This policy explains what data Sozmed ("Sozmed", "we") collects when you use Sozmed to schedule and publish content to social media, and how that data is used.
1. Data we collect
Sozmed account data: name, email address and password (stored as a hash).
Data from platforms you connect (Facebook, Instagram, Threads, TikTok, YouTube, X): account ID, name, username, profile picture, the Pages/Channels you select, and the access tokens issued by the platform. We only request the permissions needed to read basic profile data and publish content on your instruction.
Content you create in Sozmed: captions, titles, images, videos, schedules and publishing results (post IDs, links, error messages).
Technical data: server logs (IP address, access time) for security and troubleshooting.
2. How we use data
Data is used only to operate the service: show your accounts, store schedules and publish content to the platforms you choose at the time you set. We do not sell data, use it for advertising, or use platform API data for any other purpose.
Sozmed never posts without your instruction. Every post comes from a schedule you created and confirmed.
3. Third-party services
When you connect an account you are also subject to that platform's policies: Meta Privacy Policy, TikTok Privacy Policy, X Privacy Policy.
Sozmed uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service and the Google Privacy Policy.
Data is shared only with the destination platform when publishing and with the hosting provider that runs Sozmed.
4. Storage and security
Platform access tokens are encrypted (AES-256-GCM) before storage. Connections use HTTPS. Server access is restricted.
Connected-account data is kept while the account stays connected. Profile data from the APIs is refreshed whenever the token is refreshed. Uploaded media and schedule history are kept until you delete them or delete your Sozmed account.
5. Revoking access and deleting data
In Dashboard → Accounts you can disconnect any account; its tokens and data are deleted immediately. In Dashboard → Settings you can delete your Sozmed account and all data.
You can also revoke access from the platform side: Google app permissions, Facebook Apps and Websites, Apps and websites in Instagram/Threads settings, X connected apps, and Security → Manage app permissions in TikTok. Facebook, Instagram and Threads notify Sozmed when access is revoked and the data is deleted immediately. For other platforms the account is marked disconnected when Sozmed detects revoked access, then deleted automatically 7 days later unless reconnected.
Deletion requests by email are processed within 7 days. See Data Deletion.
6. Your rights
Under Indonesian Law No. 27 of 2022 on Personal Data Protection you may request access to, correction, a copy and deletion of your personal data, and withdraw consent at any time.
7. Contact
Service operator: Sozmed. Privacy questions or requests: [email protected].
If this policy changes we update the date above and notify users via the dashboard or email.