Legal
Privacy Policy
Social (the "Service", at social.intigr8.com) is a social media scheduling and publishing platform operated by Intigr8 Inc. ("Intigr8", "we", "us"), Brandon, Florida, USA. This policy explains what information the Service collects, how we use it, who we share it with, and how you can have it deleted.
1. Information we collect
- Account information. Your name, email address and password (stored only as a one-way hash), your role, and the workspace (team or client) you belong to.
- Content you create. Posts, drafts, captions, schedules, comments and approval notes, images and videos you upload or generate, content ideas, and links to articles you ask the Service to turn into posts.
- Connected social account data. When you connect a social account, we receive and store the account's platform ID, username or display name, profile picture, and the access and refresh tokens the platform issues to us. For Facebook we also store the Pages, and the Instagram professional accounts linked to them, that you choose to grant. Details for each platform are in section 2.
- Post performance data. For posts published through the Service, we may retrieve counts such as impressions, reach, clicks, reactions or likes, comments, shares and saves, so we can show you how those posts performed. We store these as numbers attached to each post. We do not collect the names, profiles or comment text of people who interact with your posts.
- Waitlist and newsletter. If you join the waitlist, your email address and (optionally) your name.
- Technical information. IP address, browser type, and server and error logs generated when you use the Service, plus the session cookies described in section 8.
2. Connected social accounts
You connect a social account by signing in to that platform and approving the permissions it shows you. We only use those permissions to do what you ask the Service to do: publish your content, show you your accounts, and report on posts published through the Service. We never post anything you have not created, scheduled or approved in the Service, and we do not read your private messages.
Facebook and Instagram (Meta)
We use Facebook Login to list the Facebook Pages you manage and the Instagram professional accounts linked to them, to publish posts, photos and videos to the Pages and accounts you select, and to read engagement and insights (reach, views, reactions, comments, shares, saves and clicks) for posts published through the Service. Use of Meta data is also subject to the Meta Privacy Policy.
We use Sign In with LinkedIn to identify your LinkedIn member account (name, profile picture, email address and member ID) and LinkedIn's sharing permission to publish posts to your profile on your behalf. Where you grant it, we use LinkedIn's post analytics permission to retrieve statistics (impressions, members reached, reactions, comments and reshares) for posts you authored, and only to show those statistics to you in the Service. We do not access other members' profiles or content, we do not scrape or bulk-collect LinkedIn data, and we do not sell, share or use LinkedIn data for advertising, profiling or training AI models. See also the LinkedIn Privacy Policy.
X (formerly Twitter)
We use X's OAuth 2.0 to read your basic profile, publish posts and media you create in the Service, and read metrics (such as impressions, likes, reposts, replies, bookmarks and link clicks) for posts published through the Service. See also the X Privacy Policy.
TikTok
We use TikTok Login Kit to read your basic profile (display name, avatar and open ID) and the Content Posting API to upload and publish videos you choose. Where you grant it, we read view, like, comment and share counts for videos published through the Service. See also the TikTok Privacy Policy.
Other networks
If we add support for other networks, data from them will be handled under this policy, and we will describe them here before they are made available.
You can revoke the Service's access at any time by disconnecting the account on the Accounts page, or from the platform's own settings (for example Facebook Settings → Business Integrations, LinkedIn Settings → Data privacy → Permitted services, X Settings → Security and account access → Apps and sessions, or TikTok Settings → Security → Manage app permissions).
3. How we use information
- To provide the Service: create, schedule, approve and publish your posts, keep your connections working (including refreshing tokens where the platform allows), and show you analytics.
- To run the AI features you choose to use (see section 4).
- To send service emails, such as invitations, password resets and notifications, and, if you joined the waitlist, launch news, which you can unsubscribe from at any time.
- To provide support, keep the Service secure, prevent abuse, and fix problems.
- To comply with the law and with the terms of the platforms you connect.
We do not sell your personal information, we do not use it to show you ads, and we do not use data received from social platforms for any purpose other than providing the Service to you.
4. AI features
The Service can draft, adapt and summarize text and generate images when you ask it to. The text you submit, and the outputs, are processed by AI models that Intigr8 hosts on infrastructure it operates; they are not sent to third-party AI providers. If that changes, we will update this policy first. We do not use your content, or any data received from social platforms, to train AI models. AI output is only published when you, or someone in your workspace, schedules or approves it.
5. Sharing
We share information only in these cases:
- With the platforms you publish to, when you publish or schedule content to them.
- Within your workspace. Members of your team can see the workspace's content and accounts according to their role. If your workspace is managed by an agency, such as Intigr8 managing social media for a client, authorized agency staff can access the workspace to provide that service.
- With service providers who process data for us under contract: Amazon Web Services (hosting and database, United States) and Mailgun (email delivery).
- For legal reasons, if required by law or legal process, or to protect the rights, safety or property of our users, Intigr8 or others.
- In a business transfer, such as a merger or acquisition, in which case this policy continues to apply to your information.
6. Storage and security
The Service is hosted in the United States on Amazon Web Services. All traffic is encrypted in transit with HTTPS. Social platform access and refresh tokens are encrypted at rest, passwords are stored as one-way hashes, and access to production systems is limited to authorized Intigr8 personnel. No method of storage or transmission is completely secure, but we work to protect your information and will notify you of a breach affecting it as required by law.
7. Retention and deletion
- Disconnecting a social account on the Accounts page immediately deletes its stored access and refresh tokens, along with the records and performance data of posts published to that account, from our database.
- Deleting your account. To delete your account and all associated data, email dan@intigr8.com from the email address on your account with the subject "Data deletion request". We will confirm and complete the deletion within 30 days, except for information we must keep by law.
- Facebook and Instagram users can also remove the Service under Facebook Settings → Business Integrations and then send the request above to have all data we received from Meta deleted.
- Waitlist emails are kept until you unsubscribe or ask us to remove them.
- Otherwise, we keep information for as long as your account is active and as needed to provide the Service. Server logs are kept only for a limited period for security and troubleshooting.
8. Cookies
We use only the cookies needed to run the Service: a session cookie that keeps you signed in, and a security token that protects forms. We do not use advertising or third-party analytics cookies. Our pages load fonts from Bunny Fonts (fonts.bunny.net), which receives your IP address to deliver them and does not set cookies.
9. Your rights
You can ask us to access, correct, export or delete your personal information, or to stop sending you marketing email, by contacting us at the address below. Depending on where you live (for example California, or the EU/UK), you may have additional rights under local law, and we will honor them. We do not sell or share personal information for cross-context behavioral advertising.
10. Children
The Service is intended for businesses and is not directed to children under 13 (or the minimum age required by the platforms you connect). We do not knowingly collect information from children.
11. Changes
We may update this policy. If we make material changes, we will notify account holders by email or in the Service before they take effect, and update the effective date above.
12. Contact
Intigr8 Inc., Brandon, Florida, USA
Email: dan@intigr8.com