Legal

Privacy Policy

How Pocket Social collects, uses, stores, and protects your information — including data from Meta (Facebook and Instagram).

Last updated: July 15, 2026

1. Introduction & who we are

Pocket Social ("Pocket Social", "we", "us", or "our") is a software-as-a-service application, available at pocketsocial.net, that helps small service businesses create, review, approve, schedule, and publish social media content with the assistance of artificial intelligence.

This Privacy Policy explains what information we collect, how and why we use it, who we share it with, and the choices and rights you have. It applies to your use of the Pocket Social website, application, and related services (together, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Pocket Social connects to third-party social media platforms — including Meta's Facebook and Instagram — on your behalf so that you can publish and manage content. Our access to those platforms, and our handling of the data we obtain through them, is described in detail in the sections below and is in addition to the terms of the platforms themselves.

2. Information we collect

We collect only the information we need to provide the Service. This falls into the following categories.

a. Account information

When you register for and use Pocket Social, we collect your name and email address, and we store an encrypted (hashed) password or an authentication token used to sign you in. You may also choose to provide additional profile or business details (such as your business name) to personalize the Service.

b. Facebook & Instagram (Meta Platform Data)

When you connect a Facebook Page or Instagram account, you authorize us — through Meta's official OAuth login and permission flow — to access certain data from those accounts. We only receive data corresponding to the permissions ("scopes") you grant. See Section 3 for the full list of permissions and exactly what each is used for.

c. Content you create

We collect and store the content you create, upload, or manage in the Service — including post text and captions, prompts and instructions you give to our AI features, images you upload or that are generated for you, drafts, scheduling details, and approval decisions. This content is stored so that we can generate, hold for your review, schedule, and publish it on your behalf.

d. Usage & technical data

We automatically collect limited technical information when you use the Service, such as log data (IP address, browser type, pages or features accessed, and timestamps), device information, and diagnostic or error data. We use this to operate, secure, and improve the Service. See Section 9 for information about cookies and authentication tokens.

3. Meta Platform Data (Facebook & Instagram)

Pocket Social integrates with Meta Platforms so you can publish and manage content on your own Facebook Pages and Instagram professional accounts. We access this data only after you explicitly connect your account and grant the relevant permissions through Meta's official login dialog, and only for the purposes described below. This handling is consistent with the Meta Platform Terms and Developer Policies.

Permissions we request and why

Permission (scope)Why Pocket Social needs it
public_profileTo authenticate you via Facebook Login and display your basic profile name so you can confirm which account is connected.
pages_show_listTo retrieve the list of Facebook Pages you manage so you can choose which Page to connect and publish to.
pages_read_engagementTo read Page content and engagement metadata so we can display your Page context and confirm posts were published successfully.
pages_manage_postsTo create, schedule, and publish the posts you approve to your selected Facebook Page.
pages_manage_adsTo support promotion of your published content and ads-related management features for your Page, at your direction.
instagram_basicTo identify and connect the Instagram professional account linked to your Page and read basic account information needed to publish.
instagram_manage_commentsTo view and manage comments on your Instagram content so you can moderate and respond to your audience from within Pocket Social.
business_managementTo access the Business Portfolio assets (Pages and accounts) you manage so the correct business assets can be connected to Pocket Social.

How Meta Platform Data is used

We use Meta Platform Data only to provide the Service to you — that is, to let you connect your accounts, view your Pages and content context, generate and schedule posts, publish approved content, and manage comments. We do not sell Meta Platform Data, we do not use it for advertising unrelated to your own account, and we do not transfer it to data brokers or any party except the service providers listed in Section 5 who process it on our behalf to operate the Service.

How Meta Platform Data is stored

Access tokens and the account data required to operate the integration are stored securely in our database and object storage, using encryption in transit (HTTPS/TLS) and at rest. Tokens are used only to make authorized API calls to Meta on your behalf. When you disconnect an account, or when your access token expires or is revoked, we stop accessing that account's data. When you disconnect an account or delete your Pocket Social account, we delete the associated Meta Platform Data as described in Section 8.

4. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including creating and managing your account;
  • Generate content with our AI features based on the prompts and inputs you provide;
  • Hold content for your review and approval, schedule it, and publish it to your connected Facebook and Instagram accounts;
  • Let you view and manage engagement such as Instagram comments;
  • Authenticate you, keep your account secure, and prevent fraud or abuse;
  • Respond to your requests, provide customer support, and send you service-related communications;
  • Monitor, troubleshoot, and improve the reliability, security, and performance of the Service; and
  • Comply with legal obligations and enforce our Terms of Service.

We use your information solely to provide and improve the Service. We do not sell your personal information.

5. How we share information & our service providers

We do not sell your personal information or Meta Platform Data. We share information only in the limited circumstances below.

Service providers

We rely on trusted third-party service providers to operate the Service. These providers process data only on our instructions and only to the extent needed to perform their function, and they are bound by agreement to protect it and to use it solely to provide services to us. The categories of service providers we use include:

  • Cloud hosting and storage providers — to host our application and to store account information, the content you create, images, and stored Meta Platform Data (including access tokens).
  • AI content-generation providers — to power our AI-assisted text and image generation features, processing the prompts and inputs you submit to those features.

Each service provider maintains its own privacy and security practices and may process data on our behalf under agreements that require it to safeguard your information.

Other disclosures

  • Legal & safety: We may disclose information if required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Pocket Social, our users, or the public.
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
  • With your direction: When you publish content, that content is shared with the social media platform you have chosen, at your direction.

6. Data storage, security & retention

Your data is stored in our database and object storage, and served through our cloud-hosted application. We protect data in transit using HTTPS/TLS encryption and rely on our providers' encryption-at-rest and access controls. Authentication is handled with JSON Web Tokens (JWT), and passwords, where used, are stored only in hashed form. Access to production data is limited to authorized personnel who need it to operate the Service.

We retain your information for as long as your account is active or as needed to provide the Service. We retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, or when you delete your account, we delete or de-identify it as described in Section 8. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.

7. Your rights & choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Ask us to correct information that is inaccurate or incomplete.
  • Deletion: Request that we delete your personal information (see Section 8).
  • Withdraw consent / disconnect: Disconnect your Facebook or Instagram account at any time from within the Service or from your Meta account settings, which stops our further access to that account's data.
  • Object or restrict: Object to or ask us to restrict certain processing of your information.

To exercise any of these rights, contact us at support@pocketsocial.net. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

8. Data deletion & how to request it

You can request deletion of your data at any time. There are two ways to do this:

  1. Disconnect an account: To stop Pocket Social from accessing a specific Facebook Page or Instagram account, disconnect it within the Service, or remove Pocket Social from your Facebook Business Integrations / Apps and Websites settings. This revokes our access token and stops further access to that account's data.
  2. Delete your data: To request deletion of your Pocket Social account and all associated personal information and Meta Platform Data, email support@pocketsocial.net with the subject line "Data Deletion Request" from the email address associated with your account. We will verify your request and delete the associated data from our database and storage, except where we are required to retain it by law. We aim to complete verified deletion requests within 30 days.

When you delete your Pocket Social account, we delete your account information, the content you created, and the Meta Platform Data (including stored access tokens) associated with your connected accounts. Some information may persist in routine backups for a limited period before being overwritten, and may be retained where required for legal or security purposes.

9. Cookies, JWT & similar technologies

Pocket Social uses cookies and browser storage that are strictly necessary to operate the Service. In particular, we use JSON Web Tokens (JWT) to keep you signed in and to authenticate your requests. These are essential for the Service to function and to keep your session secure. We do not use third-party advertising cookies. Your browser can be configured to refuse or delete cookies, but doing so may prevent you from signing in or using core features.

10. Children's privacy

Pocket Social is a business tool intended for use by adults. The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18 (or the age of majority in your jurisdiction). If you believe a child has provided us with personal information, please contact us at support@pocketsocial.net and we will delete it.

11. International data transfers

Pocket Social and its service providers may store and process information in the United States and other countries where our providers operate. If you access the Service from outside those countries, you understand that your information may be transferred to, stored, and processed in a country whose data protection laws may differ from those of your country. Where required, we take steps to ensure appropriate safeguards for such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us:

Read our Terms of Service