Privacy Policy

Last updated: 2026. Social Publisher ("we", "the Service") connects your AI assistant to your Facebook Page(s) and X (Twitter) account(s).

What we collect

Account data: your email address and a salted hash of your password (we never store your password in plaintext).
Connected brands: for each brand you connect, your Facebook Page tokens and X (Twitter) API keys (consumer key/secret and access token/secret), along with the Page ID and X handle. These credentials are encrypted at rest (AES-GCM) and are used only to post to Facebook and X on your behalf.
Usage: counts of actions (e.g., posts created per month) for plan limits, and an audit log of administrative actions.
Billing: payments are processed by Stripe. We store a Stripe customer ID; we do not store card details.

How we use it

To operate the Service: authenticate you, post to your Facebook Pages and X accounts, enforce plan limits, process subscriptions, and provide support. We do not sell your data or use your content to train models.

Your content

Content you post or schedule flows directly between the Service and Facebook or X. We do not retain copies of your posts beyond what is necessary to perform a requested action.

Security

Facebook Page tokens and X (Twitter) API keys are encrypted at rest with a key held only as a server secret. Transport is over HTTPS. You can disconnect a brand at any time, which deletes its stored credentials.

Data retention & deletion

Disconnecting a brand deletes its credentials. Deleting your account removes your account, connections, and usage records and cancels any active subscription. Email us to request deletion.

Contact

Questions: warren@lavall.ee · social.lavall.ee.