Privacy Policy

1. Who we are

Sowloop ("we", "us") is a tool that lets you write a post once and schedule it to YouTube, Facebook, Instagram and TikTok. This policy explains what information we handle, why, and the control you have over it. Questions? Email privacy@sowloop.com.

2. What we collect, and why

• Your account: your name and email address, plus a password stored only as a one-way hash (we can't read it). If you sign in with Google, we receive your name, email address and profile picture from Google, and nothing else.
• Connected platforms: when you connect a YouTube, Facebook, Instagram or TikTok account, that platform gives us an access token, plus basic profile details like the account name and ID. We use these only to publish the posts you schedule, and to show you which accounts are connected. Tokens are encrypted before they are stored.
• Your posts: the captions, media links and times you schedule, and whether each post was published. We need these to publish your posts at the right time and to show you your history.
• Google Drive folders (optional): if you add a Drive folder, you share that one folder with Sowloop's own Google account. We then see only the files in that folder: their names, descriptions and the videos and caption files themselves. We read them only to schedule and publish your posts, and stream each video straight to the platforms you chose without keeping a copy. The only change we make in your Drive is moving a posted video into a "Posted" subfolder. We never delete your files, and we never see the rest of your Drive. Stop sharing the folder at any time to remove our access.
• Videos you upload (optional): if you upload a video on the Upload page, we keep it in our private file storage (Cloudflare R2) only until it is posted, so the platforms can fetch it. We delete it automatically once it is published on every account you chose, or when you remove it. Your own copy is never affected.
• Your plan: which plan you are on. If you upgrade to a paid plan, payments are handled by our payment processor. We never see or store your full card number. We keep a record of each payment (amount, date, plan and the email it was billed to) for as long as tax and accounting law requires, even after you delete your account.
• Basic technical logs: such as error messages and request times, kept for a short time so we can keep the service secure and fix problems.
• Website visit statistics: on our public pages only (home page, sign in, sign up and these legal pages), Google Analytics measures visits: which pages are viewed, roughly where visitors are (country or city, never your exact address), the kind of device and browser, and how visitors found us. We use this only to understand how many people visit and which pages help. It is never used inside the signed-in app, and never sees your posts, channels or account details. See section 7 for cookies.

We don't collect anything else, we don't use advertising trackers, and we don't build profiles about you.

3. How we use your information

We use your information only to:

• run your account and sign you in;
• publish your scheduled posts to the platforms you choose;
• show you your connected accounts, scheduled posts and their status;
• apply your plan's limits and handle billing; and
• keep the service secure and working.

We never post anything you didn't schedule, and we never read your private messages or your followers' data.

4. AI features

If your plan includes AI captions and you upload a video, three small still frames from the video, its file name and your caption style note are sent to our AI provider (Anthropic) to write the title, caption and hashtags. The video itself is never sent. Your content is not used to train AI models. AI captions are optional: you can edit or replace every caption, and turning on "Review first" lets you check each one before it is scheduled.

If you connect Claude to Sowloop, Claude can see your connected account names and your posts, and can schedule, edit, cancel and publish posts on your behalf. Claude never sees your passwords or platform tokens. You can disconnect it at any time in Settings.

5. Who we share it with

We never sell your data. We only share it with:

• The platforms you connect, to publish your posts there.
• Service providers we rely on to run Sowloop, such as hosting (Vercel), database (Neon), file storage (Cloudflare), AI (Anthropic), website visit statistics (Google Analytics, public pages only) and, once paid plans launch, payment providers. They may only use your data to provide their service to us.
• The authorities, only if the law requires it.

6. Google, YouTube, Meta and TikTok data

Sowloop uses YouTube API Services to publish videos to your YouTube channel and to show its subscriber, view and like counts. Sowloop's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. When you connect YouTube, you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. You can remove Sowloop's access at any time from your Google security settings at security.google.com/settings/security/permissions. We keep YouTube channel numbers for no more than 30 days. If you remove our access there, we delete that channel and its YouTube data from Sowloop within 30 days (usually within a day).

Facebook and Instagram: we use Meta's APIs only to publish to the Pages and Instagram accounts you choose and to show their follower numbers, as allowed by the Meta Platform Terms. Meta's handling of your data is covered by the Meta Privacy Policy. You can remove Sowloop in Facebook under Settings → Apps and websites; when you do, Meta tells us and we delete your Facebook and Instagram connections and their tokens straight away.

TikTok: we use TikTok's APIs only to read your basic profile (name and avatar) and follower, like and video counts, and to publish the videos you choose, with the privacy and interaction settings you pick before posting. TikTok's handling of your data is covered by the TikTok Privacy Policy. You can remove Sowloop in the TikTok app under Settings and privacy → Security → Manage app permissions, or disconnect TikTok in Sowloop.

Google Drive folders are shared with Sowloop by you, folder by folder, from Google Drive's own Share button. We don't ask for access to your Google Drive account. To remove our access, stop sharing the folder with Sowloop's Google account, or remove the folder in Sowloop.

7. Cookies and storage on your device

Sowloop places a small number of cookies and browser storage items on your device that are needed for the site to work: a sign-in cookie that keeps you logged in, short-lived security cookies used while you sign in or connect a platform, your light or dark theme choice, and your cookie choice below. We don't use advertising cookies.

Google Analytics (optional). On our public pages we ask whether you allow analytics cookies. If you click Accept, Google Analytics sets its cookies (named _ga) so it can tell new visits from returning ones. If you click Decline or don't choose, no analytics cookies are set: Google only receives a basic, cookieless signal that a page was viewed, so we can count visits without recognising you. Advertising features and ad personalisation are always switched off. Google processes this data under its own privacy policy. You can change your choice any time with Cookie settings at the bottom of every page, or block it entirely with Google's opt-out add-on.

8. How long we keep it

• Your account data stays for as long as you have an account.
• Platform tokens are removed as soon as you disconnect that platform.
• When you delete your account, we right away: revoke Sowloop's access at YouTube, TikTok, Facebook and Instagram; delete your connected channels and their tokens; delete all your posts (scheduled ones included) and every video you uploaded to us; disconnect any AI apps you connected; and delete your plan, settings and login. Backups are overwritten within 30 days.
• The only thing we keep after you delete your account is your payment history, if you ever paid us, for as long as tax and accounting law requires. It is used only for that purpose.
• Posts that were already published stay on your social accounts; remove them on each platform if you want them gone.
• Follower and view numbers from YouTube are kept for no more than 30 days.
• If you email us to delete your data, we do it within 7 days and confirm by email.
• Technical logs are kept for no more than 30 days.

9. How we protect it

Data is sent over encrypted connections (HTTPS). Platform tokens are encrypted at rest, passwords are hashed, and access to our systems is restricted. No system is perfectly secure, but if a breach ever affects your data, we will tell you promptly.

10. Your choices and rights

• See your data: your account, connected accounts and posts are all visible in the app.
• Disconnect a platform from the Accounts page.
• Delete everything from Settings, or see how to delete your data.
• Ask us for a copy of your data, or to correct it, by emailing privacy@sowloop.com.

Depending on where you live (for example, under the GDPR in Europe or the CCPA in California), you may have additional rights. We honour these requests for every user, wherever they live.

11. Children

Sowloop is not meant for anyone under 13, and we don't knowingly collect data from children.

12. Changes to this policy

If we change this policy in a meaningful way, we will tell you by email or in the app before the change takes effect.