Privacy Policy
Last updated: October 12, 2026
Clear information about our service, your data, and your choices.
1. Who we are and what this notice covers
2. Information we collect
- Account and contact information: name, email address, phone number when supplied, login identifiers, business details, team membership, communication preferences, and support requests. Google sign-in supplies the profile information you authorize, such as name, email address, and account identifier.
- Content and connected accounts: drafts, images, videos, prompts, scheduled posts, publishing results, authorized social account identifiers, access credentials or tokens, and engagement information made available by connected services.
- Billing information: plan, subscription status, billing contact details, transaction references, and payment status. Stripe processes payment details; we receive the billing information needed to administer your account.
- Usage and device information: IP address, browser and device details, approximate location inferred from IP, pages and features used, clicks, scrolling, error logs, timestamps, referral sources, and campaign parameters such as UTM tags.
- Communication information: delivery, bounce, unsubscribe, click and open events where tracking is used, push subscription identifiers, and consent or preference records. Email-open tracking can be affected by email-client privacy features.
3. How we use information
4. Service providers and integrations
| Provider or service | Purpose and information involved |
|---|---|
| OneSignal | Email, SMS, push and in-app messaging. We provide contact details, account identifiers, names, relevant activity events and preferences to help deliver and personalize communications. OneSignal is a delivery provider; it does not supply your email address simply because you visit our site. |
| Elastic Email and Brevo | Contact-list management, email delivery, campaign measurement, bounce handling and unsubscribe suppression, using contact and messaging-event information. |
| Google Analytics | Website and application usage measurement, referrals and conversions, using device, browser and interaction information and applicable identifiers. |
| Microsoft Clarity | Heatmaps, session replay and interaction analysis to understand usage and troubleshoot problems, using page views, clicks, scrolling, device information and related identifiers. |
| Stripe | Customer and subscription administration, payment processing and billing records, including for free accounts where a billing customer record is created. |
| Cloudflare and hosting providers | Hosting, content delivery, security, abuse prevention and bot checks, using network, request and device information. Signup bot checks use Cloudflare Turnstile. See the Cloudflare Turnstile Privacy Addendum for information about its processing. |
| Social networks, Google services, Slack and AI providers | Features you request, such as connecting an account, importing media, generating content, publishing a post or sending a notification. Relevant content and authorization information are shared as needed for the chosen feature. |
5. Cookies, analytics and session replay
You can manage cookies through your browser and any cookie controls presented on the site. Blocking storage may affect functionality. Where consent is required for non-essential tracking, it must be obtained separately; accepting the Terms or reading this policy is not a substitute for that consent. See how Google uses information, Google Analytics opt-out, and the Microsoft Privacy Statement.
6. Email, SMS and push choices
SMS/MMS. Promotional text messages require the applicable affirmative consent. Providing a phone number, creating an account, accepting these policies or consenting to email marketing does not by itself authorize promotional texts. SMS consent is optional and is not a condition of purchasing or using the service. See the SMS program terms for frequency, charges, STOP and HELP instructions.
Mobile information. We do not sell or share mobile phone information, SMS opt-in data or SMS consent with third parties or affiliates for their own marketing or promotional purposes. We may disclose the information to messaging platforms, carriers and service providers only as needed to deliver and administer the messaging service, honor preferences, or comply with law.
Push. Browser or device permission controls whether push notifications can be delivered. You can turn them off in browser or device settings. Permission for one communication channel does not imply permission for another.
7. Google data and other connected services
You can disconnect integrations and revoke Google access through Google account permissions. Revocation stops future authorized access but does not automatically remove posts already published on another platform. You can request deletion of imported or retained data by contacting us. Connected platforms also have their own policies, including the Google Privacy Policy.
Slack connections may involve workspace and channel identifiers, authorization tokens and the content of notifications you choose to send. AI features send the inputs needed for the requested task to the configured AI provider. Review content before submitting it and avoid providing information you lack permission to disclose.
8. Retention and security
We use technical and organizational safeguards to protect information. No system or transmission method is completely secure. Keep your credentials secure and report suspected unauthorized access promptly.
9. Your rights and requests
For people in the EEA, UK or Switzerland, processing may rely on performing our contract, legitimate interests such as security and service improvement, consent where required, or legal obligations. You may complain to your local supervisory authority. Withdrawal does not affect processing that was lawful before withdrawal. If a request is denied, you can contact us to request review or appeal where applicable.
10. International processing and children
11. Changes and contact
12. SocialBlaze mobile app
This section covers the SocialBlaze iPhone and Android app, including its beta and sample workspace. The account, content, security, service-provider and privacy-request provisions above also apply to live mobile account features.
Camera, photos and voice captions
Camera and selected-photo access are optional and requested when you choose the relevant feature. Captured or selected images and videos are used to compose content. Media added to a live business library is uploaded when you add it; media in a live draft is uploaded when you save it. Remove a selection before saving if you do not wish to upload it.
Voice captions request microphone and speech-recognition permission when you start dictation. Your device’s speech-recognition service may process audio remotely under Apple’s or Google’s applicable privacy terms. SocialBlaze does not retain a dictation audio recording. Recognized text is shown for review and becomes post content when you choose to add it. You can stop dictation and revoke permissions in device settings.
Device storage and demonstration mode
The native app stores your sign-in token using secure device storage on iOS and Android. Keep caption stores text locally for your account; it does not save photos or upload that local copy. This caption copy is not encrypted. Use Clear device copy in the composer to remove it and avoid saving sensitive information.
Open demo workspace uses labeled sample posts, conversations and analytics. Demo actions do not publish to social networks or upload selected media. Device dictation can still involve the device’s speech-recognition provider.
AI and browser features
Business discovery and post ideas use OpenAI. Before requesting these features, the app presents a choice about sharing website content, approved business details and selected products or services for AI processing. Review results before saving. See OpenAI’s privacy policy.
Some advanced tools open the web members area in a browser. Website cookies, analytics, session replay, messaging and billing described above apply where those web tools use them; they are not all embedded native-app SDKs. Network and server security logs may be created when the app communicates with our services.
Sign in with Apple and notifications
On supported Apple devices, Sign in with Apple supplies your account identifier and, when authorized, your name and email address. You may choose Apple’s private email relay instead of disclosing your email address. We verify Apple’s signed response and store the authorization refresh token encrypted on our server. We use it for authentication and revoke it during account deletion; it is not used for advertising. Existing accounts are not silently linked by an unverified email address.
Optional phone notifications use your device push token and SocialBlaze account identifier through OneSignal and Apple or Google. We store the subscription identifier and a hash of the device token. You may disable notifications in app or device settings. Face ID and device authentication remain on your device; we do not receive your biometric data. Motion readings for Ideas shuffle stay on your device.
Account and data deletion requests
To delete your SocialBlaze account in the app, open Account settings → Delete SocialBlaze Account, review the scope and confirm using a code sent to your account email. Access closes immediately after confirmation. Cleanup normally starts after at least an hour and is expected within 30 days. We send a completion email; your secure receipt lets you check status after signing out. Required billing or legal records and media referenced by another account may be retained. Your SocialBlaze Stripe subscription is canceled during cleanup.
Alternatively, to request deletion of your SocialBlaze account and associated personal data, email [email protected] with the subject “SocialBlaze account deletion” and identify the account email. You may also request deletion of particular uploaded content or connected-service data. Do not send a password or identity document in your initial request. We may verify control of the account before acting.
Deleting the app, signing out or disconnecting a channel does not itself delete your account. Published posts on other social networks must be managed with those platforms. Retention exceptions are described in section 8.
