Privacy Policy

Social Plane (“Social Plane”, “we”, “us”) operates the scheduling service at social-plane.com. For questions about this policy or your data, contact us at support@social-plane.com.

We collect the following categories of information:

• Account information. Your name, email address, and authentication credentials. Passwords are stored as salted hashes; we never store them in plain text.
• Connected social accounts. When you connect a Facebook Page or Instagram professional account, we receive account identifiers, usernames, display names, profile images, the Pages you administer, and the Instagram accounts linked to those Pages.
• Access tokens. OAuth access tokens issued by Meta that let us publish on your behalf. Tokens are encrypted at rest and are never sent to your browser.
• Content you create. Posts, captions, hashtags, tag sets, schedules, and media you upload, together with the accounts you select as destinations.
• Usage and technical data. Server logs (such as IP address, browser type, timestamps, and errors) needed to operate, secure, and debug the service.
• Cookies and local storage. A session cookie keeps you signed in, a short-lived cookie protects the account-connection flow, and local storage remembers your theme preference.

We collect information directly from you when you create an account, compose content, upload media, or connect an account. When you connect a Facebook Page or Instagram account, Meta provides us the account information and access tokens described above, subject to the permissions you grant. We also generate technical logs automatically as you use the service.

• Create and secure your account and keep you signed in.
• Connect your Facebook and Instagram accounts and display your destinations.
• Publish your content to the accounts and times you choose, including retrying scheduled deliveries.
• Store and serve the media you attach to posts.
• Provide support, diagnose errors, and improve reliability.
• Detect abuse, enforce our terms, and comply with legal obligations.

We do not sell your personal information, and we do not use third-party advertising or analytics trackers.

Where data protection law requires a legal basis, we rely on: performance of our contract with you (providing the service); our legitimate interests (security, reliability, and improving the service); your consent (connecting third-party accounts and granting permissions); and compliance with legal obligations.

We share information only as needed to run the service:

• Meta platforms. When you publish, we send your content, media URLs, and captions to the Facebook Graph API or Instagram Platform API using your token.
• Infrastructure providers. Hosting, database, and object-storage providers that process data on our behalf under appropriate safeguards.
• Legal and safety. Where required by law or necessary to protect rights, safety, and the integrity of the service.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

Social Plane uses Facebook Login for Business and the Instagram Platform APIs. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. We use Meta data solely to provide the scheduling and publishing features you request. We do not sell it, use it for advertising, or share it with third parties except as described in this policy.

We keep your account information and content while your account is active. Connected-account tokens are deleted when you disconnect the account or delete your workspace. Server logs are kept for a limited period for security and debugging. When you delete your account, we remove or anonymise your personal information, except where we must retain it to comply with the law.

We protect data in transit with HTTPS and encrypt OAuth tokens at rest using AES-256-GCM. Access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your information and to notify you where required if a breach affects you.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Update your account details in the app.
• Disconnect a social account from the Accounts screen, which deletes its stored tokens.
• Email support@social-plane.com to request access, export, correction, or deletion.

You can also remove Social Plane from your Facebook settings under Settings & privacy → Settings → Apps and websites. Meta notifies us when you do, and we delete the associated connection and tokens.

To delete data associated with your connected Meta account, disconnect the account in Social Plane or remove the app in your Facebook settings. You may also request deletion by emailing support@social-plane.com. Our data deletion callback is available at https://social-plane.com/api/meta/data-deletion.

We use strictly necessary cookies to authenticate your session and to protect the OAuth connection flow. We also use local storage for your theme preference. We do not use advertising or cross-site tracking cookies. You can clear cookies in your browser, but you will be signed out.

Social Plane is not directed to children. You must be at least 16 years old (or the age of digital consent in your jurisdiction) to use the service. We do not knowingly collect personal information from children.

We may process and store information in countries other than yours. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses.

We may update this policy from time to time. If we make material changes, we will post the updated policy here and revise the “last updated” date. Continued use of the service after an update means you accept the revised policy.

Questions or requests about privacy can be sent to support@social-plane.com.