Privacy Policy

1 Information We Collect

We collect several types of information in connection with the operation of SociPal:

1.1 Information You Provide Directly

• Account information: Name, email address, username, and password when you register.
• Profile information: Profile photo, bio, and business details you choose to add.
• Payment information: Billing details, handled and stored by Apple App Store or Google Play (we do not store payment card data).
• Communications: Messages or inquiries you send to our support team.
• Content you create: Posts, captions, images, hashtags, and other content you draft or schedule using SociPal.

1.2 Information from Connected Social Media Accounts

When you connect a social media account to SociPal, we collect:

• Account credentials and OAuth tokens (we do not store your social media passwords)
• Public profile information (name, username, profile picture, follower counts)
• Posts, stories, and media you authorize us to manage
• Performance metrics (likes, comments, shares, reach, impressions)
• Audience demographic and analytics data
• Direct message access (only if explicitly authorized by you)

1.3 Automatically Collected Information

When you use SociPal, we automatically collect:

• Device information: Device type, operating system and version, unique device identifiers, mobile network information.
• Usage data: Features used, actions taken within the app, session duration, crash reports and performance data.
• Log data: IP address, access times, pages viewed, app diagnostics.
• Location data: General location derived from IP address (we do not collect precise GPS location unless explicitly granted).

1.4 Information from Third Parties

We may receive information about you from third-party services, including:

• Authentication providers (Apple Sign-In, Google Sign-In)
• Analytics providers
• Social media platforms, as described above

2 How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, execute scheduled posts, manage connected social media accounts, and deliver core features.
• Personalize your experience: Customize content recommendations, insights, and AI suggestions based on your usage patterns and preferences.
• Process transactions: Manage subscriptions, billing, and provide receipts.
• Communicate with you: Send transactional emails (account confirmations, security alerts), product updates, promotional materials (with your consent where required), and respond to support requests.
• Improve the Service: Analyze usage patterns, conduct research, debug technical issues, and develop new features.
• Train and improve AI models: Aggregate and anonymized data may be used to improve our AI content generation capabilities.
• Ensure security: Detect and prevent fraud, abuse, unauthorized access, and other harmful activities.
• Legal compliance: Meet our legal obligations, enforce our Terms, and respond to lawful requests from public authorities.
• Business operations: Conduct audits, internal analytics, and business planning.

3 Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party vendors and service providers who assist us in operating the Service, including:

• Cloud infrastructure and hosting providers (e.g., Google Cloud, AWS, Firebase)
• Analytics providers (e.g., Firebase Analytics, Mixpanel)
• AI and machine learning service providers
• Customer support platforms
• Email delivery services
• Crash reporting and performance monitoring tools

These providers are contractually bound to process your data only as necessary to provide services to us and are prohibited from using it for their own purposes.

3.2 Social Media Platforms

To post content on your behalf and manage your accounts, we transmit your content and instructions to connected social media platforms.

3.3 Business Transfers

If buyXall digital LLC is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice before such a transfer and any change to this Privacy Policy.

3.4 Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate wrongdoing in connection with the Service; (d) protect the safety of users or the public; or (e) protect against legal liability.

3.5 With Your Consent

We may share your information for any other purpose with your prior consent.

3.6 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4 Social Media Platform Data

SociPal integrates with third-party social media platforms via their APIs. Our use of data obtained from these platforms is subject to their respective developer policies, including:

• Meta (Facebook/Instagram): We comply with Meta's Platform Policy. Data obtained via the Meta API is used solely to provide features within SociPal and is not used for advertising targeting.
• X (Twitter): We comply with X's Developer Agreement and Policy.
• LinkedIn: We comply with LinkedIn's API Terms of Use.
• TikTok: We comply with TikTok's Developer Terms of Service.
• Google (YouTube): Our use of data obtained from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use social media data for any purpose beyond delivering the features you request within SociPal.

5 AI Processing and Data

SociPal uses AI to generate content suggestions and provide analytics insights. In connection with this:

• Your inputs (prompts, account details, performance data) are processed by our AI systems and may be sent to third-party AI API providers (such as OpenAI) to generate responses.
• We implement data minimization practices and do not send unnecessary personal data to AI providers.
• Aggregated and anonymized usage data may be used to train or fine-tune our proprietary AI models.
• We do not use your individually identifiable data to train AI models without your explicit consent.

6 Cookies and Tracking Technologies

The SociPal mobile application may use the following tracking technologies:

• Local storage: To save your preferences and session information on your device.
• Analytics SDKs: To collect usage statistics and crash reports.
• Advertising identifiers: Device advertising IDs (IDFA on iOS, GAID on Android) may be collected for analytics purposes, subject to your device's privacy settings and applicable law.

You can control tracking through your device settings. On iOS, you can use the App Tracking Transparency prompt to manage tracking permissions. On Android, you can reset or opt out of your advertising identifier in your device settings.

7 Data Retention

We retain your personal information for as long as necessary to:

• Maintain your account and provide the Service;
• Comply with our legal obligations;
• Resolve disputes and enforce our agreements;
• Fulfill the purposes described in this Privacy Policy.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or accounting purposes. Backup copies may be retained for up to an additional 90 days before being deleted from our systems.

Social media data obtained through API integrations is retained only as long as necessary to deliver the Service. We delete or revoke access tokens upon account disconnection or deletion.

8 Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL protocols;
• Encryption of sensitive data at rest;
• Access controls and authentication requirements for our systems;
• Regular security assessments and audits;
• Secure OAuth 2.0 token management for social media integrations.

9 Children's Privacy

SociPal is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at info@buyxall.com.

For users between the ages of 13 and 18, we recommend parental guidance in reviewing this Privacy Policy.

10 Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information (subject to certain exceptions).
• Portability: Request a machine-readable copy of your data to transfer to another service.
• Opt-out of marketing: Unsubscribe from promotional emails at any time using the unsubscribe link in any such email, or by contacting us.
• Revoke social media access: Disconnect any connected social media account at any time within the app settings.
• Push notifications: Opt out of push notifications through your device settings.

To exercise any of these rights, please contact us at info@buyxall.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

11 California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Service.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

In the preceding 12 months, we have collected the following categories of personal information: identifiers, commercial information, internet or other electronic network activity, and professional information. For details on sources, purposes, and third parties, see the relevant sections of this Privacy Policy.

To submit a CCPA request, contact us at info@buyxall.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days, with a possible 45-day extension where necessary.

12 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national laws grant you specific rights regarding your personal data.

12.1 Legal Bases for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the Service you requested.
• Legitimate interests: Analytics, fraud prevention, security, and service improvement, where our interests are not overridden by your rights.
• Consent: Marketing communications and optional data uses, where you have given explicit consent.
• Legal obligation: Compliance with applicable law.

12.2 Your GDPR Rights

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / "right to be forgotten" (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object to processing (Article 21)
• Right to withdraw consent at any time (Article 7)
• Right to lodge a complaint with a supervisory authority

To exercise your GDPR rights, contact us at info@buyxall.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

13 International Data Transfers

buyXall digital LLC is based in the United States. If you are accessing SociPal from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

By using SociPal, you acknowledge that your personal information will be processed in the United States and other jurisdictions where we or our service providers operate.

14 Third-Party Links and Services

The Service may contain links to third-party websites, services, or social media platforms. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

15 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Post a notice within the SociPal application;
• Send an email notification to the address associated with your account for significant changes.

Your continued use of SociPal after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: