Socialit Privacy Policy

This Privacy Policy explains what we collect, why, and what choices you have. We try to collect as little as we can to run Socialit well.

1. Who is responsible for your data

Socialit is operated by FunFirst s.r.o., which acts as the data controller for the personal data described in this policy.

• Company: FunFirst s.r.o.
• Registered address: Na louzi 258/13, Praha 10, 101 00, Czechia
• Company registration number (CRN): 04011635

2. What we collect

• Account data: your email and login details.
• Payment data: handled by our payment processor. We store a record of your purchase, not your full card number.
• Connected accounts: access tokens for the social networks you connect, so we can post on your behalf.
• Content: the posts, images, and videos you create and schedule.
• Usage data: basic logs and analytics to keep the service working and improve it.

3. How we use it

• To publish your posts to the networks you choose.
• To process payments and manage your billing and seats.
• To provide support and keep the service secure.
• To send you essential account and service messages.

4. Sharing

We do not sell your data. We share it only with service providers who help us run Socialit (for example, hosting, payment processing, and the social networks you post to), and only as needed.

5. Social network access

When you connect a network, we store the access token that network gives us. We use it only to publish what you ask us to. You can disconnect a network at any time, which revokes our access.

6. Google user data

When you connect a Google account (for example, YouTube), Socialit requests only the scopes needed to publish and manage the content you ask us to. Socialit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• What we access: the Google OAuth access and refresh tokens for the account you connect, and the account/channel identifiers needed to publish on your behalf.
• How we use it: only to perform the actions you request (such as uploading or scheduling posts). We do not use Google user data for advertising, and we do not sell it or transfer it to third parties except as needed to provide the service, comply with law, or as part of a merger or acquisition.
• No human access: we do not allow humans to read your Google user data unless you give explicit consent for us to do so (for example, for support you request), it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.

7. Data protection and security

We use technical and organizational measures to protect your data, including data we receive from Google APIs:

• Encryption in transit: all data is transmitted over encrypted connections (TLS/HTTPS).
• Encryption at rest: sensitive data, including OAuth access and refresh tokens, is encrypted at rest.
• Access controls: access to production systems and stored credentials is restricted to authorized personnel on a need-to-know basis, protected by authentication and role-based access controls.
• Ongoing safeguards: we apply secure development practices, logging, and monitoring to detect and respond to potential issues.

No system is perfectly secure, but we work to keep your information safe.

8. Data retention and deletion

We keep your data only as long as needed to provide Socialit, and we retain Google user data only while it is required for the features you use.

• While your account is active: we retain your account data and connected-account tokens so we can keep publishing on your behalf.
• When you disconnect a Google account: we stop using the associated tokens and delete them from our systems, and you can also revoke Socialit's access at any time from your Google Account permissions page.
• When you close your account or request deletion: we delete or anonymize your personal data, including any Google user data, within 30 days, except where we must retain limited records for legal, accounting, or security reasons.

To request deletion of your data at any time, email privacy@socialit.com.

9. Your rights

Depending on where you live, you can ask to access, correct, export, or delete your personal data. Email us and we will help.

10. Children

Socialit is not for anyone under 18. We do not knowingly collect data from children.

11. Changes

We may update this policy. If we make a material change, we will give reasonable notice.

12. Contact

Privacy questions? Email privacy@socialit.com, or write to FunFirst s.r.o., Na louzi 258/13, Praha 10, 101 00, Czechia.