Política de Privacidad

1. Introduction

This Privacy Policy explains how Simplo ("we," "us," or "our") collects, uses, and shares information when you use our AI-powered social media management platform (the "Service").

2. Information we collect

We collect the following categories of information:

• Account information: your name, email address, and password (stored as a hash)
• Connected social account data: OAuth access tokens and basic profile data for Instagram, Facebook, X (Twitter), and TikTok accounts you connect
• Brand and content data: information about your brand, research inputs, generated captions, and uploaded or generated images
• Usage data: how you interact with the Service, for improving reliability and features
• Advertising attribution data: the campaign tags and Meta click identifier in the link you arrived through, and Meta cookie identifiers, when you create an account (see section 7)

3. How we use your information

We use your information to operate and improve the Service: to generate content on your behalf, to publish or schedule posts to the social media accounts you connect, to process payments, to provide customer support, and to maintain the security of your account.

4. AI processing and subprocessors

To generate captions, research summaries, and other text content, inputs you provide are sent to Anthropic's Claude models. To generate images, inputs are sent to Google Gemini. These providers process your inputs solely to return generated output to the Service and do not use your data to train their models under our agreements with them. Generated and uploaded images are stored with Cloudinary, our image hosting provider.

To publish to Facebook, Instagram and TikTok, Simplo may use Post for Me (postforme.dev), a social media publishing service owned and operated by Day Moon Development LLC. When an account is connected through Post for Me, Post for Me receives and stores that account's OAuth tokens and profile details, and the captions and images of the posts you publish through it. Its handling of that data is governed by the Post for Me Privacy Policy.

5. Connected social accounts

When you connect an Instagram, Facebook, X (Twitter), or TikTok account, we receive an OAuth access token and basic profile information from that platform, which we use solely to publish or schedule content you approve and to display your connected account status. We do not access data from these platforms beyond what is necessary to provide the Service. You can disconnect any social account at any time from your account settings, which revokes our access.

Facebook, Instagram and TikTok accounts may be connected through our posting partner, Post for Me (postforme.dev). For those accounts, the platform's OAuth access token is issued to and stored by Post for Me, which publishes the content you approve on our behalf. Simplo stores only the account's username, profile picture, its identifiers (the platform's account id, Post for Me's account id and, for Meta accounts, your app-scoped Facebook user id) and when it was connected. To check that a TikTok account can post publicly, Simplo reads its access token from Post for Me at the moment of publishing; to check that an Instagram account granted permission to publish, Simplo reads its access token once when you connect it. Neither token is stored. When you disconnect the account in Simplo, or delete the project it belongs to, we ask Post for Me to disconnect it as well.

Each social platform also processes your data under its own privacy policy when you connect an account and when content is published to it: Meta (Facebook and Instagram), TikTok and X. You can also remove Simplo's or Post for Me's access from each platform's own settings at any time.

6. Payment information

Payments and subscription billing are handled by Stripe. Simplo does not store your full card number or other sensitive payment details; Stripe processes and stores that information in accordance with its own privacy policy and PCI-DSS compliance obligations.

7. Cookies, analytics and advertising measurement

We use a minimal set of cookies necessary to keep you signed in and to understand aggregate usage of the Service.

We use PostHog, a product analytics service, to understand how people use Simplo so we can improve it. On our website (getsimplo.ai), PostHog runs without cookies and stores nothing in your browser: it records the pages you visit, how long you stay and which sign-up buttons you click, and counts visitors with a one-way hash computed on PostHog's servers. In the app, PostHog keeps an identifier in your browser and links your activity to your Simplo account ID, never to your email address. It records the pages you open and the actions you take, such as creating a project, connecting a social account, generating content, scheduling or publishing a post, and starting or cancelling a plan, together with the campaign tags from the link you arrived through.

While you are signed in to the app, PostHog also records how its screens change as you use them (session replay), so we can see where people get stuck. Every form field and all text on screen are masked in your browser before a recording is sent, so recordings do not contain what you type or the captions you write; images shown on screen, such as generated pictures, can appear in them. Web addresses are sent with sign-in, reset and other tokens removed. When something goes wrong in the app or on our servers, we also send PostHog an error report: the technical details of the failure (the error message, with email addresses and tokens removed, and where in our code it happened) and your Simplo account ID, so we can find and fix it. PostHog stores this data in the United States and processes it on our behalf under the PostHog Privacy Policy.

We advertise on Facebook and Instagram, and use Meta's measurement tools to learn which ads lead people to create an account. Our website (getsimplo.ai) and the sign-in and sign-up page of the app load the Meta Pixel, which sets Meta cookies in your browser and tells Meta which of our website pages you visited, whether you viewed our pricing, and when you create an account and your free trial starts. When you create an account, our server also sends that sign-up to Meta directly through the Meta Conversions API, so it is counted even when a browser blocks the Pixel. That server message contains your email address and your Simplo account ID, both converted into a one-way hash (SHA-256) before they leave our servers, together with your IP address, your browser's user agent and the Meta cookie identifiers.

We use this only to measure our advertising and to help Meta show our ads to people likely to be interested in Simplo. Pages inside the app after you sign in are not reported to Meta, and nothing you create or connect in Simplo (your brand data, posts, images or social accounts) is sent to Meta through these tools. With your account we also keep the campaign tags (such as utm_source and utm_campaign) and Meta click identifier from the link you arrived through, so we can tell which ads brought new customers.

Meta handles the data it receives under the Meta Privacy Policy. You can limit it by blocking third-party cookies or trackers in your browser, or by changing your Meta ad preferences. You can also ask us to delete the attribution data we keep with your account by contacting us (see section 12).

8. Data retention

We retain your account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. You can exercise these rights from your account settings, or by contacting us using the details below.

10. Children's privacy

The Service is not directed to individuals under 18 years old, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above.

12. Contact

Questions about this Privacy Policy can be sent to [email protected].