign in, email privacy@socimatic.ai from the address you signed up with and we'll delete it for you. Details are at socimatic.ai/delete-account.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. Contact us at privacy@socimatic.ai to exercise these rights.
9. Security
We use industry-standard security measures including HTTPS, encrypted token storage, and rate limiting. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Contact
For privacy-related questions, contact us at privacy@socimatic.ai.
4. Social Media Tokens
OAuth access tokens for connected social accounts are encrypted at rest using AES-256 (Fernet). We access these tokens solely to publish content, fetch analytics, and read and reply to Inbox messages and comments on your behalf. You may revoke access at any time by disconnecting an account.