Privacy Policy

This policy applies to the Indo Social web application, its APIs, integrations, support interactions, and related services. It does not replace the privacy policies of social networks, identity providers, payment providers, or other third-party services that you choose to use with Indo Social.

Depending on how you use Indo Social, we may collect the following categories of information:

• Account information: name, email address, authentication information, profile details, workspace or organisation membership, and account preferences.
• Connected platform data: identifiers for social accounts, pages, channels, organisations or profiles that you connect; permissions you grant; access or refresh tokens; and information made available through the platform APIs you authorise.
• Content and media: posts, captions, comments or replies you prepare through supported workflows, uploaded images or videos, drafts, campaign information, publishing schedules, and related metadata.
• Usage and diagnostic data: application activity, feature usage, request and error logs, browser and device information, IP address, approximate location derived from network information, and security events.
• Communications: information you provide when you contact support, request assistance, or otherwise communicate with us.
• Billing information: if a paid feature or subscription is enabled, we may receive limited billing and transaction information from our payment provider. We do not need to store full payment-card details when those details are handled directly by the payment provider.

Indo Social connects to supported third-party platforms only when you choose to connect an account and authorise the requested permissions. Connections may use OAuth or another official authorisation method provided by that platform.

We use the permissions and data made available by a connected platform only to provide features you request, such as identifying the account you connected, publishing or scheduling content, retrieving supported analytics or engagement information, and maintaining the connection. The exact data available to Indo Social depends on the platform, the permissions you approve, and the features you use.

You can revoke Indo Social's access from the relevant third-party platform. Revocation may prevent related Indo Social features from working and may not delete information that we are required or permitted to retain for legitimate security, legal, or operational purposes.

We may use information to:

• provide, operate, maintain, and improve Indo Social;
• authenticate users and manage workspaces and permissions;
• connect authorised social accounts and execute requested actions;
• schedule, publish, manage, and analyse supported social content;
• store drafts, media, settings, integrations, and workflow state;
• provide customer support and service communications;
• monitor reliability, diagnose errors, and prevent abuse or fraud;
• protect the security and integrity of our users and systems;
• comply with applicable legal obligations and enforce our rights; and
• support billing and account administration where paid services are enabled.

Where applicable law requires a legal basis, we process personal information as necessary to perform our contract with you, based on your consent where consent is requested, for our legitimate interests in operating and securing the service where those interests are not overridden by your rights, and where necessary to comply with legal obligations.

We do not disclose information indiscriminately. We may share or make information available in the following circumstances:

• At your direction: with social networks and other services you connect, including when you ask Indo Social to publish, retrieve, or synchronise information.
• Service providers: with hosting, infrastructure, security, monitoring, communications, analytics, support, and payment providers that process information for us under appropriate contractual or legal safeguards.
• Your organisation: with authorised workspace owners, administrators, and team members according to the roles and permissions configured for the workspace.
• Legal and safety reasons: when reasonably necessary to comply with law, legal process, enforce agreements, protect rights or safety, investigate abuse, or secure the service.
• Business transactions: if all or part of the service or business is reorganised, financed, acquired, merged, or transferred, subject to applicable law.

We do not sell connected social account credentials or access tokens.

We retain information for as long as reasonably necessary to provide Indo Social, maintain account and workspace records, meet security and operational requirements, resolve disputes, enforce agreements, and comply with applicable law. Retention periods vary according to the type of information and why it is processed.

You may disconnect a social account through Indo Social where that control is available or revoke access directly through the connected platform. To request deletion of an Indo Social account, workspace data, or other personal information, contact us at support@indotium.com. We may ask you to verify your identity or authority before completing a request.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, alteration, disclosure, or destruction. These safeguards may include access controls, encrypted transport, protected credential storage, isolation controls, monitoring, and security review appropriate to the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Indo Social and the providers that support it may process information in countries other than the country where you live. Where required, we use appropriate measures intended to protect personal information when it is transferred across borders.

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, restriction of, or a copy of certain personal information, and to object to or withdraw consent for certain processing. You may also have the right to complain to an applicable data-protection authority.

You can also manage many permissions directly through the settings of the third-party platform you connected. To make a privacy request to Indo Social, email support@indotium.com.

Indo Social may use cookies and similar technologies for authentication, preferences, security, application functionality, and, when configured, service analytics. Browser settings may allow you to restrict cookies, but essential features may not function correctly if required cookies are blocked.

Third-party social networks and integrations operate under their own terms and privacy policies. Indo Social does not control how those third parties independently process information. You should review the privacy settings and policies of each service you connect.

Indo Social is a business and professional social-media management service and is not directed to children. If we learn that personal information of a child has been provided to us contrary to applicable law, we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date shown at the top of this page and provide additional notice where required by applicable law.

Indo Social is operated by Indotium Technologies Private Limited.