Privacy Policy | Sosialin

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Definitions

Account: A unique account created for You to access Our Service or parts of Our Service.
Company: Refers to Sosialin ("We", "Us", or "Our" in this Agreement), accessible from https://sosialin.web.id.
Country: Indonesia.
Device: Any device that can access the Service, such as a computer, mobile phone, or digital tablet.
Personal Data: Any information that relates to an identified or identifiable individual (name, email address, social account username, and OAuth identifiers).
Service: Refers to the Sosialin web application and social media management platform.
Service Provider: Any natural or legal person who processes data on behalf of the Company (such as cloud hosting, object storage, and database infrastructure).
Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., duration of page visits).
You: The individual accessing or using the Service, or the company or organization on behalf of which such individual is accessing or using the Service.

2. Collecting and Using Your Personal Information

Types of Data Collected

A. Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You, including:

Email address
First name and last name
Workspace and organization profile information

B. Social Media Integration & Platform Data (Meta, TikTok, etc.)

When You link Your third-party social media accounts (such as Instagram Business/Creator, Facebook Pages, Threads, and TikTok) to Sosialin via official OAuth authorization, We receive and process certain platform data strictly required for the platform functionality:

External Account ID, Username, Display Name, and Profile Picture / Avatar URL.
OAuth Access Tokens and Refresh Tokens (always stored encrypted at rest using AES-256-GCM).
Content metadata: scheduled captions, uploaded media (images/videos), publishing timestamps, and publication status.
Public engagement metrics and insights: post impressions, reach, views, likes, comments, and shares to generate performance reports inside Your workspace.

Notice on Third-Party Data: Sosialin uses official platform APIs (including the Meta Graph API and Threads API). We strictly adhere to the Meta Platform Terms, Developer Policies, and Commercial Terms. We do NOT use social platform data for advertising, automated profiling, or unauthorized surveillance.

C. Usage Data & Tracking Technologies

Usage Data is collected automatically when using the Service (IP address, browser type, device information, access timestamps, and diagnostic logs). We use essential session cookies strictly to authenticate users, maintain active sessions, and safeguard account security. We do not use third-party advertising cookies or cross-site tracking pixels.

3. Use of Your Personal Data

We use the collected information for the following specific purposes:

To provide and maintain the Service: Enabling You to connect social accounts, draft posts, preview smartphone layouts, schedule content, and publish posts to authorized social channels.
To manage Your Account & Workspaces: Managing user registrations, role-based workspace access (Owner, Admin, Creator, Viewer), and team collaboration.
To deliver Analytics: Fetching and computing engagement rate (ER), impression charts, and audience growth reports from connected social accounts.
To contact You: Sending security alerts, critical authentication notifications, operational announcements, and responding to customer support inquiries.
To enforce security and compliance: Preventing fraudulent activities, unauthorized token access, or malicious API usage.

4. Disclosure and Sharing of Your Data

We value Your privacy. We do not sell, rent, or trade Your personal information or social media data. We only share information under strict operational circumstances:

With Service Providers: Trusted cloud infrastructure providers (e.g., Cloudflare Workers, secure cloud databases, and object storage providers) that host our software under strict confidentiality agreements.
Direct Platform API Communication: Sending Your scheduled media and caption payloads to Meta Graph API, Threads API, or TikTok API upon Your scheduled execution time.
For Legal Compliance: If required by law, court order, or governmental authorities, or to protect the safety, rights, or integrity of Sosialin and its users.

5. Data Retention & Security

We retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

Social Access Tokens: Retained only while the social account remains actively linked to Your workspace. If You disconnect an account or delete a workspace, OAuth tokens are immediately purged.
Security Measures: Sensitive tokens and secrets are encrypted using industry-standard AES-256-GCM encryption. All communication between Your browser, our servers, and third-party APIs is encrypted in transit via TLS 1.3 / HTTPS.

6. User Data Deletion Instructions (Meta & Third-Party Platforms)

In compliance with Meta Platform Policies and international data protection standards, Sosialin provides clear instructions and mechanisms for users to request the complete deletion of their personal data and social account information:

Option A: Revoke Access via Platform Settings (Instant)

You can disconnect Sosialin at any time directly through Your Facebook, Instagram, or Threads account:

Go to Your Facebook / Instagram Profile > Settings & Privacy.
Navigate to Apps and Websites (or Business Integrations).
Find Sosialin in the list and click Remove / Disconnect.
Meta will automatically notify our system to invalidate and purge associated access tokens.

Option B: Disconnect Directly from Sosialin Workspace

Navigate to Your Sosialin Workspace > Settings > Social Accounts. Click the "Putus Tautan (Disconnect)" button on the desired account. This immediately wipes all stored tokens, cached metrics, and scheduled drafts associated with that account.

Option C: Full Account & Data Deletion Request via Email

If You wish to delete Your entire Sosialin account, workspace data, and all historical records from our database, send an email request to:

info@sosialin.web.id

Please send the request from Your registered email address. We will verify Your identity and permanently purge Your data from our production databases within 30 days.

7. Children's Privacy

Our Service is not directed to anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and aware that Your child has provided Us with Personal Data, please contact Us.

8. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If You have any questions, concerns, or requests regarding this Privacy Policy or Your data rights, You can contact our Data Protection team at:

info@sosialin.web.id

Sosialin • Jakarta, Indonesia • https://sosialin.web.id