Privacy Policy

This Privacy Policy explains what Socials collects, why we collect it, and the choices you have. It works together with our Terms of Service.

1. Who we are

Socials is a dashboard that connects your social accounts through official OAuth and shows followers, growth, and audience insights on a page you can share. We host the app on Vercel and store account data in Supabase.

2. Information we collect

• Account data. Email address, password (stored by our auth provider, not in plain text), username, and display name.
• Connected accounts. Platform user IDs, usernames, avatars, profile URLs, and OAuth access and refresh tokens. Tokens stay on the server and are not sent to your browser.
• Stats. Snapshots of followers, following, posts, views, and extra platform fields we are allowed to read.
• Demographics. Age, gender, and country breakdowns when a platform (today, typically YouTube or Instagram) returns them after you grant permission. Other platforms may only provide follower counts.
• Technical data. Session cookies needed to keep you signed in, and standard server logs such as IP address and browser type.

3. How we use it

• Create and secure your account
• Refresh and display your stats
• Publish the public page at /u/your-username
• Run daily sync jobs and fix problems with the Service

We do not sell your personal information.

4. What is public

Your username, display name, connected platform identities, and stored stats are visible to anyone who opens your public URL. Do not connect an account or share the link if you do not want that information shown. Disconnecting an account removes it from future views; historical snapshots for that account are deleted with it.

5. Who we share with

• Infrastructure. Supabase (auth and database) and Vercel (hosting and scheduled sync).
• Social platforms. We send them only what their OAuth flow requires so we can read the stats you authorized.
• Legal requests. We may disclose information if required by law or to protect the Service and its users.

6. Cookies and sessions

We use essential cookies to keep you logged in and to complete OAuth (a short-lived state value, and a PKCE verifier for X). We do not use advertising cookies.

7. Retention

We keep account and snapshot data while your account is open. If you delete your account or disconnect a platform, we delete the related tokens, account row, and snapshots. Backups may persist for a limited time.

8. Your choices

• Update your username and view or copy your public link
• Disconnect any social account
• Refresh or stop syncing stats
• Request deletion of your account by contacting us from the email on the account

Depending on where you live, you may also have rights to access, correct, or export personal data, or to object to certain processing.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal information from them.

10. International transfers

Our processors may store data in the United States or other countries. If you use the Service from elsewhere, you understand that your information may be processed outside your home country.

11. Changes

We may update this policy. The “Last updated” date will change when we do. Material changes will be reflected on this page.

12. Contact

Privacy questions can be sent using the email address on your Socials account.