1. Who we are
SocialRainbow helps people draft, review, schedule, and publish social posts from AI apps such as ChatGPT and Claude. For privacy questions, data requests, or deletion requests, contact us at [email protected].
2. Information we collect
We collect the information needed to run the service:
- Account information: your email address, workspace identifiers, subscription status, and account settings.
- Connected social account information: account names, usernames, profile or Page identifiers, platform type, permissions granted, token expiration dates, and connection status.
- OAuth credentials: access tokens and refresh tokens from social platforms. We use them only to perform actions you request, such as validating, scheduling, or publishing posts.
- Post content: drafts, captions, media URLs, selected accounts, scheduled times, publishing status, errors, and post history.
- Usage and diagnostic data: logs, request metadata, device/browser information, timestamps, and error reports used to keep the service reliable and secure.
- Billing data: subscription, checkout, tax, and invoice information handled by our payment provider. We do not store your full card number.
3. How we use information
We use your information to provide and improve SocialRainbow, including to authenticate you, connect social accounts, prepare previews, schedule posts, publish approved content, show publishing status, prevent abuse, provide support, process subscriptions, debug issues, and comply with legal obligations.
4. AI apps and prompts
When you use SocialRainbow from ChatGPT, Claude, or another compatible client, the client may send us the content and instructions needed to complete your request. We process that information to return previews, schedule posts, publish posts, or show account status. Your use of those AI apps is also governed by their own terms and privacy policies.
5. Social platform connections
When you connect a social account, the platform asks you to grant specific permissions. SocialRainbow stores the resulting tokens securely and uses them only for the features you request. You can revoke a connection from SocialRainbow or from the social platform’s own app settings. Revoking a connection may prevent scheduled posts from publishing.
6. How we share information
We share information only as needed to operate SocialRainbow:
- Social platforms: we send post content, media, account identifiers, and authentication tokens to the platforms you choose when you ask us to publish or schedule content.
- Service providers: we use vendors for hosting, databases, media storage, authentication, payments, email and support, operational alerting, logging, analytics, and security. They may process data for us only to provide those services and under appropriate restrictions.
- Legal and safety reasons: we may disclose information if required by law, to protect rights and safety, or to investigate abuse.
We do not sell your personal information.
7. Retention and deletion
We keep each category of information only for as long as it is needed for the purposes described in this policy:
- Account and connected-account records: while your SocialRainbow account is active, then deleted from active systems within 30 days after account deletion.
- OAuth access and refresh tokens: while the related social account remains connected. Disconnecting an account immediately prevents new use of its tokens, and the stored tokens are removed from active records within 24 hours.
- Temporary OAuth and authorization records: until they expire, plus no more than 24 hours for security and troubleshooting.
- Drafts, scheduled posts, media, publishing results, and post history: while your account is active so you can manage upcoming work and review past activity, then deleted within 30 days after account deletion or a verified deletion request.
- Application and diagnostic logs: up to 90 days, unless a shorter period is sufficient.
- Security, abuse-prevention, and audit records: up to 12 months. Records connected to an active investigation may be kept until the investigation or related claim is resolved.
- Billing and tax records: for the period required by applicable accounting and tax laws, generally up to seven years. Payment-card details remain with our payment provider and are not stored by SocialRainbow.
- Encrypted backups: up to 90 days before they are overwritten or deleted through the normal backup cycle.
You can request access, correction, or deletion by emailing [email protected]. We aim to complete verified deletion requests within 30 days unless a longer period is legally required. Deletion includes disconnecting social accounts, removing stored OAuth tokens, deleting drafts and unpublished scheduled posts, and closing your SocialRainbow account.
We may retain limited information when required for security, fraud prevention, dispute resolution, tax, or other legal obligations. Content already published to a social network is controlled by that network and may need to be removed directly through the social platform.
8. Security
We use reasonable technical and organizational safeguards designed to protect your information, including encrypted storage for sensitive connection credentials where appropriate. No service can guarantee perfect security, so you should use strong passwords, protect your AI app accounts, and disconnect accounts you no longer use.
9. Your choices
- Disconnect a social account at any time.
- Cancel your subscription from your account or through support.
- Ask for a copy, correction, or deletion of your personal information.
- Request that we stop using your account data, subject to legal and operational limits.
10. Children
SocialRainbow is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
11. International use
If you use SocialRainbow outside the country where our systems or providers are located, your information may be processed in other countries with different data protection laws.
12. Changes
We may update this policy as the service changes. If the changes are material, we will take reasonable steps to notify users. The “Effective” date above shows when this policy was last updated.