Privacy Policy

Social is operated by CosmoOps (OPC) Private Limited ("CosmoOps", "we", "us"). This policy explains what we collect when you use Social to compose, schedule, and publish posts across YouTube, Twitter/X, LinkedIn, Facebook, and Instagram, and what we do with it.

What we collect

Account and workspace information comes from CosmoOps Connect, which handles sign-in, billing, and team membership for every application on the platform, including Social. We receive your name, email address, and workspace membership from Connect — we never see or store your password.

When you connect a social platform (YouTube, Twitter/X, LinkedIn, Facebook, or Instagram), the OAuth connection is brokered through our integration provider, Composio — Social does not store your platform passwords, and access tokens are held by Composio on our behalf, scoped to the permissions you grant.

Content you create — post text, uploaded images and videos, scheduling times, and the platforms you choose to publish to — is stored in our own database and file storage so you can draft, edit, and review it before and after publishing.

Once a post is published, we fetch and cache engagement metrics (likes, comments, shares) from each platform's own API when you ask us to refresh them, so you can see performance without leaving Social.

How we use it

• To publish the content you create to the platforms you select, on your behalf and only when you ask us to.
• To show you your own posts, drafts, schedule, and engagement history.
• To operate your subscription and workspace through CosmoOps Connect (plan, billing, and team access).
• To respond to support requests and investigate abuse or security issues.

We do not sell your data, and we do not use your post content or connected-platform data to train any model.

Retention

We keep your posts, media, and connection records for as long as your workspace is active. If your workspace's subscription is cancelled or your workspace is deleted through Connect, we stop publishing on your behalf immediately; retained content is deleted from our systems on a schedule tied to that cancellation, consistent with what our Connect subscription requires of us.

Third parties

Social relies on a small number of processors to work: CosmoOps Connect (identity, billing, workspace management), Composio (social platform connections and publishing), Google Firebase (database and file storage), and the social platforms themselves once you choose to publish to them. Each of these has its own privacy practices governing the data it holds on our behalf.

Your rights

You can disconnect any platform at any time from Settings, which revokes Social's access to it immediately. You can request a copy of your data, or ask us to delete your account and its content, by contacting us below. If you are in India, you also have rights under the Digital Personal Data Protection Act, 2023 — see the grievance officer details below, or visit our dedicated grievance page.

Grievance Officer

Contact us

Questions about this policy: support@cosmoops.com.