Legal / privacy

Privacy Policy

This policy covers the SocialSpool website, account dashboard, connected social accounts, composer, scheduler, billing, API, and webhook features.

Last updated

June 5, 2026

Public website data

When you visit socialspool.com, we may receive basic technical data such as IP address, browser type, device information, referring pages, pages viewed, and timestamps.
We use this data to keep the site available, understand which pages are working, diagnose errors, prevent abuse, and improve the public marketing and documentation experience.
If you contact us from the site or by email, we collect the information you choose to send so we can respond.

When you create an account or sign in, we store account information such as your name, email address, authentication identifiers, session records, and workspace membership.
A workspace is the tenant boundary for your dashboard. We use it to keep your connected accounts, posts, billing state, API keys, webhooks, and settings separate from other users.
Profile and settings pages may store preferences such as display name, scheduling timezone, billing status, notification choices, API key metadata, and webhook configuration.

When you connect LinkedIn, X, Bluesky, Threads, or another supported network, SocialSpool stores the platform name, platform account id, username, display name, avatar URL when provided, scopes, token expiration, and connection status.
Publishing tokens are encrypted at rest and are never exposed to the browser. We use them only to identify the connected account, refresh access when supported, publish content you request, report publishing status, and disconnect the account.
SocialSpool does not sell social platform tokens and does not use them to publish content you did not create, schedule, or explicitly request.

The dashboard stores drafts, scheduled posts, selected target accounts, media metadata, publish timing, queue state, platform responses, failed attempt details, platform post ids, and platform post URLs.
We use this information to create drafts, schedule posts, publish at the requested time, avoid duplicate publishes, show status, support retries, and keep an auditable publishing history.
When you publish, SocialSpool sends the required content and account authorization to the selected social platform. That platform processes the post under its own terms and privacy policy.

Paid subscriptions are handled through Stripe. SocialSpool stores customer and subscription identifiers, plan state, and billing status, but does not store full payment card numbers.
If you use the public API, we store API key metadata, idempotency keys, request timing, route usage, webhook destinations, webhook delivery results, and related security events.
Operational logs help us debug failures, prevent abuse, enforce plan limits, preserve workspace isolation, and keep scheduling and publishing reliable.

We share information with social platforms only when you connect an account, publish a post, refresh access, or disconnect an account.
We use service providers that operate the site and app, including hosting, database, storage, email, monitoring, analytics, and payment infrastructure.
We may disclose information when required by law, to protect users or the service, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets.

We retain account, workspace, post, billing, API, webhook, and operational records for as long as needed to provide SocialSpool, comply with legal obligations, resolve disputes, enforce agreements, and maintain reliable publishing history.
You choose which social accounts to connect, which accounts receive each post, whether a post stays drafted, scheduled, published immediately, or canceled before publishing.
Disconnecting a social account prevents future publishing through that connection. You can contact us to request access, correction, export, or deletion of personal information associated with your account.

SocialSpool uses safeguards designed to protect personal information, including encryption for stored publishing tokens and access controls around workspace data.
SocialSpool is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
We may update this policy from time to time. If changes are material, we will take reasonable steps to notify users through the service or another appropriate channel.
For privacy requests or questions, contact SocialSpool at [email protected].