IS
Isysocial

Privacy Policy

Last updated: March 14, 2026

Isysocial ("we", "our", or "us") is a social media management platform that helps agencies manage content creation, scheduling, and publishing for their clients. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.

1. What Data We Collect

We collect the following types of information:

  • Account Information: Name, email address, and password when you create an account.
  • Agency & Client Data: Company names, logos, brand assets, and content you create within the platform.
  • Social Media Data: When you connect social media accounts (Facebook, Instagram, LinkedIn, TikTok, X), we receive OAuth access tokens, account identifiers (such as Page IDs and business account IDs), profile names, and profile pictures from those platforms.
  • Usage Data: Information about how you interact with the platform, including pages visited and features used.

2. How We Store Your Data

Your data is stored securely using industry-standard practices:

  • All data is stored in secure, encrypted PostgreSQL databases hosted on Supabase with TLS encryption in transit.
  • OAuth tokens obtained from social media platforms (Facebook, Instagram, etc.) are stored encrypted and associated with your agency account. Tokens are never exposed in client-side code or logs.
  • Uploaded media and brand assets are stored in secure cloud storage with access-controlled buckets.
  • Passwords are hashed using bcrypt and are never stored in plain text.

3. How We Use Your Data

We use your information to:

  • Provide and maintain the Isysocial platform and its features.
  • Publish, schedule, and manage social media content on your behalf through connected social media accounts.
  • Authenticate your identity and manage access to your agency workspace.
  • Send notifications about post approvals, comments, and status changes.
  • Improve the platform based on usage patterns (aggregated, non-personal data).

We do not sell your personal data to third parties. We do not use your social media data for advertising or profiling purposes.

4. Data Sharing

We share data only in the following limited circumstances:

  • Social Media Platforms: When you publish content, we send that content to the respective platform (Facebook, Instagram, etc.) via their official APIs.
  • Service Providers: We use third-party services for hosting (Vercel, Supabase), email (Resend), and AI features (OpenAI), which process data only as needed to provide their services.
  • Legal Requirements: If required by law or legal process.

5. Data Retention

We retain your data for as long as your account is active. When an agency account is deactivated, associated data (posts, media, client information) is retained for 30 days before permanent deletion. Social media tokens are revoked immediately upon disconnection of an account.

6. Data Deletion

You have the right to request deletion of your data at any time:

  • Disconnect Social Accounts: You can disconnect any social media account from the platform settings. This immediately revokes and deletes the stored OAuth tokens.
  • Delete Your Account: Contact us to request full deletion of your account and all associated data.
  • Facebook/Instagram Data: You can also remove Isysocial's access to your data through your Facebook or Instagram account settings under Apps and Websites.

To request data deletion, email us at privacy@isysocial.com with the subject line "Data Deletion Request". We will process your request within 30 days.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data (see Data Deletion above).
  • Object to or restrict certain processing of your data.
  • Export your data in a portable format.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

© 2026 Isysocial. All rights reserved.