Privacy Policy

Codes Easy ("Social Zero", "we", "us") operates https://socialzero.io. We act as the data fiduciary / controller for the personal data we process about you. This policy is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU/UK GDPR.

1. Data we collect

Information you give us

• Account data: name, email address, and password (stored hashed).
• Business/brand profile: brand name, voice, and preferences you configure.
• Content: prompts, briefs, captions, images, and posts you create or upload.
• Support communications: messages you send us.

Information from connected accounts

When you connect a social media account (Instagram, Facebook, Threads) via secure OAuth, we receive access tokens and limited profile/publishing permissions needed to schedule and publish on your behalf. We never receive your social-platform password.

Information collected automatically

• Usage data: features used, actions taken, and AI usage counts.
• Technical data: IP address, device/browser type, and approximate location/currency derived from your IP (used to show the correct pricing and payment options for your region).
• Cookies: see our Cookie Policy.

Payment data

Payments are processed by our PCI-DSS-compliant payment partners (Razorpay and PayPal). We do not collect or store your full card number, CVV, or bank credentials on our servers. We store only non-sensitive transaction records (such as a gateway transaction ID, plan, amount, currency, and status).

2. How we use your data

• To create and manage your account and provide the Service;
• To generate AI content and publish scheduled posts to your connected accounts;
• To process subscriptions, recurring billing, and receipts;
• To show region-appropriate pricing and payment methods;
• To provide support and respond to your requests;
• To keep the Service secure and prevent fraud and abuse;
• To comply with legal and regulatory obligations.

3. Legal basis & consent

We process your personal data based on your consent (given when you create an account and use features), to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the Service. Your consent is free, specific, informed, and may be withdrawn at any time (see "Your rights" below); withdrawing consent may limit features that depend on that data.

4. Who we share your data with

We do not sell your personal data. We share it only with the service providers ("sub-processors") needed to run the Service, each bound to protect it:

We may also disclose data where required by law, regulation, or valid legal process, or to protect our rights and the safety of users.

5. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. We retain certain records (such as transaction records) for longer where required for tax, accounting, or legal compliance. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where retention is legally required.

6. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords, access controls, and reliance on PCI-DSS-compliant payment partners so card data never touches our servers. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authority of a breach as required by law.

To publish a post, the platforms you connect (Instagram, Facebook, Threads) must download the images or videos in that post. At publish time we therefore expose each media file through a signed, short-lived public URL so Meta can fetch it; the link is single-purpose and expires shortly after. Your social access tokens are stored encrypted at rest and are never exposed in this way.

7. International transfers

Some of our sub-processors are located outside India. Where personal data is transferred internationally, we rely on the provider's safeguards and process such transfers in accordance with applicable law.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and request a summary of processing;
• correct or update inaccurate or incomplete data;
• request erasure of your data;
• withdraw consent and manage your subscription/connections at any time;
• nominate another individual to exercise your rights in the event of death or incapacity (as provided under the DPDP Act);
• raise any complaint or concern with our support team, and escalate to the Data Protection Board of India.

To exercise any of these rights, email us at [email protected].

9. How to delete your data

You control the data connected to your Social Zero account and can delete it at any time, in any of three ways. Each is summarised below — our Data Deletion page walks through every one of them step by step, including the exact click paths on Facebook, Instagram and Threads.

• Disconnect a social account. On the Integrations page, disconnecting a Facebook Page, Instagram, or Threads account immediately deletes the access tokens and that account's data we hold for it.
• Delete your entire account. In your account Settings you can permanently delete your Social Zero account. This erases your personal data, content, uploaded media, and every connected social token. We may retain limited billing, transaction, tax, or accounting records where required by applicable law. Such records are retained only for the legally required period and are not used for other purposes.
• Remove the app from Meta. You can also revoke access directly on Facebook, Instagram, or Threads (Settings → Apps and Websites / Business Integrations). When Meta notifies us that you removed the app, our deauthorize and data-deletion callbacks automatically erase the corresponding tokens and account data — you do not need to contact us.

When deletion is triggered by removing the app on Meta, you can confirm its status on our public status page at https://socialzero.io/data-deletion/status/<code>, using the confirmation code Meta shows you. You may also email [email protected] to request deletion or check on its progress.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their personal data. If you believe a minor has provided us data, please contact us so we can remove it.

11. Privacy questions & complaints

For any question, request, or complaint about your personal data or this policy, contact our customer support team:

We acknowledge complaints within 48 hours and aim to resolve them within one month.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with a revised effective date.