Privacy Policy

Loop Social Social ("we", "the app") is a social-media management dashboard operated by Loop Social. It lets our team, and clients we are authorised to manage, view analytics and publish content for their connected social accounts. This policy explains what data we access, how we store it, and how to have it deleted.

Information we access

When you connect a social account (Facebook, Instagram, TikTok, YouTube, LinkedIn, X or Google), you authorise the app to read data through that platform's official API. Depending on the platform and the permissions you grant, this may include: your public profile (name, avatar, handle), aggregate account statistics (follower, like, view and reach counts), your own posted content and its metrics, and — where you enable it — comments and direct messages on your accounts, so you can read and reply to them from one inbox.

To publish or reply on your behalf, the platform issues us an access token scoped to the permissions you granted. We only request the permissions the features you use actually need.

How we use it

Data is used only to display analytics and to publish or reply to content that you explicitly request. We do not sell your data, use it to advertise to you, or share it with third parties except the service providers listed below that are required to run the app.

Storage & security

Access and refresh tokens are encrypted at rest using AES-256-GCM before they are stored, with a key held only on our server — they are never stored in plain text and are never sent to the browser. We do not maintain a long-term copy of your posts, messages or metrics; that content is fetched on demand from the platform APIs and cached only briefly (typically under a few minutes) to render the dashboard.

Service providers

We rely on a small number of processors to run the app: Vercel (hosting and encrypted token/content storage), and Anthropic (which powers the optional AI features such as suggested captions and replies — the text you choose to generate is sent to Anthropic for that purpose and is not used to train its models). Publishing and analytics requests go directly to the respective platform APIs (Meta, TikTok, Google, LinkedIn, X). We do not share your data with anyone else.

Data deletion

You can have your data removed in any of these ways:

• Disconnect in the app. Removing a connected account (or its workspace) deletes the stored token and connection data for that account immediately.
• Remove the app from Facebook/Instagram. When you remove Loop Social Social from your Facebook or Instagram settings, Meta notifies our deauthorize callback and we delete the associated connection data automatically.
• Request deletion from Facebook. You can submit a data-deletion request through Facebook; it is handled by our callback at https://www.lopsocial.com/api/meta/data-deletion, which deletes your data and returns a confirmation code you can use to check status.
• Email us. Contact info@dubaiprod.com and we will remove any stored credentials and data associated with your account.

You can also revoke access at any time from the respective platform's app settings, which immediately stops all data access.

Contact

Loop Social — info@dubaiprod.com