Socentra

Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how Socentra (“Socentra, ” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Socentraapplication and related services (the “Service”) available at socentra.com.

Socentra is a social media management tool. It lets you connect your social media accounts, create and schedule posts, adapt content for different platforms using AI, view and reply to interactions, discover trends, view analytics, and (where available) promote content. Because the Service connects to third-party platforms on your behalf, this policy covers both the data you give us directly and the data we access from those platforms with your permission.

Plain-language summary (not a substitute for the full policy): We collect your account info, the social accounts you connect, the content and analytics we retrieve to run the features you ask for, and basic usage data. We use it to operate the Service. We share it only with the service providers needed to run it (AI providers, hosting, payments) and never sell it. You can disconnect any account and delete your data at any time, and we honor deletions made on the original platforms.

1. Who we are

Socentra is the data controller for the purposes of this policy. We operate from Nigeria. You can reach us at [email protected]. If we have appointed a Data Protection Officer or local representative, their contact details are: Not applicable.

2. Information we collect

a) Information you provide directly

  • Account registration: your name, email address, password (stored only as a secure hash), and authentication settings (e.g., two-factor data).
  • Profile and preferences: brand voice settings, niche/interest tags, banned-word lists, and similar configuration you enter.
  • Content you create: posts, captions, media (images and video), comments, and replies you compose in the Service.
  • Payment information: when you subscribe or buy add-ons, our payment processors collect your payment details. We receive limited billing information (e.g., plan, transaction status, last four digits) but do not store full card numbers.
  • Support communications: messages you send us.

b) Information we access from connected platforms (with your authorization)

When you connect a social account (e.g., Facebook Page, Instagram, Threads, LinkedIn, X), you grant us access through that platform's official authorization (OAuth). Depending on the platform and the permissions you approve, we may access and process:

  • Authorization tokens that let us act on your behalf (we never receive or store your social account password).
  • Account/profile details for the connected account (e.g., account name, handle, profile image, page/account IDs).
  • Content and publishing data (posts you publish through us and their status).
  • Engagement and interaction data on your posts — comments, replies, mentions, and quote posts — which may include the names, handles, profile images, and message text of other people who interact with your content.
  • Metrics and analytics (impressions, reach, engagement, clicks, follower counts).
  • Trend and discovery data aggregated from public sources to surface relevant topics.
  • Direct messages and advertising data only where you enable those features and the platform permits it.

c) Information collected automatically

  • Usage data: features used, actions taken, timestamps.
  • Device and connection data: IP address, browser/device type, and similar technical identifiers.
  • Cookies and similar technologies: see Section 9.

3. How we use information

We process information to:

  • Provide, operate, and maintain the Service and the specific features you enable.
  • Authenticate you and connect/manage your social accounts.
  • Publish, schedule, and adapt your content across the platforms you select.
  • Generate content, suggestions, replies, hashtags, and insights using AI (see Section 5).
  • Retrieve and display interactions and analytics, and let you respond to them.
  • Surface trends relevant to your stated niche.
  • Process payments and manage subscriptions and add-ons.
  • Provide support, prevent abuse and fraud, ensure security, and comply with law.
  • Improve the Service (using aggregated or de-identified data where possible).

We obtain your consent before building or augmenting any user profile, and we process platform data only as described here and as permitted by each platform's terms. We do not use your content or connected-platform data to train our own or third parties' AI models.

Where these laws apply, we rely on: performance of a contract (to provide the Service you sign up for), consent (e.g., connecting accounts, marketing emails), legitimate interests (securing and improving the Service, preventing abuse), and legal obligation (compliance, record-keeping). You may withdraw consent at any time.

5. AI features and providers

The Service uses third-party AI providers to power generation, adaptation, moderation, sentiment analysis, reply suggestions, and insights. When you use an AI feature, the relevant input (for example, your topic, draft, brand voice settings, or an interaction you choose to reply to) is sent to a provider to produce the output. Our current AI sub-processors include Frontier AI; an up-to-date list is in Section 7.

  • AI output is generated to assist you and is provided as drafts for your review; you decide what to publish.
  • We apply content moderation to reduce harmful or policy-violating output.
  • If your brand enables Restricted Data Routing, we exclude providers you have chosen to restrict from processing your content.
  • We do not permit our AI providers to use your content to train their models, consistent with their applicable terms, and we do not use it to train models ourselves.

6. How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers (sub-processors) who process data on our behalf under contract — see Section 7.
  • At your direction:when you publish, reply, or promote, we transmit the relevant content to the social platform you chose. That platform's own privacy policy then governs that data.
  • Legal and safety: to comply with law, valid legal requests, or to protect rights, safety, and the integrity of the Service.
  • Business transfers: if we are involved in a merger, acquisition, or asset sale, data may transfer as part of it, subject to this policy.

We require all third parties that receive data to follow obligations at least as protective as ours and to delete the data when they stop providing services to us.

7. Sub-processors

We use the following categories of sub-processors. A current, detailed list is available at socentra.com/subprocessors or on request.

  • Cloud hosting & infrastructure: State of the Art Infrastructure — hosting, storage, databases.
  • AI providers: Frontier AI — content generation, moderation, analysis.
  • Payment processors: Secured Payment Gateway — billing and payments.
  • Email & notifications: Secured Email Gateway — transactional and notification email delivery.

8. International data transfers

We may process and store information in countries other than where you live, including the EU/Ireland and the United States. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required by applicable law. Note in particular that DeepSeek processes data via infrastructure connected to the People's Republic of China; if you prefer not to have content processed by a given provider, you can enable Restricted Data Routing in your brand settings.

9. Cookies and similar technologies

We use cookies and similar technologies for authentication, security, preferences, and analytics. You can control cookies through your browser settings; disabling some may affect functionality.

10. Data retention

We keep personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

  • Your account data: retained while your account is active; deleted or de-identified after closure (see Section 11).
  • Connected-platform content and interactions: cached only as needed to provide features and subject to a retention limit (default 90 days for interaction data), after which it is purged.
  • Upstream deletions honored: if content is deleted, made private, or its author deletes/deactivates their account on the original platform, we remove the corresponding content from our active systems without undue delay.
  • Backups are purged on a rolling schedule.

11. Your rights and choices

Depending on your location (including under GDPR/UK GDPR, the Nigeria Data Protection Act/NDPR, Kenya's Data Protection Act, South Africa's POPIA, and the CCPA/CPRA), you may have the right to: access, correct, delete, restrict, or object to processing; data portability; and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

To exercise any right:

  • Disconnect a social account at any time in the Service; this revokes our stored access tokens, stops further processing for that account, and deletes the data we held for it.
  • Delete your account and data in-app via Settings → Security → Delete account, or by emailing [email protected]. This permanently erases your account, brand, connected accounts, posts, media, and associated data, and revokes the access tokens for your connected social accounts. We action verified deletion requests without undue delay and within the timeframe required by applicable law (and within 30 days as our standard target).
  • Meta data-deletion: removing the app from your Facebook/Instagram settings triggers our Meta Data Deletion Callback, which deletes the data we obtained via Meta and returns a confirmation code you can use to check the status. You can also request this by emailing [email protected].

We will not discriminate against you for exercising your rights.

12. Security

We protect data using encryption in transit (TLS) and at rest, encryption of stored authorization tokens, access controls, least-privilege practices, audit logging, and regular review. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and regulators of incidents as required by law.

13. Children's privacy

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If we learn we have, we will delete it.

14. Third-party platforms

When you connect a third-party platform, your use of that platform remains governed by its terms and privacy policy. We encourage you to review them: Meta, X, LinkedIn, TikTok, and others. We are not responsible for the practices of those platforms.

15. Changes to this policy

We may update this policy. Material changes will be notified via the Service or email, and the “Last updated” date above will change. Continued use after changes take effect means you accept the updated policy.

16. Contact

Socentra
Admiralty Way, Lagos, Nigeria
Email: [email protected]