1. Who we are and what this policy covers
Social Rocket AI (“Social Rocket AI”, “we”, “us”, or “our”) provides an AI-powered social media management platform that helps creators, businesses, and agencies create, schedule, and publish content across multiple social networks. We are based at 5900 Balcones Drive #20268, Austin, TX 78731, USA.
This Privacy Policy explains how we handle personal information when you visit socialrocketai.com (including our blog), use the Social Rocket AI web app at app.socialrocketai.com, use our iOS or Android apps, connect a social media account, or contact us. Together, these are the “Service”.
Using the Service is also governed by our Terms of Service. If you want to delete your data or disconnect a social account, follow our Data Deletion Instructions.
2. Information we collect
We collect information in three ways: information you give us, information collected automatically when you use the Service, and information we receive from social platforms you choose to connect.
Information you provide
- Account and contact information, such as your name, email address, and the login details you use to create and access your account.
- Workspace information, such as brand descriptions you save for AI assistance, workspace, agency, and customer names, and the details of team members you invite.
- Content you create or upload, including captions, hashtags, prompts for AI features, images, videos, media library files, drafts, scheduled posts, publishing times, and approval decisions.
- Website monitoring details, such as the website addresses you ask us to monitor for uptime and SSL status.
- Billing information for paid plans. Checkout is handled by Stripe, our payment processor. We do not receive or store your full card number; we receive limited information such as your plan, subscription status, and transaction records.
- Support communications, such as the name, email address, and message you send through our contact form, emails and phone calls with our team, messages sent through our website chat assistant, and messages you send us on WhatsApp.
- Affiliate applications, including your name, email address, website, audience size, and message.
- Blog comments, including the name and comment you submit. Comments are displayed publicly on our blog, so please do not include information you do not want to share.
Information collected automatically
- Log and device information, such as IP address, browser type and version, operating system, device type, referring pages, and the date and time of requests.
- Usage information, such as pages viewed, features used, clicks, scrolling, and how you navigate the website.
- Cookies and similar technologies used for analytics, spam protection, and the chat assistant. See Cookies and similar technologies.
Information from connected social platforms
When you connect a social account, we receive the information that platform shares with us under the permissions you approve, such as account or Page details and access tokens. This is explained in detail in Information from connected social platforms.
3. How we use information
We use personal information to:
- Provide, operate, and maintain the Service, and create and manage your account and workspaces.
- Connect the social accounts you choose and publish or schedule the content you ask us to publish.
- Generate AI captions, hashtags, images, and other content when you use AI features, using the prompts, brand descriptions, and media you provide.
- Adapt and reframe media for the platform formats you select.
- Show publishing status, run pre-publish checks, and support approval workflows in your workspace.
- Monitor the websites you add and alert you to uptime or SSL issues.
- Process payments, manage subscriptions and trials, and keep billing records.
- Respond to support requests, affiliate applications, and other messages.
- Send service-related communications, such as account, security, and billing notices. Where we send marketing messages, you can opt out at any time.
- Understand how the website is used and improve the Service.
- Detect and prevent spam, fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
Where data protection laws require a legal basis (for example, in the EEA or UK), we rely on: performing our contract with you; our legitimate interests in operating, securing, and improving the Service, where those interests are not overridden by your rights; your consent, where we ask for it; and compliance with legal obligations.
7. Third-party services
The Service relies on third-party services, and our website links to third-party sites (for example, our WhatsApp chat link and official social media profiles). These services process information under their own terms and privacy policies, which we encourage you to read:
- Stripe (payments): Stripe Privacy Policy
- Google Analytics and reCAPTCHA: Google Privacy Policy
- Microsoft Clarity: Microsoft Privacy Statement
- ChatCactus (website chat assistant): ChatCactus Privacy Policy
- WhatsApp (if you message us there): WhatsApp Privacy Policy
Social platform policies are listed in Information from connected social platforms. We are not responsible for the practices of third-party services we do not control.
8. Data retention
We keep personal information only as long as we need it for the purposes described in this policy:
- Account and workspace data, including content and media, is kept while your account is active and deleted when you or we close the account, subject to the exceptions below.
- Social account connection data, including access tokens, is kept while the account is connected. Once access is revoked, the credentials can no longer be used to access the account; we delete connection data when you ask us to, as described in our Data Deletion Instructions.
- Support, affiliate, and contact records are kept as long as needed to respond and to keep a reasonable record of our communications.
- Billing and transaction records are kept for as long as required for tax, accounting, and legal purposes.
Deleted data may remain in backups for a limited period until those backups are overwritten through normal cycles. We may also keep information where we are legally required to, to resolve disputes, to enforce our agreements, or to prevent fraud and abuse. Information that has been aggregated or de-identified so it no longer identifies you may be kept for analytics and service improvement.
9. Security
We use reasonable technical and organizational safeguards designed to protect personal information. These include encrypting traffic in transit with HTTPS, using official platform APIs and their authorization models for account connections, using Stripe for payment card processing, protecting forms against automated abuse, and limiting internal access to people who need it.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You can help by using a strong, unique password and keeping your login details private. If you believe your account has been compromised, contact us right away at [email protected]. Read more on our Security page.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access – ask for a copy of the personal information we hold about you.
- Correction – ask us to correct inaccurate or incomplete information.
- Deletion – ask us to delete your personal information.
- Portability – ask for a copy of certain information in a portable format.
- Restriction and objection – ask us to limit or stop certain processing.
- Withdraw consent – where we rely on consent, withdraw it at any time.
Regardless of where you live, you can revoke Social Rocket AI’s access to your social accounts at any time, unsubscribe from marketing emails, and request deletion by following our Data Deletion Instructions.
To make a request, email [email protected] from the email address linked to your account. We may need to verify your identity before acting on a request, and some rights have legal exceptions. Where applicable, you may also complain to your local data protection authority.
11. International data transfers
Social Rocket AI is based in the United States, and our service providers and the social platforms we integrate with may process information in other countries. As a result, your information may be processed in countries whose data protection laws differ from those where you live. Where required, we take steps to ensure appropriate safeguards are in place for these transfers.
12. Children’s privacy
The Service is designed for businesses, creators, and professionals and is not directed at children. As set out in our Terms of Service, you must be at least 18 years old (or the age of majority where you live) to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.
13. Changes to this policy
We may update this Privacy Policy as the Service or the law changes. We will change the “Last updated” date at the top of this page and, for significant changes, give additional notice, such as an email or an in-app message. Continuing to use the Service after an update means the updated policy applies.
14. Contact us
For privacy questions or requests, contact us:
- Email: [email protected]
- Phone: +1 (512) 804-8810 (Monday to Friday, 9 AM – 6 PM EST)
- Mail: Social Rocket AI, 5900 Balcones Drive #20268, Austin, TX 78731, USA
- Online: our contact page
4. Information from connected social platforms
Social Rocket AI supports publishing to Facebook, Instagram, Threads, LinkedIn, X (formerly Twitter), Pinterest, TikTok, TikTok Business, YouTube, and Bluesky. You decide which accounts to connect. Connections use the authorization method each platform provides through its official API. We do not ask for the password to your main social media account; where a platform issues an access token or similar credential, we store it so the connection keeps working.
What we may receive
Depending on the platform and the permissions you grant, we may receive:
How we use it
We request only the permissions needed for the features you use, and you can review them on each platform’s authorization screen. If you decline a permission, the related feature may not work. If we add features that need additional access, we will ask for it through the platform and update this policy.
Our commitments for platform data
Disconnecting and revoking access
You can revoke Social Rocket AI’s access at any time from the platform’s own settings, or ask us to disconnect an account and delete its data. After access is removed, Social Rocket AI can no longer publish to that account, so scheduled posts for it will not be published. Step-by-step guidance is on our Data Deletion Instructions page.
Platform policies
Each platform also processes your information under its own terms and privacy policy. Content you publish through Social Rocket AI becomes subject to that platform’s rules once it is posted.
YouTube
Social Rocket AI uses YouTube API Services to publish to YouTube channels you connect. By connecting YouTube, you agree to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy. You can revoke Social Rocket AI’s access to your Google account at any time from the Google security settings page.