Privacy Policy

SocialFlow · Last updated July 22, 2026

SocialFlow ("the Service") is a social-media management tool operated by ITelligent Technologies Inc. ("we", "us"). It helps content creators manage their own Instagram presence, email inbox, and business workflows. This policy explains what data the Service accesses, how it is used, and how you can have it deleted.

Information we collect

Account information — your name and email address, provided through our authentication provider (Auth0) when you sign in.
Instagram data — when you connect an Instagram professional account, we access your profile (username, account id), your media (posts, captions, permalinks, engagement counts), comments on your posts, and account insights, using Meta’s Instagram API with your explicit OAuth consent. We only access accounts you connect yourself.
Email data — if you connect a Gmail account, we read incoming email to categorize it, summarize it, and prepare draft replies. The Service never sends email on your behalf. Google user data is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
Content you create — posts you compose or schedule, replies you write, and business records (e.g. sales, deals, tasks) you keep in the Service.

How we use information

To display and manage your own content inside the Service.
To provide AI-assisted features (comment sentiment analysis, suggested replies, email triage, content ideas). For these features, relevant content is processed by Anthropic’s Claude API. It is not used to train AI models.
To perform actions you explicitly request, such as publishing a post or replying to a comment.

We do not sell your data, show ads, or share your data with third parties beyond the service providers named above (Meta, Google, Auth0, Anthropic, and Amazon Web Services for hosting).

Storage and security

Data is stored on Amazon Web Services in the United States. OAuth access tokens are encrypted at rest with AWS KMS and are never exposed to your browser or to third parties. Access to production systems is restricted and authenticated.

Data retention and deletion

Data is retained while your account is active. Disconnecting an Instagram or Gmail account from the Service deletes its stored access tokens immediately. You can request full deletion of your data at any time — see Data Deletion Instructions. Deletion requests are honoured within 30 days.

Contact

For privacy questions or requests, contact hossein.shayesteh@gmail.com.