Skip to content
← Back to home
Privacy

Privacy policy

Last updated: October 31, 2026

This English version is provided for convenience. In case of any discrepancy, the French version prevails.

SociaFlow is designed to collect only what it needs. Your AI keys stay on your devices, your AI requests go straight to the provider you choose (or pass through our servers without being stored if you use SociaFlow AI), and we never sell data. This policy explains, purpose by purpose, what we collect, why, for how long, and how to exercise your rights.

01Data controller

The data controller is Louis Valli, who publishes SociaFlow under the name Smartcom (https://smartcom.digital), Rue les Allées 12, 5660 Couvin, Belgium, BE0664.627.568.

For any question about your data or to exercise your rights: contact@sociaflow.app. We have not appointed a Data Protection Officer (DPO), as this is not required for our activity; contact@sociaflow.app is the single point of contact.

02At a glance

  • No advertising, no tracking across apps or websites, no sale of data.
  • Your API keys (Claude, ChatGPT, Gemini) are stored in each device’s Keychain and are never sent to our servers (single exception: the Telegram bot, if you turn it on; see “Artificial intelligence”).
  • We do not use your content to train AI models.
  • Your workspace is synced between your devices through our servers, with access restricted to your account only.
  • You can delete your account at any time from the Mac app, the iPhone/iPad app, or by email.
  • With SociaFlow AI (the no-key option), your requests pass through our servers to Anthropic (text) and OpenAI (visuals): we do not keep their content, only usage counters (see “SociaFlow AI”).

03Scope

This policy covers the SociaFlow app for Mac, the SociaFlow app for iPhone and iPad, the related cloud services (account, sync, publishing, notifications, Telegram bot) and the sociaflow.app website.

It does not cover third-party services you connect to SociaFlow (social networks, AI providers, Telegram): they apply their own policies.

04Data we process, purposes and retention

Here is each processing activity, with the data involved, its legal basis under Article 6 GDPR, and how long we keep it.

SociaFlow account

Data
Email address, display name, password (stored hashed by our hosting provider, never in plain text), account identifier, creation and last sign-in dates.
Legal basis
Performance of a contract (Art. 6(1)(b)): creating your account, signing you in, securing access.
Retention
As long as your account exists. Deleted immediately when you delete your account.

Workspace sync (Mac, iPhone, iPad)

Data
Projects and brand profiles, design systems, brand media, metadata of linked social accounts (never a token), posts (text, variants, dates, X threads), Studio videos and visuals, related media files, pseudonymized identifier of the device behind each change.
Legal basis
Performance of a contract (Art. 6(1)(b)): the same workspace on all your devices.
Retention
As long as your account exists. Items you delete are erased; a bare deletion marker (no content) is kept for 180 days to update your other devices. Everything is deleted with your account.

Publishing to social networks

Data
OAuth access tokens (encrypted), identifiers and names of linked accounts or pages (Facebook, Instagram, LinkedIn, X, TikTok), content and media of cloud-scheduled posts, publishing status and error messages. Media to be published are copied to a non-guessable public URL, because Meta, LinkedIn and TikTok need to download them.
Legal basis
Performance of a contract (Art. 6(1)(b)): publishing on your behalf, on time, even with your device off.
Retention
Tokens: until you disconnect the network or delete your account. Cloud posts and media: as long as your account exists, or until you delete them in the app. What has been published stays on the network, under its own rules.

Notifications

Data
Apple push token (APNs), platform (iOS, iPadOS, macOS), language, app version, pseudonymized device identifier, preferences (post published, post failed). Local reminders are computed on the device and never go through our servers.
Legal basis
Your consent (notification permission requested by the system) and performance of a contract.
Retention
Until you sign out, turn notifications off, Apple invalidates the token, or you delete your account.

License and payments

Data
Purchases on the website or on Mac (Stripe): email, Stripe customer and subscription identifiers, plan, status, amounts, currency, dates. Your card details are processed by Stripe only. In-app purchases on iPhone and iPad (App Store): transaction identifiers, product, purchase and expiry dates, auto-renewal, environment, account identifier attached to the purchase; payment is processed by Apple only, which shares neither your name nor your payment method with us. Activated devices: pseudonymized device fingerprint, device name, app and OS versions.
Legal basis
Performance of a contract (Art. 6(1)(b)) and legal accounting and tax obligations (Art. 6(1)(c)).
Retention
License and devices: as long as your account exists. Accounting records related to payments: 10 years, as required by Belgian accounting law, including after account deletion.

SociaFlow AI (hosted AI, optional)

Data
SociaFlow AI subscription (App Store or Stripe purchase, status, plan, period dates, quota), AI credits (type, amounts granted and used, expiry date if any), usage per period (number of requests and visuals, share counted against the quota or credits, tokens, estimated cost), rate-limit counter, and a technical log of each call with no content at all (start of your account identifier, model, tokens, cost, duration, error code). The content of your requests and of the responses is not stored.
Legal basis
Performance of a contract (Art. 6(1)(b)): providing SociaFlow AI, counting your quota and credits, preventing abuse.
Retention
Subscription, credits and usage: as long as your account exists, deleted with it. Technical log: short period set by our data host (see “Security and technical logs”). Payments fall under “License and payments”.

Support and feedback

Data
Message, rating, type (feedback or bug), email if you provide it or are signed in, app and OS versions, language, website page, a fingerprint of your IP address (hashed, never stored in plain text) to prevent abuse. These messages are forwarded to us by email.
Legal basis
Legitimate interest (Art. 6(1)(f)): replying to you, fixing bugs, improving SociaFlow.
Retention
3 years after our last exchange, then deleted.

Usage analytics

Data
Usage events (install, launch, website button clicks, page views, key actions such as scheduling a post or running a generation), random installation identifier, app and OS versions, page and referring site. These events are not linked to your account, name or email.
Legal basis
Legitimate interest (Art. 6(1)(f)): measuring aggregate use of SociaFlow. On the website, nothing is measured if your browser sends “Do Not Track” or “Global Privacy Control”.
Retention
24 months at most, then deleted.

Security and technical logs

Data
IP address, date and time, request, response code and browser, logged by our data host and by the website host; anti-abuse counters (rate limits).
Legal basis
Legitimate interest (Art. 6(1)(f)): protecting the service, detecting abuse and diagnosing outages.
Retention
Short periods set by each host (a few days for the data host, 12 months at most for the website host).

Telegram bot (optional, on Mac)

Data
Your bot token and, if you provide it, your AI key (both encrypted), Telegram chat identifier and name, history of your exchanges with the bot, post proposals, chosen AI provider and model.
Legal basis
Performance of a contract (Art. 6(1)(b)), at your request.
Retention
History: 180 days. Everything else: until you disconnect the bot or delete your account.

Waitlist

Data
Email address, language, website section and referring site.
Legal basis
Your consent (Art. 6(1)(a)), which you can withdraw at any time.
Retention
Until the relevant launch and at most 24 months, or until you ask to be removed.

We make no decision based solely on automated processing that produces legal effects concerning you, and we do no profiling.

05iPhone and iPad app: permissions

The app only asks for a permission when you use the related feature. You can withdraw it at any time in Settings › SociaFlow on your device.

  • Camera: only when you take a photo or video for a post.
  • Photos: you pick the photos and videos to import yourself (system picker, no access to your whole library). The “add only” permission is used to save the visuals and videos you export to Photos.
  • Microphone and speech recognition: only when you dictate a request to the assistant or record a video (see “Voice dictation”).
  • Notifications: to tell you a post went out or failed, and for local reminders.
  • Device identifier: we use a fingerprint (SHA-256 hash) of the identifier Apple provides for this app, to recognize the device for sync, notifications and licensing. It cannot be used to track you across other apps.
  • No location, no access to contacts, no advertising identifier (IDFA), no tracking.

06Voice dictation

Dictation uses Apple’s speech recognition. When your device and language support it, SociaFlow requires fully on-device recognition: your voice never leaves your iPhone, iPad or Mac.

Otherwise, recognition may be performed by Apple’s servers, under Apple’s privacy policy. In every case, SociaFlow neither receives nor records your voice: only the transcribed text is inserted into your request.

07Artificial intelligence

You choose how SociaFlow uses AI, and you can switch at any time in the settings. How your data is processed depends on that choice:

  • Your own key: Anthropic (Claude), OpenAI (ChatGPT) or Google (Gemini). Your API keys are stored in each device’s Keychain; they are neither synced nor sent to our servers.
  • With your key, requests go directly from your device to the chosen provider, never through our servers: SociaFlow does not see them. They contain what the request needs: your message, the brand context (profile, tone, design system), the posts involved and, where relevant, images. This content is subject to the terms and privacy policy of the provider, with whom you have your own contract: check its retention and training settings.
  • Apple Intelligence runs on-device: no data is sent, neither to us nor to anyone else.
  • SociaFlow AI, the AI hosted by SociaFlow with no key needed: only in this case do your requests go through our servers (see the next section).
  • SociaFlow does not use your content, requests or generated responses to train any AI model, and shares them only with the service providers needed to answer your request.
  • Exception, the Telegram bot: if you turn it on and give it an AI key, that key is stored encrypted on our servers, and requests sent to the bot are forwarded from our servers to your provider, using your key.

08SociaFlow AI (hosted AI)

SociaFlow AI is the no-key option, available with a SociaFlow AI subscription or with SociaFlow AI credits granted to you. When you use it:

  • Your request travels from your device, over an encrypted connection, to our server function, which checks your account and quota and then forwards it using SociaFlow’s keys: to Anthropic (Claude model) for text, and to OpenAI (image model) for visuals.
  • What is sent: your message, the instructions and brand context (profile, tone, audience, design system, calendar), the posts involved and, where relevant, the images you attach; for a visual, its description and format. We do not add your name, email or account identifier, but the content itself may include personal data if you put some in.
  • SociaFlow does not store the content of your requests or the responses: the response is sent back to your device and nothing of it is kept on our servers. Our technical logs never contain that content. Whatever you then save (a post, a visual) follows the sync rules.
  • We only keep what is needed to provide and meter the service: subscription, credits, number of requests and visuals, tokens and estimated cost, per period (see “Data we process, purposes and retention”).
  • Anthropic and OpenAI process this data on our behalf, as processors, under their commercial API terms and data processing agreements. Under those terms, data received through their API is not used by default to train their models.
  • These providers may keep data for a limited time, in particular for security and abuse detection, under their own API retention policies; Anthropic may also cache part of the instructions for a few minutes to speed up subsequent requests.

09Processors and recipients

Your data is only accessible to the publisher and to strictly necessary service providers, bound by contract and by GDPR safeguards:

  • Supabase Inc.: data hosting, database, authentication, media storage, server functions, realtime (region: EU · Ireland (eu-west-1)).
  • Stripe Payments Europe Ltd. (Ireland) and its affiliates: payments on the website and on Mac, invoices.
  • Apple Inc. and Apple Distribution International Ltd.: App Store in-app purchases, push notifications (APNs), server-side speech recognition when used.
  • Resend, Inc.: sending emails, including forwarding your messages to support.
  • OVH SAS (France): hosting of the sociaflow.app website.
  • Social networks you connect (Meta Platforms, LinkedIn, X, TikTok) and Telegram: they receive the content you publish or send, and act as independent controllers under their own policies.
  • Anthropic PBC (United States): text generation for SociaFlow AI, as a processor.
  • OpenAI, L.L.C. (United States): visual generation for SociaFlow AI, as a processor.
  • AI providers you choose with your own key (Anthropic, OpenAI, Google): they receive your requests directly from your device, under your own contract with them.
  • Authorities: only where required by law.

We do not sell, rent or trade any personal data, and we use none of it for advertising.

10Transfers outside the European Union

Some providers (Supabase, Stripe, Apple, Resend, Anthropic, OpenAI, social networks and AI providers) are based in, or process data in, the United States. These transfers rely on the EU-U.S. Data Privacy Framework adequacy decision where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses, with supplementary measures (encryption in transit and at rest). For SociaFlow AI, transfers to Anthropic PBC and OpenAI rely on the Standard Contractual Clauses included in their data processing agreements.

You can obtain a copy of these safeguards by writing to contact@sociaflow.app.

11Security

  • All communications are encrypted (HTTPS/TLS).
  • Social network tokens, the Telegram bot token and the bot’s AI key are encrypted (AES-GCM) before storage; they are never sent back to devices.
  • Row Level Security: each account can only read its own data. Sensitive tables are only accessible to server functions.
  • Workspace media in private storage, organized per account, only accessible to their owner or through time-limited signed links.
  • AI keys and local tokens in Apple’s Keychain; device identifiers and IP addresses pseudonymized by hashing.
  • Administrative access restricted to the publisher, and limited to what is strictly necessary.
  • SociaFlow AI: every call is authenticated with your account and rate-limited; SociaFlow’s API keys remain server-side secrets, never sent to devices; request content is neither stored nor logged.

If a data breach puts your rights at risk, we notify the Belgian Data Protection Authority within 72 hours and, if the risk is high, we inform you directly.

12Your rights

Under the GDPR, you have the following rights:

  • Access: get a copy of your data.
  • Rectification: correct your data. Your display name and password can be changed directly in the app (Settings › Account).
  • Erasure: delete your account and data (see “Delete my account”).
  • Portability: receive the data you gave us in a structured, machine-readable format (JSON).
  • Objection: object to processing based on legitimate interest, including usage analytics.
  • Restriction: ask us to temporarily freeze a processing activity.
  • Withdrawal of consent: at any time, without affecting what was done before (notifications in your device settings, waitlist by email).

To exercise these rights, email contact@sociaflow.app from your account address. We reply within one month, which may be extended by two months for complex requests (we will tell you). We may ask you to confirm your identity.

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, https://www.dataprotectionauthority.be, or with the authority of your country of residence in the European Union.

13Delete my account

On Mac: Settings › Account › Delete my account. On iPhone and iPad: Settings › Account › Delete account.

Deletion is immediate and permanent: account, license, synced workspace, hosted media, cloud-scheduled posts (they will not go out), linked networks, Telegram bot, devices and notifications, as well as your remaining SociaFlow AI credits and your usage history.

Without access to the app, you can request deletion from the website by emailing contact@sociaflow.app from your account address: we process it within 30 days at most.

What remains: posts already published (delete them on each network), data still on your devices until you uninstall the app, and accounting records we are legally required to keep. A subscription bought on the website or on Mac (SociaFlow AI or a former Pro subscription) is cancelled automatically when you delete your account, with no further charge. A subscription bought on the App Store can only be cancelled by you: do it first, in your Apple Account settings.

14Revoke SociaFlow’s access to your networks

Disconnecting a network in the app deletes its token from our servers. You can also remove the authorization directly from each network:

  • Facebook and Instagram: Facebook › Settings & privacy › Settings › Business integrations (or Apps and websites) › SociaFlow › Remove.
  • LinkedIn: Settings › Data privacy › Other applications › Permitted services › SociaFlow › Remove.
  • X: Settings and privacy › Security and account access › Apps and sessions › Connected apps › SociaFlow › Revoke app permissions.
  • TikTok: Profile › Settings and privacy › Security and permissions › App and services permissions › SociaFlow › Remove access.

15Website: cookies and local storage

The sociaflow.app website sets no cookies and loads no third-party services (fonts and images are served from our own hosting).

It only stores in your browser (local storage) your theme, your language, your choice to hide the language suggestion and, for analytics, a random identifier not linked to your identity. If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is measured. You can clear this data at any time in your browser settings.

16Children

SociaFlow is a professional tool not intended for anyone under 16. We do not knowingly collect their data; if you believe a minor has sent us data, email contact@sociaflow.app and we will delete it.

17Changes to this policy

We may update this policy, for example when we ship a new feature. The last-updated date is shown at the top of the page. For significant changes, we will let you know in the app or by email before they take effect.

18Legal notice

  • Publisher: Louis Valli (Smartcom), Rue les Allées 12, 5660 Couvin, Belgium, BE0664.627.568. Contact: contact@sociaflow.app.
  • Website hosting: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.
  • Data hosting: Supabase Inc. (region: EU · Ireland (eu-west-1)).