Privacy Policy - SocialFly

1. Introduction

SocialFly, operated by DropFly Inc. ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform at socialfly.io ("the Service").

2. Information We Collect

Information You Provide

Account information (name, email address, password)
Profile information and brand preferences
Content you create, upload, or publish through the Service
Social media account credentials and authorization tokens
Payment information (processed securely by Stripe)

Information Collected Automatically

Usage data (features used, actions taken within the Service)
Device information (browser type, operating system)
Log data (IP address, access times, pages viewed)

Information from Third-Party Platforms

When you connect social media accounts (Instagram, Facebook, TikTok, LinkedIn), we receive authorization tokens and basic profile information necessary to publish content on your behalf. We access only the data and permissions you explicitly authorize.

3. How We Use Your Information

To provide and maintain the Service
To publish and schedule content to your connected social media accounts
To generate AI-powered content suggestions and images
To provide analytics and insights about your social media performance
To process payments and manage subscriptions
To communicate with you about the Service
To improve and develop new features

4. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

Social media platforms: Content you choose to publish is sent to the platforms you authorize (Instagram, Facebook, TikTok, LinkedIn)
AI service providers: Content prompts are processed by AI services (Anthropic, FAL.ai) to generate text and images. These providers process data per their own privacy policies.
Infrastructure providers: We use Supabase (database), Vercel (hosting), and Stripe (payments) to operate the Service
Legal requirements: When required by law or to protect our rights

5. Data Storage and Security

Your data is stored securely using Supabase with row-level security policies. Social media tokens are encrypted at rest. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where retention is required by law. Published content on third-party platforms is subject to those platforms' retention policies.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Disconnect social media accounts at any time
Export your data in a portable format
Opt out of non-essential communications

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@socialfly.io.

DropFly Inc.
Email: privacy@socialfly.io