Privacy Policy

This policy applies to Social Monkey, including the public website, authenticated app, AI assistant, post composer, media library, connected account workflows, admin tools, notifications, and related API routes. Third-party platforms you connect, such as Meta, Google, Microsoft, Facebook, Instagram, or Google Business Profile, also process information under their own privacy policies and account settings.

• Account data, such as your name, email address, sign-in details, user ID, role, preferences, and legal acceptance records.
• Workspace content, such as business profile details, post drafts, captions, creative notes, calendars, saved ideas, customer notes, uploaded media, comments, inbox items, and task history.
• Connected account data, such as account labels, page or location IDs, approved OAuth scopes, connection status, token expiration dates, and encrypted access or refresh tokens needed to provide connected features.
• Google Business Profile data you authorize, such as business accounts, locations, local post details, and posting or sync results.
• Meta data you authorize, such as Facebook Page information, linked Instagram professional account information, permissions, engagement metadata, post/comment data, and publishing information when those features are enabled and approved.
• AI interaction data, such as prompts, chat messages, post planning context, calendar context, and generated outputs used to provide Social Monkey AI features.
• Device and usage data, such as browser type, IP address, request logs, authentication cookies, local storage values, service worker cache entries, push subscription details, and diagnostics needed to run and secure the app.

Social Monkey uses authentication cookies, browser local storage, service worker caching, and push subscription records so the app can keep users signed in, save draft work, remember preferences, load faster, and send notifications you enable. Some post drafts and preferences may be stored in your browser until you clear them, reset the app, or use browser controls to remove site data.

• Provide the Social Monkey workspace, including drafting, scheduling, media, inbox, customer, notification, and approval workflows.
• Authenticate users, maintain sessions, prevent abuse, secure accounts, and enforce admin access.
• Connect to third-party platforms you authorize, such as Meta, Google Business Profile, Microsoft Outlook, or other supported channels.
• Generate AI-assisted drafts, research responses, summaries, preference suggestions, and calendar descriptions.
• Store uploads, post records, connection records, and workflow history so the app can work across sessions.
• Troubleshoot errors, monitor security, respond to support requests, and comply with legal obligations.

When you use AI features, Social Monkey may send your prompts, messages, drafts, calendar context, business profile context, customer notes, or other workspace content to OpenAI or another configured AI provider to generate a response. Do not enter information you do not want processed by an AI provider. AI outputs should be reviewed before publishing or sending.

If you connect Meta, Google Business Profile, Microsoft, or another channel, Social Monkey uses the permissions you approve to discover authorized accounts, display connection status, prepare content, publish or sync supported items, and retrieve supported results. Access and refresh tokens are encrypted before database storage where live OAuth connections are implemented.

Social Monkey does not sell Meta Platform data or use it for surveillance, profiling unrelated to the app, or cross-context advertising. Meta and Google may still process information under their own terms and privacy policies when you use their platforms.

Social Monkey's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We may share information with service providers that help operate Social Monkey, including:

• Supabase, for authentication, database, storage, and session cookies.
• Hosting and infrastructure providers, for website hosting, server logs, delivery, and security.
• OpenAI or other configured AI providers, for AI chat, drafting, summarization, planning, and related generation features.
• Meta, including Facebook and Instagram APIs, when you connect Meta accounts or pages.
• Google APIs, including Google Business Profile APIs, when you connect Google accounts or business locations.
• Microsoft services, if Outlook or Microsoft-connected workflows are enabled.
• Email, security, browser push, and support providers, when those services are configured for alerts, authentication, or notifications.

We may also disclose information if required by law, to protect rights and safety, to investigate abuse or security issues, or in connection with a business transfer such as a merger, acquisition, financing, or sale of assets.

As of the effective date above, Social Monkey does not sell personal information and does not share personal information for cross-context behavioral advertising. If this changes, the policy will be updated and any legally required choices will be provided.

We keep information for as long as needed to provide the app, maintain your account, support connected features, comply with legal obligations, resolve disputes, prevent abuse, and maintain security. OAuth tokens and connected account records are retained while the connection is active or as needed for security and records. Browser-stored drafts and preferences remain under your control in your browser. Deleted data may remain in backups or logs for a limited time before being removed according to provider and operational schedules.

You can choose not to connect third-party platforms, disconnect connected accounts, clear browser site data, disable notifications, or stop using AI features. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or appeal related to your personal information.

To make a privacy request, email info@socialmonkeyai.com. We may need to verify your identity before fulfilling a request. We may retain certain information when required or permitted by law, including for security, fraud prevention, legal compliance, or dispute resolution.

To request deletion of your Social Monkey account data or data received through Meta, Facebook, Instagram, Google Business Profile, or another connected platform, email info@socialmonkeyai.com with the subject line "Social Monkey Data Deletion Request." Include the email address for your account and the connected page, profile, or business location you want removed.

You can also remove Social Monkey's access from the connected platform's own account or business integration settings. Removing access at the platform may stop future access, but it may not automatically delete records already stored in Social Monkey, so contact us if you want stored data deleted too.

We use reasonable administrative, technical, and organizational safeguards intended to protect information, including encrypted token storage for implemented OAuth connections and hardened authentication cookies. No website, app, storage system, or internet transmission can be guaranteed to be completely secure.

Social Monkey is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

Social Monkey is operated from the United States. Information may be processed in the United States and other countries where our service providers operate. Those countries may have privacy laws that differ from the laws where you live.

We may update this Privacy Policy from time to time. The effective date above shows when this version became effective. If changes are material, we may provide notice through the app, website, or account email when practical.

For privacy questions or requests, contact Social Monkey at info@socialmonkeyai.com.