Privacy Policy

1. Information We Collect

Information you provide directly

• Account registration — name, email address, and password when you create a portal account.
• Profile information — any additional details you add to your account.
• Communications — messages you send us via email or contact forms.
• Payment information — processed securely by our payment provider; we do not store card details on our servers.

Information collected automatically

• Usage data — pages visited, time spent, links clicked, and other interaction data.
• Device information — browser type, operating system, IP address, and referring URLs.
• Cookies — session cookies required for authentication, and optional analytics cookies (see Section 6).

Social media account data

When you connect a social media account (Instagram, Facebook, LinkedIn, TikTok) through our client portal, we collect and store the OAuth access tokens, account identifiers, profile names, and analytics data returned by those platforms. We only request the permissions necessary to provide the features you use.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and deliver our services.
• Display your connected social media analytics within the portal.
• Schedule and publish social media content on your behalf when you request it.
• Send you transactional emails (account confirmations, password resets, session alerts).
• Respond to your enquiries and provide customer support.
• Improve and personalise your experience on our platform.
• Comply with legal obligations.

We do not sell your personal data to third parties.

3. Legal Basis for Processing (UK/EU)

If you are located in the UK or European Economic Area, we process your personal data under the following legal bases:

• Contract — processing necessary to provide the services you have signed up for.
• Legitimate interests — improving our platform, preventing fraud, and ensuring security.
• Consent — where you have opted in to marketing communications or non-essential cookies.
• Legal obligation — where we are required to process data by law.

4. Data Sharing and Disclosure

We may share your information with:

• Service providers — trusted third parties who help us operate our platform (hosting, database, email delivery). They are contractually bound to protect your data.
• Social media platforms — when you authorise us to post content or retrieve analytics on your behalf, data is exchanged with those platforms under their respective terms.
• Legal authorities — where required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Social media access tokens are deleted immediately upon disconnecting an account.

6. Cookies

• Essential cookies — required for authentication and security. Cannot be disabled.
• Analytics cookies — help us understand how visitors use the site. You can opt out at any time.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to the portal.

7. Security

We implement industry-standard security measures including HTTPS encryption, hashed password storage, and access controls. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorised access to your account.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@socialhub.academy. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date, and where appropriate, by email. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: