Privacy policy

Who we are

Socialhub is a social media management tool. A workspace admin connects the Facebook Pages and Instagram business accounts their organisation already manages, and the team then reads and answers messages, comments and mentions, schedules posts and reads analytics from one place.

This policy describes what this installation of Socialhub stores, why, and how to get it deleted. Socialhub is not affiliated with, endorsed by or operated by Meta Platforms.

What we store

Access tokens for the accounts you connect. They are encrypted at rest with AES-256-GCM and are only decrypted to call the platform on your behalf.

Account details returned by the platform: page or account id, display name, username and profile picture.

Conversations from your connected accounts: direct messages, comments and mentions, including the sender name or username, profile picture, message text and any attachments, plus the replies and notes your team writes.

Media: files your team uploads to compose posts, and copies of media attached to incoming messages so a conversation still reads correctly after the platform expires its own links.

Analytics: the metric figures the platform reports for your accounts and posts, stored per day so charts can be drawn without calling the platform again.

Team accounts: name, email address and a hashed password, along with workspace activity such as job history and notifications.

Where it comes from

Most of it comes from you: the accounts you connect, the posts you write and the people you invite.

The rest comes from the Meta Graph API, through the permissions the connecting admin granted, and covers only the Pages and Instagram accounts that admin chose. People who message or comment on those accounts have their message and public profile details stored so your team can answer them.

Why we store it

Only to run the product: to show you a unified inbox, to send the replies you write, to publish and schedule your posts, to show analytics, and to keep your team and workspace working.

We do not sell, rent or trade your data. We do not share it with advertisers or data brokers, we do not build advertising profiles, and we do not use the content of your conversations to train machine learning models.

Who can see it

Members of the workspace that connected the account, according to their role, and the technical staff who operate this installation, for support and maintenance.

Data is passed to the platform you are posting to or replying on, to the hosting provider running this installation, and to the mail provider that delivers invitations and password resets. Nobody else.

How long we keep it

Conversations, media and analytics are kept while the account stays connected and until you delete them or delete the workspace.

Disconnecting an account deletes its stored tokens immediately and stops any further collection for that account.

Deleting a workspace deletes its accounts, conversations, media and analytics. Encrypted database and media backups roll off within 14 days, after which nothing remains.

How it is protected

Tokens are encrypted at rest, passwords are hashed with Argon2, traffic runs over HTTPS, media is served through short-lived signed URLs, and every database query is scoped to a single workspace so one customer can never read another one.

Your choices

You can disconnect any account at any time from Settings, Accounts. You can ask for a copy of your data, a correction, or full deletion. The data deletion page explains every route, including the automatic one that runs when you remove Socialhub from your Facebook account.

Cookies

Socialhub sets a session cookie so you stay signed in, a cookie remembering your language, and a cookie remembering your light or dark theme. There are no analytics, tracking or advertising cookies.

Children

Socialhub is a tool for organisations and is not directed at children. We do not knowingly create accounts for anyone under 16.

Changes

If this policy changes we update the page and the date at the top of it. Material changes are also announced in the product.