Privacy policy
Last updated: 15 July 2026
Social Cross ("we", "the service") is a social-media scheduling tool. This policy describes what data we collect, why, and what we do with it.
Data we collect
- Account data — your email address and a hashed password (bcrypt). We never store your password in readable form.
- Connected social accounts — when you connect Instagram, TikTok, Threads or LinkedIn, the platform gives us an access token plus your public profile id and display name. Tokens are encrypted at rest (AES-256-GCM) and used solely to publish the posts you schedule and to read the basic profile info shown in your dashboard.
- Content you create — post text, hashtags, locations and uploaded photos/videos, stored until you delete them so scheduled posts can publish. Uploaded media is served from unlisted, randomly-named URLs because the platforms fetch it by URL at publish time.
- Billing data — payments are processed by Stripe; we store only your Stripe customer id and subscription status, never card numbers.
- Cookies — a single session cookie to keep you logged in. No advertising or cross-site tracking cookies.
How we use it
Only to operate the service: publishing your scheduled posts through each platform's official API, generating optional AI caption suggestions (your draft text is sent to Anthropic's API for that feature and is not used to train models), emailing you transactional messages (verification, password reset, receipts), and billing through Stripe. We do not sell or share your data for advertising.
Third parties
Data is shared only with the processors needed to run the service: the social platforms you connect (Meta, TikTok, LinkedIn, X), Stripe (payments), Resend (transactional email) and Anthropic (AI captions, only when you use that feature).
Data deletion
Disconnecting a social account deletes its token. Deleting your account removes your profile, tokens, posts and uploaded media; email us and we will complete deletion within 30 days. You can also revoke Social Cross's access at any time from the platform's own security settings, which invalidates our token immediately.
Contact
Questions or deletion requests: giorgiofragiacomo92@gmail.com