Privacy Policy

Last updated: September 2026

Placeholder — requires your input

This policy describes the data flows that exist in the product today. Before you open Socialy to the public, have it reviewed against the jurisdictions you operate in, and fill in your legal entity name, registered address and data-controller details below.

1. About Socialy

Socialy is a social media analytics dashboard. Account holders (“agencies”) use it to track follower counts and engagement metrics for the social accounts they manage on behalf of their own clients.

2. Data we collect

When you create an account, we store your email address, name and a hashed password.

When you connect a Facebook Page or an Instagram professional account via Facebook Login, we receive and store:

Your Facebook user access token and the Page access token, stored encrypted
Your app-scoped Facebook user ID and the permissions you granted
The Facebook Page ID and the linked Instagram account ID
Account metrics: follower count, following count, media count, display name, profile picture URL, and, where you granted Insights access, reach and views
For recent posts: captions, links, thumbnails, likes, comments, shares, saves, reach and views

For YouTube channels we use the YouTube Data API to read public channel and video statistics (subscribers, views, likes, comments). No Google account login is involved. Socialy's use of YouTube data is subject to the YouTube Terms of Service and the Google Privacy Policy.

Accounts that aren't connected are tracked from publicly visible profile data, and labeled as public data in the product.

3. How we use your data

Access tokens are used solely to read the connected account's metrics through Meta's official APIs (Facebook Pages API and Instagram Graph API). They are never shown in the browser. Passwords are stored only as bcrypt hashes and are never readable by us. We do not sell, share or transfer your data to third parties.

4. Data retention

Meta asks for a new login roughly every 90 days; until then access tokens are kept encrypted. Disconnecting an account deletes its tokens immediately. Metric snapshots are retained so historical trends stay available in your reports. Deleting your account removes your account record and the client, account and snapshot data attached to it.

5. Your rights

You can disconnect a social account at any time from the client's page, or remove Socialy from your Facebook settings and request deletion - see Data deletion. You can delete your entire account, and everything attached to it, from Settings → Danger zone. Depending on where you live you may also have the right to request a copy of your data, or to have it corrected.

6. Cookies

Socialy sets a session cookie when you sign in. It is required for the product to work and is not used for advertising or cross-site tracking. We do not use third-party analytics or advertising cookies.

7. Contact

For privacy questions, or to request deletion of your data, get in touch via the support page.