Privacy Policy

Last updated: April 13, 2026

Social OS ("the Service") is operated by Teamoon Agency S.r.l. ("we", "us", "our"), with registered office in Italy. This Privacy Policy describes how we collect, use, and protect your personal data when you use the Service.

1. Data We Collect

When you connect a social media account (Instagram, Facebook, TikTok, Pinterest) to Social OS, we collect:

• OAuth tokens — access tokens and refresh tokens issued by the social platform, used exclusively to publish content and retrieve analytics on your behalf.
• Public profile information — username, display name, and profile picture URL as returned by the platform API.
• Content you create — captions, hashtags, media files, and scheduling preferences you enter in Social OS.
• Account information — email address and name used to sign in to Social OS.

2. How We Use Your Data

• To publish content to your connected social media accounts at the times you schedule.
• To display analytics and performance metrics from your social accounts.
• To authenticate you and manage access to client workspaces.

We do not sell, rent, or share your personal data or social media tokens with third parties.

3. Data Storage and Security

All OAuth tokens are encrypted at rest using AES-256-GCM before storage. Data is stored on Supabase (hosted on AWS eu-central-1, Frankfurt) and Vercel infrastructure. We follow industry-standard security practices to protect your data.

4. Third-Party Platform Data

When you connect a TikTok account, we request the following scopes: user.info.basic, video.list, and video.publish. We use these permissions solely to display your profile information and publish video content you explicitly schedule through Social OS. We do not access your TikTok data for any other purpose.

Similar principles apply to Instagram, Facebook, and Pinterest connections. We only request the minimum permissions needed to provide the Service.

5. Data Retention

We retain your data for as long as your account is active. If you disconnect a social account, we delete the associated tokens within 24 hours. If you delete your Social OS account, all your data is permanently removed within 30 days.

6. Your Rights

Under GDPR and applicable Italian law, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent and disconnect your social accounts at any time.
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

7. Contact

For privacy inquiries, contact us at: privacy@teamoon.it