Legal
Privacy Policy
Last updated 9 September 2026.
SocioPro is a social scheduling product. This page explains what we collect when you use sociopro.sigmarocks.com and why. It is written for Meta, Google, and anyone connecting a channel through SocioPro. Use of SocioPro is also covered by our Terms of Service. For deletion steps, see Account and data deletion.
What we collect
- Account: name, email, and password (stored hashed).
- Social connections: Facebook Page, Instagram professional account, and YouTube channel names, IDs, avatars, and OAuth access tokens (stored encrypted). Instagram tokens expire; YouTube refresh tokens are stored so publishing can continue.
- Content: captions, titles, scheduled times, attached media, and publish results per network.
- Billing: plan, subscription status, and payment-provider identifiers (Stripe or Razorpay). We do not store full card numbers.
- Usage: session cookies, logs needed to run the app, and team membership if you invite others.
How we use it
We use this data only to run SocioPro: authenticate you, connect channels, schedule and publish posts to the networks you choose, bill your plan, and send account emails (for example session expiry or payment receipts). We do not sell your data and we do not post on your behalf except at the times and to the accounts you select.
Google user data
When you connect YouTube, SocioPro accesses Google user data through the YouTube Data API (OAuth scopes for channel read and video upload). That includes your YouTube channel identity (name, ID, avatar), OAuth access and refresh tokens, and the video metadata and media you choose to publish.
We use Google user data only to list your channel, keep your connection working, and upload videos you schedule in SocioPro. We do not use Google user data for advertising, analytics products sold to others, credit decisions, or AI/ML model training.
Sharing, transfer, and disclosure of Google user data
We do not sell Google user data. We do not transfer or disclose Google user data to third parties for purposes other than operating SocioPro as described on this page.
- Google / YouTube: we send video files and metadata back to Google’s YouTube APIs when you publish, and we use Google’s OAuth token endpoints to obtain and refresh tokens.
- Infrastructure providers: SocioPro runs on hosted servers and related infrastructure that process data solely to store and operate your account. Those providers act as processors under our instructions and are not permitted to use Google user data for their own purposes.
- Your workspace teammates: if you invite others to your SocioPro team, they can see connected channel names and content you schedule in the shared workspace. They do not receive raw OAuth tokens.
- Legal requests: we may disclose data if required by law, regulation, or valid legal process.
Payment processors (Stripe or Razorpay) receive SocioPro billing information for your subscription. They do not receive YouTube OAuth tokens or other Google user data from SocioPro.
Who else sees non-Google data
- Meta: Facebook and Instagram Login, to list pages or profiles and to publish.
- Stripe or Razorpay: to charge the plan you pick.
Their own policies apply once data is sent to them for those purposes.
Data protection for sensitive data
Security procedures are in place to protect the confidentiality of your data, including Google user data and OAuth tokens.
- Encryption in transit: SocioPro is served over HTTPS/TLS so data moving between your browser and our servers is encrypted.
- Encryption at rest: OAuth access and refresh tokens for connected social accounts (including YouTube) are encrypted before storage in our database. Account passwords are stored hashed, never in plain text.
- Access controls: tokens and Google user data are available only through authenticated SocioPro sessions for your account (and authorized team members for workspace content). Application secrets and encryption keys are kept out of client-side code.
- Least privilege: we request only the Google scopes needed to read your channel and upload videos you schedule.
How long we keep it
Account, posts, media, and tokens stay until you disconnect a channel or delete your SocioPro account. Instagram long-lived tokens last about 60 days unless you reconnect. Server logs are kept only as long as needed to operate and debug the service.
Your choices
You can disconnect a social account at any time from Connected accounts. You can delete your SocioPro account from Profile, which removes your posts, media, and stored tokens. Already-published posts on Facebook, Instagram, or YouTube stay on those networks unless you delete them there. Step-by-step deletion is on our User data deletion page.
Contact
Questions about this policy: use the contact form or the email on your SocioPro account.