Privacy Policy

Social Signoff is a collaborative social media tool: team members draft posts, admins review and approve them, and approved posts are published to the team's connected social media accounts. This policy explains what information we handle to make that work.

• Account details — your name, email address, and a password (stored only as a secure hash by our authentication provider).
• Workspace content — the posts your team creates: captions, photos, and videos you upload, plus review activity (who approved or scheduled a post, and when).
• Social account connections — when an admin connects Facebook or Instagram, we store the Page and account identifiers and the access tokens Meta issues, solely so we can publish the posts your team approves.
• Notification settings — your notification preferences and, if you enable browser push notifications, the push subscription for your device.

We do not collect browsing history, contacts, location, or anything beyond what the features above need.

• To run the service: drafting, review, scheduling, and publishing.
• To publish approved posts to the social accounts your workspace connected — and only the posts your admins approve.
• To send notifications about workspace activity (a draft awaiting review, a post approved or published) by email and browser push.

We do not sell your information, show ads, or share your data with anyone except the service providers below.

• Supabase — database, authentication, and file storage (hosted in the United States).
• Vercel — hosts the website.
• Resend — delivers our emails (invites and notifications).
• Meta Platforms — when your workspace connects Facebook or Instagram, posts you approve are sent to Meta to be published, under Meta's own privacy policy.

Data received from Meta (Page names, account identifiers, access tokens) is used exclusively to list your connected accounts and publish the posts your admins approve. We never read your Page inbox, followers, or messages, and we never post anything that wasn't explicitly approved in Social Signoff. You can revoke our access at any time by removing the account in Social Signoff Settings or by removing the Social Signoff app in your Facebook settings — revoked tokens are deleted.

Your data is kept while your workspace is active. You can delete individual posts anytime in the app, and you can request full deletion of your account or workspace — see our data deletion instructions. Deletion requests are completed within 30 days.

If a government or public authority requests user data, we review the request's legality before responding, challenge requests we consider unlawful, disclose only the minimum information necessary to satisfy a valid request, and keep documentation of each request, our response, and the legal basis involved. Where the law allows, we notify affected users.

Questions about this policy or your data: koops.maggie@gmail.com. If we change this policy, we'll update this page and the date at the top.