Privacy Policy

1. Introduction

Socialio Reel Studio ("Socialio," "we," "us") is operated by Komyosys. This Privacy Policy describes how we collect, use, store, and share information when you use our application at socialio.komyosys.ai and any associated services.

2. Information We Collect

• Account data: email address, name, and profile photo when you sign up via Supabase Auth.
• Instagram / Facebook data: when you connect your Instagram Professional or Facebook Page account, we receive your platform user ID, username, profile picture URL, and an access token. We use these solely to publish content on your behalf.
• Content you create: reel scripts, calendar entries, brand voice settings, and other creative content you produce within Socialio.
• Usage data: page views, feature usage, and error logs to improve the product. We do not use tracking pixels or third-party ad networks.

3. How We Use Your Information

• To authenticate you and provide access to your workspace.
• To publish reels and posts to Instagram / Facebook on your behalf when you schedule or initiate a publish action.
• To generate AI-powered content suggestions using Google Gemini (no personal data is sent to the AI model; only your creative prompts).
• To improve and maintain the service.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Meta Platforms (Instagram / Facebook): to publish content on your connected accounts via the Graph API.
• Supabase: our database and authentication provider, hosted in the cloud.
• Vercel: our hosting provider for the web application.
• Google (Gemini API): for AI content generation. Only your creative prompts are sent; personal data is not included.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (reels, calendar entries, connected accounts) is permanently deleted within 30 days. You can request immediate data deletion at any time through the app or by contacting us.

6. Data Deletion

You can request deletion of your data at any time by visiting our data deletion page or by emailing [email protected]. We will process your request within 30 days and confirm deletion via email.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. Contact us at [email protected] to exercise these rights.

8. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest via Supabase), row-level security, and bearer-token authentication. OAuth tokens for Instagram are stored encrypted and are never exposed to client-side code.

9. Contact

For privacy questions, contact us at [email protected].