Privacy policy
Effective 17 September 2026 · Grandfield Media Private Limited, Hyderabad, India
What we hold
Your email and name; the workspace, brand and voice details you enter (including a logo if you add one); the videos and images you upload and every version we make from them, with their transcripts and the captions we write; the social accounts you connect and the access tokens they give us (stored encrypted); your plan, invoices and support tickets; and the technical logs needed to run the service.
Where it lives
Your uploads and the versions we make are stored on our media servers (Hetzner, Finland) and the application database runs on Supabase in the United States (AWS Northern Virginia) with the application on Vercel. Backups are encrypted and kept at Backblaze. If you are in India, this means your data is transferred outside India to be processed; by using Socialitz you consent to that transfer.
What we do with your content
Only what you asked for: we cut, resize, subtitle and caption it, and publish it to the accounts you connected when you press publish (or, if you switch on auto-publish, as soon as it is ready). Speech is transcribed on our own servers. Captions and hashtags are written with the help of an AI model provider (Anthropic); the transcript, a few frames and your brand notes are sent for that purpose and are not used to train models. We never post anything you did not approve, never sell your content, and never use it for our own marketing.
Connected networks
When you connect Instagram, Facebook, YouTube or LinkedIn we ask each network only for the permission to read your channels and publish on your behalf. Tokens are stored encrypted and used only to publish your posts. Disconnecting a channel deletes its token immediately. We follow each network's platform terms; the Meta Platform Terms, Google API Services User Data Policy (including Limited Use) and LinkedIn API terms apply to the data we receive from them.
Data deletion for connected networks
To remove data Socialitz holds about your Facebook, Instagram, LinkedIn or YouTube account: disconnect the channel in the app (this deletes the token and the channel record), or write to socialitz@grandfieldmedia.com. Deletion requests sent by Meta's Data Deletion Callback are honoured automatically and you can check one by its code at /data-deletion.
Who else sees it
Payment details go to Razorpay; we never see your card. Email goes through Resend. Nobody else, and we do not sell or share personal data with advertisers.
How long
Uploads and their versions stay until you delete the post or your account. Invoices are kept as tax law requires. Logs are rotated within 90 days.
Your rights
See, correct or delete your data any time: write to socialitz@grandfieldmedia.com. Deleting your account removes your workspace and everything in it, including uploads, versions, connections and tokens; invoices are kept as tax law requires.
Cookies
One session cookie to keep you signed in. No advertising cookies, no third-party trackers.
Contact
Grandfield Media Private Limited, Hyderabad, India · socialitz@grandfieldmedia.com · +91 92479 12081.