Legal Document

Privacy Policy

This policy explains how Soosh collects, uses, and protects your personal information, including data from connected social media platforms.

Last updated: May 2026 · Version 1.2

Compliant with:Google API ServicesMeta PlatformTikTok APILinkedIn APIWhatsApp Business
1

Introduction & Who We Are

Soosh ("Company," "we," "our") is a social media content management platform that enables automated publishing across multiple social media platforms.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.

Privacy Contact:

📧 support@soosh.me

🌐 soosh.me

2

Information We Collect

Information You Provide:

•Full name, email address and password (encrypted) upon registration
•Business details: business description, website URL, phone number (optional)
•Content: video files, text, AI instructions you enter
•Settings, business goals, and parameters configured in the Service

Information from Connected Platforms:

•Access tokens for platforms you connect (LinkedIn, YouTube, Facebook/Instagram, TikTok, WhatsApp)
•Account name, account ID, and profile picture from connected platforms
•Performance data: views, likes, comments, and shares (for analytics display)
•Comments received on published posts

Technical Information (Automatic):

•IP address, browser type and version
•Usage data: pages viewed, time spent, actions taken
•Cookies (see Section 9)
3

How We Use Your Information

We use collected information solely for the following purposes:

•Service Delivery: Publishing content on your behalf to connected platforms
•AI Content Generation: Analyzing uploaded video to create marketing text
•Analytics: Displaying performance data and tracking goals
•Support: Responding to inquiries and resolving issues
•Service Improvement: Anonymous analysis of usage patterns to improve the product
•Communications: Sending system notifications and important service updates

We never sell, rent, or trade your personal information to third parties — ever.

4

Third-Party Platforms, Specific Policies

Google / YouTube:

Soosh uses YouTube API Services to publish content to YouTube on your behalf. In accordance with Google API Services User Data Policy:

•Access to YouTube data is made only with your explicit consent
•YouTube data is used solely for publishing content on your behalf, for no other purpose
•Limited Use Disclosure: Soosh's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements
•We do not store YouTube content beyond what is required for publishing
•To revoke permissions: Google Security Settings

Meta (Facebook & Instagram):

•We request access only to publish content and read basic analytics
•Meta access tokens are stored in encrypted form
•Data Deletion: You may request deletion of your Meta data via Facebook Settings > Apps and Websites > Remove Soosh, or by emailing support@soosh.me, we will delete your Meta data within 30 days

TikTok:

•Access to your TikTok account is used solely for publishing content
•We do not read private content, messages, or user data beyond what is required for publishing
•To revoke permissions: TikTok App > Profile > Settings > Privacy > Apps

LinkedIn:

•Access is limited to publishing content and reading basic performance data

WhatsApp Business API:

•Access is limited to sending messages via WhatsApp Business API only
•We do not read inbound messages
5

Sharing Information with Third Parties

We share information only in the following cases:

Service Providers: We work with technical vendors to operate the Service:

•Turso (Database), Secure storage of user data
•Cloudinary (Media Storage), Storing video and image files and serving them over a delivery network
•Vercel (Cloud Hosting), Infrastructure and file processing
•Anthropic Claude, Content processing and analysis for text generation
•OpenAI Whisper, Audio transcription from video files
•Google Gemini, Visual analysis of your video to understand what it shows
•Resend, Sending email from the service

All service providers are contractually bound to maintain data confidentiality and use it solely to provide the service.

Legal Disclosure: We may disclose information if required by law, court order, or competent authority.

Business Transfer: In the event of a merger, acquisition, or asset sale, user information may be included in the transferred assets. Prior notice will be given.

6

Data Storage & Deletion

Storage: Our database is hosted on Turso. Media files, video and images, are stored on Cloudinary and served through a global delivery network, so temporary copies may be held on edge servers outside Europe. Platform access tokens are encrypted.

Retention Periods:

•Account data, retained while the account is active. An account unused for 6 months is automatically disconnected from every network and its tokens are deleted. After 12 months a warning email is sent, and after 24 months the account and all its content are deleted. Signing in resets the clock
•Video files, deleted within 7 days of publishing
•Images you upload and cover images Soosh renders for you, kept with the post
•Post text, transcripts and the direction you wrote, retained until account closure
•Your brand kit, logo, colours and font, kept until you change or remove it
•Posts and analytics, retained until account closure
•Technical logs, deleted within 90 days

Account Deletion: You may request full account deletion via Settings > Account > Delete Account, or by emailing support@soosh.me. Within 30 days, all your data will be permanently deleted, except data we are legally required to retain.

Platform Data Deletion: Requests to delete Facebook/Instagram/TikTok/YouTube data will be processed within 30 days of submission to support@soosh.me.

7

Data Security

We implement high-level security measures to protect your information:

•Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
•Passwords: Stored as hash only (bcrypt), never in plain text
•Access Tokens: Encrypted and stored in a secure database
•Permissions: Principle of least privilege, staff access only what their role requires
•Monitoring: 24/7 monitoring systems to detect suspicious activity

No system is entirely immune. If you discover a security vulnerability, please notify us immediately at support@soosh.me.

8

Your Rights

Under applicable privacy laws including GDPR, you have the following rights:

•Access: Receive a copy of all personal information we hold about you
•Rectification: Correct inaccurate or incomplete information
•Erasure: Request deletion of your data ("right to be forgotten")
•Objection: Object to processing in certain circumstances
•Portability: Receive your data in a structured, commonly used format
•Withdraw Consent: Withdraw previously given consent for data processing

How to Exercise Rights: Send a request to support@soosh.me with identifying details. We will respond within 30 days.

9

Cookies

Soosh uses cookies for the following purposes:

•Authentication: Maintaining your logged-in state (session cookie)
•Preferences: Remembering settings and language
•Security: Protection against CSRF and other attacks

We do not use cookies for advertising, cross-site tracking, or sharing with ad networks.

You may configure your browser to reject cookies, but doing so may impair Service functionality.

10

Changes & Contact

Policy Updates: We may update this Policy. Material changes will be communicated at least 14 days in advance. Continued use constitutes acceptance of the updated Policy.

Privacy Inquiries:

📧 support@soosh.me

🌐 soosh.me

We respond to all inquiries within 5 business days. Deletion requests, within 30 days.

Data Protection Officer (DPO): You may contact our Data Protection Officer at support@soosh.me.

For data deletion requests or privacy questions: support@soosh.me