Privacy Policy

1. Introduction

Welcome to EzSocial ("we," "our," or "us"), a service provided by Nomadan Apps Ltd. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (ezsocial.co) and our services (collectively, the "Service"). EzSocial is a social media scheduling platform that lets you upload your own photos and videos, use AI to write captions, and schedule and publish posts to connected social networks (including TikTok, Instagram, Facebook, LinkedIn, X, and YouTube) from a single dashboard.

We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

When you register for and use EzSocial, we collect:

• Account Information: Email address, name, and profile picture (if provided through authentication)
• Authentication Information: We store authentication tokens to maintain your session
• Brand & Content Information: Details about your brand and the content you create, including captions, prompts, images, carousels, scheduling preferences, and other content-related information
• User Preferences: Your configuration settings, including connected accounts, posting schedules, and other service configurations

2.2 Information Collected Automatically

When you use our Service, we may automatically collect:

• Usage Data: Information about how you interact with our Service, including the features you use and the time spent on the Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, browser type, pages visited, time and date of your visit, time spent on those pages, and other statistics

2.3 Information from Connected Social Accounts

EzSocial lets you connect third-party social media accounts so the Service can publish content on your behalf. When you connect an account, we collect, with your authorization:

• Profile Information: Basic profile details exposed by the platform, such as a unique account identifier, display name, and avatar, used to show you which account is connected
• Access Tokens: OAuth access and refresh tokens that allow us to publish content on your behalf without requiring you to re-authenticate each time. Tokens are stored securely and are used only to perform the actions you request
• Publishing Data: The status of posts you create, upload, schedule, or publish through the Service

2.4 TikTok Data

Where you connect a TikTok account, our use of information received from TikTok APIs adheres to the TikTok Developer Terms of Service, including the Usage Data Policy and applicable limited-use requirements. Specifically:

• You connect your TikTok account using TikTok Login Kit (OAuth). With the user.info.basic and user.info.profile scopes, we access your TikTok open ID, display name, and avatar solely to display your connected account inside EzSocial.
• With the video.upload and video.publish scopes, we use the TikTok Content Posting API to upload and publish videos to your TikTok account, but only the specific content you choose to post or schedule through EzSocial.
• We do not access your private messages, and we do not collect TikTok data beyond what is necessary to provide the features described above.
• We do not sell TikTok data, and we do not use it for advertising, profiling, or any purpose other than providing the Service to you.
• You can disconnect your TikTok account from EzSocial at any time, which revokes our stored tokens. You may also revoke access directly from your TikTok account settings.

2.5 Cookies and Advertising Measurement

We use cookies and similar technologies to measure how visitors find and use our marketing site:

• Analytics and Advertising Cookies: Google Analytics, Google Ads, and the Meta (Facebook) Pixel, used to measure site traffic and the effectiveness of our advertising campaigns
• Consent: These cookies are only activated after you accept them via the cookie banner shown on your first visit. You can decline them at any time, and your choice is remembered for future visits
• Attribution Cookies: A first-party cookie records how you arrived at our site (e.g. via a specific ad campaign) so we can understand which marketing channels work, matched only to your own later actions on our site

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To enable you to create content and to schedule and publish it to your connected social accounts
• AI-Powered Caption Writing: To generate captions and post text based on the prompts and brand information you provide
• Publishing & Scheduling: To upload and publish your content to connected platforms at the times you specify, and to report post status back to you
• Improve the Service: To understand how users interact with our Service and make improvements
• Personalization: To tailor content generation to your brand and preferences
• Communication: To respond to your inquiries and provide customer support
• Security: To protect our Service and users from fraud and abuse

3.1 AI Processing

EzSocial uses advanced AI models to generate content. When you use our Service:

• We process the prompts and brand information you provide through AI services to generate captions and post text
• We do not share your social account access tokens with our AI service providers
• The AI processing is used solely for providing the Service's core functions

3.2 AI Service Providers

Our Service uses third-party AI providers, including OpenAI and Google, to generate post captions and text based on the information you provide. When using these features:

• We share only the content and prompt information necessary to generate the requested output
• We do not share your social account credentials or access tokens with these providers
• Data shared with these providers is used solely to provide the Service's functionality

4. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share information with third-party service providers who perform services on our behalf (e.g., hosting, analytics, payment processing, customer support)
• AI Service Providers: We share the information described in Section 3 with AI providers such as OpenAI and Google to power content generation
• Connected Social Platforms: When you publish content, we transmit that content and the necessary tokens to the relevant platform (e.g., TikTok) to fulfil your request
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• With Your Consent: We may disclose your information for any other purpose with your consent

4.1 Third-Party Services

Our Service integrates with the following third-party services:

• Authentication Providers: Google, for user login
• Payment Processor: Stripe, for handling subscription payments
• Social Platforms: TikTok, Instagram, Facebook, LinkedIn, X, and YouTube, to publish content you create
• AI Services: OpenAI and Google, to power content generation

Each of these services has its own privacy policy governing the information they collect. We encourage you to review their privacy policies to understand how they collect, use, and share your information.

5. Data Retention and Deletion

5.1 Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfil the purposes outlined in this Privacy Policy. If you delete your account, we will delete your personal information, except where we are required to retain certain information to comply with legal obligations.

5.2 Data Deletion Process

When you delete your account:

• Your personal information (name, email, etc.) is removed from our active systems
• Your account data, including content and brand information, is permanently deleted from our database
• Any social account access tokens, including TikTok tokens, are immediately revoked and deleted from our systems
• We may create a hashed record of your email (not the actual email address) to prevent fraud, abuse, or accidental re-registration. The hash contains no personal information, cannot be reversed, and is automatically deleted after 1 year

5.3 Data Deletion Requests

You can request deletion of your data in the following ways:

• Through your account dashboard, where you can delete your account and associated data
• By contacting us at ezsocialapp@gmail.com with a deletion request

We process all deletion requests in accordance with applicable data protection laws, including the GDPR. After receiving your request, we will confirm the deletion once it has been completed.

6. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR), including:

• Access: You can request copies of your personal data
• Rectification: You can request that we correct inaccurate data about you
• Erasure: You can request that we delete your personal data
• Restriction: You can request that we restrict the processing of your personal data
• Portability: You can request that we transfer your personal data to another organization
• Objection: You can object to our processing of your personal data
• Withdraw Consent: You can withdraw your consent at any time where we relied on it to process your personal data

To exercise these rights, please contact us at ezsocialapp@gmail.com.

7. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure storage of social account access tokens
• Access controls and authentication requirements for staff
• Regular backup procedures to prevent data loss

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe we might have any information from or about a child under 13, please contact us at ezsocialapp@gmail.com.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also provide additional notice, such as a prominent notification within our Service or an email. You are advised to review this Privacy Policy periodically.

10. International Data Transfers

We store and process personal data primarily within the European Union.

Our core infrastructure is hosted on MongoDB Atlas and VPS servers located in the EU, ensuring compliance with EU data protection standards. We may use third-party services, such as OpenAI and Google, to process content data. Where such data is processed outside the EU, including in the United States, we take appropriate steps to ensure data protection.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: ezsocialapp@gmail.com
• Company: Nomadan Apps Ltd

See also our Terms of Service.