Privacy Policy

1. Scope

This Privacy Policy explains how SocialOps Hub processes information when an authorized user uses the desktop application, server components, and integrations with supported third-party platforms.

2. Information we process

Account and application data

We process the SocialOps Hub username, display name, role, password hash, account configuration, groups, tags, notes, proxy configuration, and preferences required to operate the workspace.

Connected-platform data

When you authorize a supported platform, we may receive identifiers such as an open ID, granted permission scopes, access and refresh tokens, profile information, account statistics, and available video or channel metadata. The exact data depends on the permissions you approve.

Content and workflow data

We process media files you upload, captions, scheduling information, product references, publishing tasks, task outcomes, monitoring configuration, and related operational records.

Technical and security data

We process service logs, audit records, agent status, device or node names provided to the local agent, timestamps, and error details needed to secure, troubleshoot, and maintain the Service.

3. How we use information

• to authenticate users and provide the requested workspace features;
• to connect authorized accounts and refresh authorization when permitted;
• to display profile, performance, content, and task information;
• to coordinate publishing or browser tasks initiated by authorized users;
• to detect errors, protect the Service, and maintain audit history; and
• to comply with law and connected-platform requirements.

4. OAuth and passwords

Platform sign-in takes place on the connected platform's authorization page. SocialOps Hub does not request or store your TikTok password through the OAuth connection flow. The Service receives an authorization result and the permissions you approve.

5. Storage and security

Application data is stored on infrastructure selected by the Service operator. OAuth access and refresh tokens are encrypted before storage. Administrative passwords are stored as one-way password hashes. Reasonable technical and organizational safeguards are used, but no system can guarantee absolute security.

6. Sharing

Information may be transmitted to connected platforms when needed to perform an action you request. Infrastructure and hosting providers may process limited information on behalf of the operator. We do not sell personal information. We may disclose information when legally required or necessary to protect users, the Service, or others.

7. Retention

Information is retained while needed to provide the Service, maintain security and audit records, comply with legal obligations, and resolve disputes. Authorization tokens are retained until the connection is revoked, removed, expires without renewal, or is deleted by the operator. Retention periods may vary by data type and deployment configuration.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information. You can revoke a connected platform's authorization in that platform's settings. Requests to remove workspace data can be submitted to the Service operator. Identity or authority may be verified before fulfilling a request.

9. International processing

The Service and connected platforms may process information in countries other than the one where you live. Where required, appropriate safeguards will be used for cross-border processing.

10. Children

The Service is intended for business and creator operations and is not directed to children. Do not use the Service if you are below the minimum age required by applicable law or the connected platform.

11. Changes and contact

We may update this policy as the Service changes. The effective date above identifies the latest version. Public operator and privacy contact details will be published on this page before production launch.