Privacy Policy

1. Information we collect

• Account information: name, email address, and password (stored as a salted hash, never in plain text).
• Brand/workspace information: your website URL and any brand details you provide or that our AI analysis derives from your public website.
• Connected account data: when you connect Instagram, LinkedIn, YouTube, or TikTok, we store your account handle and the access token (and refresh token, where the platform issues one) for the permissions you granted, so the Service can publish on your behalf and show your connection status.
• Content and usage data: clips you save, edit, schedule, or publish, and basic usage/analytics data about how you use the Service.

2. How we use this information

To operate the Service: authenticate you, generate brand-tailored content suggestions, publish content to platforms you've connected, show your analytics, and process billing for paid plans. We do not sell your personal information.

3. Third-party services we use

Certain features rely on third-party providers, each governed by their own privacy policy:

• Instagram (Meta), LinkedIn, Google (YouTube), and TikTok: for account login and publishing, through each platform's official sign-in. We only ask for the permissions needed to publish and to show the numbers for posts we published.
• Groq: processes brand descriptions to generate content ideas and captions.
• Pexels: supplies royalty-free stock video and photo content shown in the Service.
• Stripe: processes payments for paid plans. Card details go to Stripe directly; we never see or store full card numbers.
• Vercel, Neon, and Resend: host the app, store its database, and deliver email.

4. Google and YouTube user data

If you connect a YouTube channel, we ask Google for two permissions. The first (youtube.upload) lets us upload the videos you choose to publish to your channel. The second (youtube.readonly) lets us read your channel's name, so we can show which channel is connected, and the view and like counts of the videos we posted for you, so we can show them in Analytics.

We use this data only to provide those features. We don't sell it, we don't use it for advertising, and we don't share it with anyone except as needed to run the Service or as the law requires. People on our team read it only with your permission, to investigate abuse or a security problem, or to comply with the law.

Docket Social's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect YouTube from your Accounts page at any time, which deletes the stored token. You can also remove our access from your Google Account permissions.

5. Data storage and security

Data is stored in a hosted Postgres database with access restricted to what the Service needs to operate. Session cookies are signed and httpOnly. Connected-account access tokens are used only to make the API calls you've authorized (publishing, reading basic profile info) and are never shared with other users or third parties beyond the platform that issued them.

6. Data retention and deletion

We keep account and content data for as long as your account is active. Disconnecting a social account from your Accounts page deletes its stored tokens right away. Copies of videos and images we render for publishing are deleted automatically within 24 hours.

To delete your account and all of your data, email grish@docketsocial.com from the address you signed up with. We'll delete it within 30 days and confirm by email.

Instagram: if you remove Docket Social from your Instagram account's connected apps, or ask Instagram to delete your data, we automatically delete the Instagram connection we stored and the post statistics we pulled from Instagram.

7. Your rights

You can access, correct, or delete your personal information by contacting us, or by using the in-app controls (disconnecting accounts, editing your brand profile, deleting content).

8. Cookies

We use a small number of essential, first-party cookies to keep you signed in and remember your active workspace. We don't use third-party advertising or tracking cookies.

9. Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

11. Contact

Questions about this policy or your data? Reach us at grish@docketsocial.com.