Privacy Policy

Last updated: 19 October 2026

SocialNexus is operated by Global Technology Partners ("GTP", "we", "us") [LEGAL ENTITY NAME AND REGISTERED ADDRESS]. This policy explains what we collect, why, who we share it with, and the choices you have.

1. What we collect

• Account data: your email address, a hashed password, your plan, and team members you invite.
• Workspace configuration: brand voice, keywords, target geography, posting schedule and preferences.
• Content: posts and blog articles generated for you, their approval status, and engagement metrics we retrieve from connected platforms.
• Connected account credentials: OAuth and API tokens for LinkedIn, X, Facebook and Instagram. These are stored encrypted with AES-256-GCM.
• Your Anthropic API key (optional, if you use "bring your own key"): stored encrypted with AES-256-GCM and used only to generate content for your workspaces.
• Billing data: handled by Stripe or Razorpay. We receive a customer reference, plan and payment status, not your full card number.
• Usage and security logs: audit logs of key actions (logins, approvals, setting changes), IP address and timestamps.
• Cookies: a session cookie that keeps you signed in. We do not use advertising cookies.

2. How we use it

To provide and secure the service, discover trends and generate content for you, publish to the accounts you connect, process payments, send service emails (verification, password reset, alerts), prevent abuse, and meet legal obligations. We do not sell personal data.

3. Who processes data for us

• Anthropic (Claude): article text and your brand settings are sent to Claude to screen and generate content. If you supply your own key, requests are billed to and governed by your Anthropic account terms.
• Tavily / Serper: receive your discovery keywords and geography to search for articles.
• Stripe and Razorpay: payment processing.
• Supabase: managed PostgreSQL database hosting.
• Fly.io: application hosting.
• Email provider: delivery of service emails.
• LinkedIn, Meta (Facebook/Instagram) and X: receive the content you publish and return metrics, under their own terms and privacy policies.

We may also disclose data if required by law or to protect our rights, and to a successor in a merger or sale.

4. International transfers

Our providers operate in several countries, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

5. Retention and deletion

We keep account and workspace data while your account is active. When you ask us to delete your account we remove your personal data and content within 30 days, except where we must keep records for legal, tax or security reasons (for example billing records and audit logs). Backups are overwritten on their normal cycle.

6. Your rights

Depending on where you live (including under the GDPR, UK GDPR, CCPA/CPRA and India's DPDP Act) you may have the right to access, correct, delete or export your data, object to or restrict certain processing, withdraw consent, and complain to your data protection authority. You can disconnect social accounts and remove your API key at any time in the app. To exercise any right, contact us.

7. Security

We encrypt stored credentials, use HTTPS, restrict access by workspace and role, rate-limit sensitive endpoints and keep audit logs. No system is perfectly secure; tell us promptly if you suspect a problem.

8. Children

SocialNexus is for businesses and is not directed to anyone under 16. We do not knowingly collect data from children.

9. Changes

We may update this policy and will change the date above. For material changes we will notify you by email or in the app.

10. Contact

Questions or requests: hello@globaltechnologypartners.com or our contact form.