Privacy Policy

1. Who is responsible

Social Growth LLC operates sogrow and is responsible for the account and service information described in this Privacy Policy. This notice describes the service’s current data practices.

2. Information handled by the service

• Account information: email address and authentication information used for sign-up, sign-in and password recovery through Supabase Authentication.
• Workspace information: workspace names, brand descriptions, audiences, language and style preferences, logos, colors, source URLs, content drafts and planning settings that you save.
• Technical information: requests sent to the service include network and browser information. Hosting and authentication providers may process logs needed to operate, secure and troubleshoot the service.

3. Why information is processed

Information is used to authenticate users, store and retrieve their workspaces, display their content, import website brand details and maintain service security. Where applicable, we process information necessary to provide the services you request to perform our contract with you, and process proportionate security information for our legitimate interest in protecting the service and its users. If another activity requires consent under applicable law, we will request it before that activity begins.

4. Website brand import

When you submit a website URL for import, the server requests that public page and may request a linked logo. The destination website receives the server’s request and network information. Imported details enter your editable branding draft; you decide whether to save them. Avoid URLs containing credentials, private tokens or confidential query parameters.

5. Service providers

The service uses Vercel for website and server hosting and Supabase for authentication, workspace data and private logo storage. These providers process information needed to supply those services. Processing locations depend on the configured services and provider infrastructure and may be outside your country. This policy does not represent that all data is stored in any particular jurisdiction.

6. Social platform data

When you connect X, we receive your account identifier, display name, handle and authorization tokens. Tokens are encrypted before storage and are used to maintain your connection and send text posts you explicitly publish. X receives the text you publish. We store a publishing request identifier to prevent duplicate submissions. You can disconnect X in My channels; this deletes the saved connection and credentials from active storage. You can also revoke access in X settings. We also use your X authorization to look up profile pictures for X sources you add. For other social sources, we request publicly available profile pages and pictures where accessible. A small copy of each imported picture is stored with the source in your workspace. Other channel previews do not retrieve real tokens or analytics.

7. Browser storage and tracking

The application uses browser local storage to maintain its authentication session. Signing out ends the local session. This landing page does not add advertising pixels or analytics scripts. Hosting security and delivery logs are separate from marketing tracking. We will disclose any future optional tracking and seek consent where required before activation.

8. Retention and deletion

Saved workspace information persists across sessions; signing out does not delete it. Retention depends on whether information remains necessary to provide the service, maintain security, meet applicable legal obligations or resolve disputes. The current application does not offer a self-service account deletion control. Backup and technical log retention can differ from retention of active workspace records; we do not promise immediate removal from every backup.

9. Security

The implementation uses authenticated access, owner-based database access rules and private storage for saved logos. These measures reduce risk but cannot guarantee absolute security. You should protect your email account and avoid uploading information that the service does not need.

10. Your rights

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of your information; restrict or object to processing; withdraw consent where processing relies on consent; and complain to a competent supervisory authority. These rights may be subject to lawful exceptions and identity verification. Social Growth LLC is responsible for responding to applicable requests.

11. Children and policy changes

The service is designed for professional content management and is not directed at children. We will revise this notice as the product and its data practices change and provide notice of material changes where required. The date above identifies the current version.