Privacy Policy
Last updated 26 September 2026
easySocially manages social media for small service businesses. This page explains what we collect, why we collect it, and how to have it deleted. We have tried to write it in plain English rather than legal boilerplate.
What we collect
- Your account details — name, email address, and a password (stored hashed, never in plain text) or your Google sign-in.
- Your business details — business name, trade, service area, phone number, website, and how you describe your work. You give us these during setup.
- Photos you send us — images you upload, or text to us, so we can turn them into posts.
- Your connected channels — an access token for each social account you connect, encrypted at rest, plus the identifier of the specific Page, profile or location you chose.
- Performance figures — the reach, engagement and similar numbers for posts we published for you, read back from those channels.
- Payment records — handled by Stripe. We store the subscription status and invoice history; we never see or store your full card number.
Why we ask for each social permission
When you connect a channel, the platform asks you to approve specific permissions. This is the complete list of what we request and what each one is used for. We do not request advertising, messaging, or business-management permissions.
| Channel | Permission we request | What we use it for |
|---|---|---|
instagram_basic | To identify the Instagram business account linked to your Page, and to read your existing photos if you ask us to import them. | |
pages_show_list | To list the Facebook Pages you administer, so you can choose which one we post to. | |
instagram_content_publish | To publish the photo posts you have approved to your Instagram business account. | |
instagram_manage_insights | To read engagement on posts we published, so your monthly report reflects real results. | |
pages_read_engagement | To read engagement on posts we published, so your monthly report reflects real results. | |
pages_show_list | To list the Facebook Pages you administer, so you can choose which one we post to. | |
pages_manage_posts | To publish the photo posts you have approved to your chosen Facebook Page. | |
pages_read_engagement | To read engagement on posts we published, so your monthly report reflects real results. | |
read_insights | Operating the connection you authorised. | |
| Google Business Profile | business.manage | To identify your Google Business Profile location, publish approved posts to it, and read their performance. |
w_organization_social | To publish the posts you have approved to your LinkedIn Company Page. | |
rw_organization_admin | To list the LinkedIn Company Pages you administer, so you can choose which one we post to. | |
w_member_social | Operating the connection you authorised. | |
openid | Operating the connection you authorised. | |
profile | Operating the connection you authorised. | |
r_organization_social | To read engagement on posts we published, so your monthly report reflects real results. |
What we do with it
- Assess how your business is performing against comparable businesses, and plan what to post.
- Write posts and publish them to the channels you connected, at the times our system selects.
- Measure how those posts performed and report it back to you.
- Take payment for your subscription.
- Contact you about your account, and by text message about photos if you have opted in.
We do not sell your data, and we do not use your photos or business information to train AI models.
Who we share it with
Only the providers required to run the service: our hosting and database provider, our payment processor (Stripe), our text-messaging provider, and the social platforms you chose to connect. Each receives only what it needs to do its job. We also disclose information if the law requires it.
Your mobile number stays with us. We do not share mobile numbers or text-message opt-in data (your consent to receive texts from us) with third parties or affiliates for their marketing or promotional purposes. Our text-messaging provider receives your number only to carry the texts between you and us.
How long we keep it
For as long as your account is open. When you close your account we stop billing, posting and text messages straight away and delete your channel access tokens at once. Your business data and photos are deleted 30 days later, except records we must keep for tax and accounting purposes (typically invoices, for seven years).
Your choices
- Disconnect a channel at any time from the Channels page — we immediately stop posting to it and delete the stored token.
- Delete a published post from the platform in one click.
- Get a copy of your data, or close your account and delete everything — yourself, any time, from Settings → Account → Your data, or by email to privacy@easysocially.com. See Delete your data for exactly what goes and what stays.
- Stop text messages by replying STOP, or by turning the photo line off in Settings.
Security
Access tokens are encrypted at rest. Access to your data is restricted at the database level so one business can never read another’s. Payment card details never reach our servers.
Contact
Questions about this policy, or about your data: privacy@easysocially.com.