Privacy Policy

Crossocial ("Crossocial," "we," "us," or "our") provides tools that help organizations plan, schedule, and publish content to their connected social-media accounts. This Privacy Policy applies to the Crossocial website at crossocial.com, our applications, and related services (collectively, the "Service").

The data controller for personal information processed under this policy is Crossocial, which operates the website at crossocial.com. For privacy questions or requests, contact us at [email protected].

We collect information needed to provide, secure, and improve the Service.

• Account and organization information: your name, email address, password hash, organization name, role, profile details, and account settings.
• Content you choose to use with the Service: post text, captions, scheduling details, media files, tags, and related publishing settings.
• Connected-channel information: identifiers, display names, profile images, and access or refresh tokens supplied by a social platform after you authorize a connection. We encrypt channel tokens at rest and use them only to operate the connection you requested.
• Service and security information: sign-in and session information, IP address, browser or device details, request logs, error records, and activity needed to prevent abuse and troubleshoot the Service.
• Communications: information you provide when you contact us, including support requests and feedback.

• Provide the Service, including creating accounts, storing your content, and scheduling or publishing posts you direct us to publish.
• Maintain the security, availability, and integrity of the Service, including authentication, fraud prevention, and incident response.
• Respond to support requests and send essential service communications such as account, security, or policy notices.
• Analyze and improve the Service using aggregated or de-identified information where practical.
• Comply with applicable law and enforce our agreements.

We do not sell your personal information. We share information only as needed for the purposes described here:

• Social platforms you connect: when you ask us to publish or otherwise interact with a connected channel, we send the required content and account authorization to that platform. Its own privacy policy also applies.
• Service providers: providers that host infrastructure, store media, deliver email, or help us operate and secure the Service, under contractual obligations to protect the information.
• Your organization: authorized members and administrators of your organization may access information made available through the Service according to their permissions.
• Legal and safety reasons: when reasonably necessary to comply with law, protect rights or safety, prevent fraud, or respond to a valid legal process.
• Business transfers: in connection with a merger, financing, acquisition, or sale of assets, subject to this policy or equivalent protections.

We use essential cookies to keep you signed in and protect account and connection flows. These cookies are necessary for the Service to work. We do not use advertising cookies or use information from the Service for cross-context behavioral advertising. You can control cookies through your browser, but disabling essential cookies may prevent the Service from functioning.

We retain information for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Content and account records may be retained in backups for a limited period after deletion. We use reasonable administrative, technical, and organizational safeguards, including encryption for channel tokens at rest and access controls. No method of transmission or storage is completely secure.

You may update certain account information in the Service, disconnect a social channel, or ask us to access, correct, delete, restrict, or export your personal information. You may also object to processing based on legitimate interests where applicable. To make a request, contact [email protected].

If you are in the European Economic Area, United Kingdom, or Switzerland, we process information as necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as security and service improvement, or with your consent where required. You may lodge a complaint with your local data-protection authority.

If you are a California resident, you may have rights to know, correct, or delete personal information, and to limit certain uses of sensitive personal information. We do not sell or share personal information as those terms are defined by California privacy law. We will not discriminate against you for exercising applicable rights.

We may process information in countries other than where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections approved by the relevant regulator.

The Service is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

We may update this policy from time to time. If we make material changes, we will provide notice through the Service or by another reasonable method before the changes take effect. The effective date above tells you when this policy was last revised.

Your use of the Service is also governed by our Terms of Service.