Privacy Policy
Last updated: October 15, 2026
This policy explains how sosmedyon (sosmedyon.com and app.sosmedyon.com) collects, uses and protects your personal data. By using our services you accept this policy.
Data we collect
- Account info: name, email, password hash, organization name
- Social account connections: access tokens (encrypted at rest), account ID, channel name
- Created content: text you write or generate with AI, uploaded media, scheduling times
- Usage data: browser, IP, visited pages, error logs
- Payment info: handled by our payment provider (Stripe/Iyzico); card details are never stored on our servers
How we use data
- Running the service (scheduling, publishing, analytics)
- Account security and abuse detection
- Product improvement: anonymized aggregate usage statistics
- Service communication: announcements, invoices, support replies
We do not sell your data. Third-party sharing is limited to our service providers (hosting, payment, email) and legal obligations.
Meta platforms (Facebook, Instagram, Threads)
When you connect your Facebook Pages, Instagram business/creator accounts, or Threads account, we access the following data through Meta's official APIs, strictly within the permissions you explicitly grant and only for your own accounts:
- The list of Facebook Pages you manage and their connected Instagram accounts, plus basic profile/channel information
- Publishing content on your behalf (posts, images, Reels) and delivering scheduled posts
- Comments and messages on your posts, to power the unified inbox
- Page/account insights (analytics) for performance reports
We use this data solely to operate the service at your request. We never sell data obtained from Meta platforms, never use it for advertising, and never share it with other users. Access tokens are stored encrypted and are deleted when you disconnect an account or delete your account. We process your data in compliance with Meta's Platform Terms and Developer Policies. For data deletion requests, see our data deletion page; when you remove the app from your Facebook/Instagram account, Meta automatically sends us a data deletion callback and your connected tokens are erased.
Retention
Account data is retained while your account is active. After deletion, data is permanently erased within 30 days; legally required records (invoices) are kept for the statutory period.
Cookies
We use strictly necessary cookies for session management. First-party analytics cookies may be used for anonymous product telemetry. We do not use third-party advertising cookies.
GDPR / KVKK rights
- Access your data
- Correct inaccurate information
- Delete your data (right to be forgotten)
- Stop or restrict processing
- Data portability
To exercise these rights contact privacy@sosmedyon.com.
Security
Database encryption at rest, password hashing, encrypted platform tokens, regular backups, role-based access.