815 Nexus Social ("we", "us", or "our") operates 815 Nexus Social (the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
Information We Collect
1.1 Personal Information
When you register for an account, we collect:
- Account Information: Name, email address, password (encrypted)
- Profile Information: Profile photo, display name, timezone preferences
- Workspace Information: Workspace name, team member details, subscription plan
- Brand Information: Brand names, social media handles, brand configurations
1.2 Social Media Connection Data
When you connect social media accounts, we collect:
- OAuth Tokens: Access tokens and refresh tokens for connected platforms (Facebook, Instagram, LinkedIn, X/Twitter)
- Account Metadata: Social media account names, profile IDs, granted permissions
- Page/Profile Data: Information about connected Pages, profiles, or business accounts
- Token Expiration: Token validity periods and refresh schedules
1.3 Content and Media
We store content you create and manage:
- Library Items: Post text, captions, hashtags, platform-specific variations
- Media Assets: Images, videos, GIFs uploaded to your asset library
- Scheduled Posts: Post content, scheduling details, publishing status
- Approval Requests: Content submitted for client approval, feedback, approval status
- Short Links: Custom short URLs, UTM parameters, click analytics
1.4 Usage and Analytics Data
We automatically collect:
- Log Data: IP address, browser type, device information, operating system
- Usage Metrics: Features used, pages visited, time spent, actions taken
- Performance Data: Error logs, API response times, system performance metrics
- Audit Logs: User actions, changes to content, team member activities
1.5 Communication Data
- Support Requests: Messages sent to customer support
- Email Communications: Emails exchanged with our team
- Notifications: Preferences for email and in-app notifications
How We Use Your Information
We use the information we collect to:
- Provide the Service: Authenticate users, manage workspaces, schedule and publish social media posts
- Process Transactions: Handle subscription payments, manage billing, process upgrades/downgrades
- Maintain Security: Detect and prevent fraud, abuse, and security incidents
- Improve the Service: Analyze usage patterns, develop new features, optimize performance
- Communicate: Send transactional emails, service updates, security alerts, and marketing communications (with consent)
- Provide Support: Respond to inquiries, troubleshoot issues, provide customer assistance
- Comply with Legal Obligations: Meet regulatory requirements, respond to legal requests
- Enforce Terms: Enforce our Terms of Service and other policies
Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data and context:
- Contract Performance: Processing necessary to provide the Service you've subscribed to
- Legitimate Interests: Improving our Service, preventing fraud, ensuring security
- Consent: Marketing communications, optional features (you may withdraw consent anytime)
- Legal Obligations: Compliance with applicable laws and regulations
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
We share data with trusted third-party service providers who assist in operating our Service:
- Cloud Hosting: AWS (Amazon Web Services) for infrastructure and storage
- Email Services: Mailgun for transactional emails
- Payment Processing: Stripe or similar payment processors for billing
- Analytics: Usage analytics and performance monitoring tools
3.2 Social Media Platforms
When you connect social media accounts and schedule posts, we share content with the respective platforms (Facebook, Instagram, LinkedIn, X/Twitter) according to your instructions and their APIs.
3.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
3.5 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Password Security: Passwords are hashed using bcrypt with strong salting
- Token Management: JWT tokens with short expiration times and secure refresh token rotation
- Access Controls: Role-based access control (RBAC) and least-privilege principles
- Database Security: Encrypted database connections and regular security patches
- Monitoring: Continuous monitoring for security threats and suspicious activity
- Regular Audits: Periodic security audits and vulnerability assessments
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to:
- Provide the Service and maintain your account
- Comply with legal obligations (e.g., tax records, audit logs)
- Resolve disputes and enforce our agreements
- Maintain backup and disaster recovery systems
When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law. Backup copies may persist for up to 90 days.
Your Privacy Rights
You have the following rights regarding your personal information:
Access
Request a copy of the personal information we hold about you
Correction
Update or correct inaccurate or incomplete information
Deletion
Request deletion of your personal information (right to be forgotten)
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing of your information for certain purposes
Restriction
Request restriction of processing in certain circumstances
Withdraw Consent
Withdraw consent for processing based on consent (without affecting prior processing)
To exercise these rights, please contact us at support@example.com. We will respond within 30 days.
Cookies and Tracking
We use cookies and similar tracking technologies to:
- Essential Cookies: Maintain your session, authenticate you, remember your preferences
- Analytics Cookies: Understand how you use the Service and improve user experience
- Security Cookies: Detect and prevent security threats
You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.
Third-Party Services
Our Service integrates with third-party social media platforms (Facebook, Instagram, LinkedIn, X/Twitter). When you connect these accounts, you are subject to their respective privacy policies. We are not responsible for the privacy practices of these third parties.
Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
To exercise these rights, contact us at support@example.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide prominent notice or obtain your consent where required by law. Your continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
815 Nexus Social
Email:
support@example.com
Privacy Officer: Available via email for privacy-related inquiries
© 2025 815 Nexus Social. All rights reserved.