SocioBird

Privacy Policy

Last updated: 7 November 2026

SocioBird ("SocioBird", "we", "us" or "our") is a social media scheduling and management service, operated as an individual business based in India. This Privacy Policy explains what personal data we collect through this instance of the service, why we collect it, who we share it with, and the choices and rights you have.

If you have any question about this policy or want to exercise any of the rights described below, contact us at [email protected].

1. The service, in brief

SocioBird lets you connect your social media and messaging accounts, schedule and publish posts across them, view analytics, manage a media library, and collaborate with teammates inside an organization. To do that, we necessarily process the account details you give us, the credentials that let us post on your behalf to the platforms you connect, and the content you upload or create.

2. The data we collect

2.1 Account and identity data

When you register, we collect your name, email address, and password (stored as a salted hash, never in plain text). If you sign in with a third-party provider (Google, GitHub, Apple, or a generic OAuth provider you configure), we receive the identity details that provider shares with us. We also store your organization name, timezone, and language preference.

2.2 Connected platform data

When you connect a social or messaging channel (X, LinkedIn, Instagram, Facebook, TikTok, YouTube, Reddit, Pinterest, Discord, Slack, Mastodon, Bluesky, Threads, Farcaster, Telegram, and other supported platforms), we store the OAuth access/refresh tokens or API credentials needed to publish on your behalf, along with basic profile data (page/channel name, avatar, follower counts) and post-level analytics that the platform's API returns to us (impressions, likes, comments, etc.). We only request the OAuth scopes needed to schedule posts, read analytics, and manage the channels you explicitly connect.

2.3 Google user data (YouTube and Google Business Profile)

When you connect a YouTube channel or a Google Business Profile location, we access your Google user data through the Google APIs listed below, using the OAuth scope shown for each:

  • YouTube Data API (youtube.upload, youtube.readonly) — to read your channel details and video statistics so you can pick where to publish, and to upload and publish the videos you schedule through SocioBird on your behalf and set their title, description, thumbnail, and privacy status as you configure them.
  • YouTube Analytics API (yt-analytics.readonly) — to read view, engagement, and performance metrics for the videos you publish through the service, so we can show them to you in SocioBird's analytics dashboard.
  • Google Business Profile API (business.manage) — to list the business locations you manage and to publish the posts and updates you schedule through SocioBird to your Google Business Profile.
  • Basic profile scopes (userinfo.profile, userinfo.email) — to identify your Google account and show its name/avatar in the channel picker.

Our use of this data is limited to what is described above and to operating and improving SocioBird's user-facing features. We do not use Google user data to serve advertisements, and we do not sell, transfer, or share Google user data with third parties except: (a) as necessary to provide the feature you requested (for example, sending your scheduled video to YouTube's own servers so it can be published), (b) to comply with applicable law, respond to a valid legal process, or protect the rights, property, or safety of SocioBird, our users, or the public, or (c) as part of a merger, acquisition, or sale of assets, provided the recipient continues to honor the commitments in this policy. No human at SocioBird reads your Google user data except where you have given us specific permission to do so (for example, while diagnosing a support ticket you filed), where it is necessary for security purposes such as investigating abuse, to comply with applicable law, or with aggregated and anonymized data for internal operations. Our handling of data obtained through Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and, for the YouTube API Services specifically, the YouTube Terms of Service.

We store the OAuth access and refresh tokens for your connected Google account in our database, with access limited to the service, for as long as the channel stays connected, plus the channel/location metadata (name and picture) and post-level analytics described above. Disconnecting a channel from your SocioBird settings deletes its stored token from our database straight away. Because the same Google account can have several channels connected to SocioBird, we do not revoke your Google authorization automatically when you disconnect one of them. The channel's name, picture, and analytics for the posts we published stay with your account's history until you delete your account; if you would like them removed sooner, or you revoke SocioBird's access at Google, write to us and we delete the data we hold for that channel within 7 days. You can revoke SocioBird's access to your Google account at any time directly from your Google Account permissions page, independently of this app. When you delete your account, the stored tokens are irreversibly overwritten. SocioBird's use of the YouTube API Services is also subject to the Google Privacy Policy.

2.4 Content you create or upload

Post text, images, and videos you upload or generate through the service are stored either on our own server disk or in a Cloudflare R2 bucket we control, depending on how this instance is configured. Uploaded media may pass through an optional third-party AI image/video generation provider (see Section 4) when you explicitly use that feature.

2.5 Billing data

If you subscribe to a paid plan, your payment is handled directly by Razorpay or Stripe (for web checkout) or by Apple/Google via RevenueCat (for the mobile app). We never see or store your full card number. We do store the subscription plan, billing cycle, amounts charged, and the customer/ subscription identifiers those processors give us, so we can reconcile your account status.

2.6 Logs and usage data

We keep standard server logs (IP address, browser/device information, timestamps, pages and API routes accessed) for security, debugging, and abuse-prevention purposes.

2.7 Support communications

If you email us or otherwise contact us for support, we keep that correspondence, including any attachments, to resolve your request and for our own record-keeping.

2.8 Cookies and similar technologies

We use a small number of strictly necessary cookies to keep you signed in and to remember basic preferences (e.g. language, theme). Depending on how this instance is configured, it may also use optional analytics or advertising scripts (for example Google Tag Manager, a Meta/Facebook Pixel, or a self-hosted analytics tool) to understand aggregate usage of the marketing pages. These are only active where the corresponding integration has been configured; you can block them with your browser's cookie or tracking-protection settings.

3. How we use your data

  • To create and operate your account and organization.
  • To publish, schedule, and retrieve analytics for the posts you create, through the social platforms you connect.
  • To process payments and manage your subscription.
  • To send you transactional email (e.g. account activation, password reset, billing receipts, post-failure alerts) via our email provider.
  • To respond to support requests.
  • To detect, prevent, and investigate fraud, abuse, and security incidents.
  • To improve the reliability and features of the service.
  • To comply with legal obligations.

4. AI-assisted features

Optional AI features (for example AI-generated images, an AI writing/chat assistant, or AI-generated video) send the prompt and, where relevant, the media you provide to a third-party AI model provider (such as OpenAI, or a video-generation provider like HeyGen or EvoLink) in order to generate the output. These providers process that data under their own terms. AI video generation is disabled by default on this instance and only runs when an administrator has explicitly turned it on.

5. Who we share data with

We share personal data only where necessary to run the service:

  • Connected social platforms — the content you schedule, and the credentials needed to post it, are sent to the platforms you connect (Meta, X, LinkedIn, Google, TikTok, etc.).
  • Payment processors — Razorpay, Stripe, and, for mobile in-app purchases, RevenueCat and the relevant app store.
  • Cloud storage — Cloudflare R2, if this instance is configured to store media there instead of locally.
  • Email delivery — Resend, to send transactional email.
  • AI providers — as described in Section 4, only when you use an AI feature.
  • Error tracking / infrastructure monitoring — an error tracking tool (e.g. Sentry), if configured, to help us diagnose crashes.
  • Law enforcement or other third parties where required by law, or to protect our rights, users, or the public.

We do not sell your personal data.

6. International data transfers

This instance of SocioBird is operated from India, and our infrastructure and the third-party processors listed above may store or process data outside your home country. Where required, we rely on contractual protections offered by those processors for any cross-border transfer.

7. Data retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to keep billing records for longer to meet tax and accounting obligations, or where data must be kept longer to resolve disputes or enforce our agreements. Server logs are retained for a limited period for security purposes and then deleted or aggregated.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, and access controls on our infrastructure and databases. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. If you are in India, these rights are available to you under the Digital Personal Data Protection Act, 2023. If you are located elsewhere (for example the EU/UK or California), we will honor equivalent rights under the law that applies to you to the extent it applies to our processing. To exercise any of these rights, email [email protected]. You can also delete most of your own data directly from your account settings, or disconnect a social channel at any time, which revokes and deletes the stored access token for that channel.

10. Children

SocioBird is not directed at, and we do not knowingly collect personal data from, anyone under the age of 18. If you believe a child has provided us personal data, contact us and we will delete it.

11. Marketing communications

We may send you product or billing-related email that is necessary to run the service; you cannot opt out of these while your account is active. Where we send optional marketing or newsletter email, every message includes an unsubscribe link.

12. Third-party sites and services

The service links out to, and integrates with, third-party platforms and payment processors. Their own privacy policies govern how they handle your data once it leaves our systems, and we encourage you to review them.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the app.

14. Contact us

For any question about this policy or how we handle your data, contact us at [email protected].