Privacy Policy

Effective date: May 22, 2026

Last updated: May 22, 2026

1. Introduction

Tastic Consumer Brands LLC (“we,” “us,” or “our”) operates SocialBurst, a social media scheduling and publishing platform available at https://socialburst.ai(the “Service”). This Privacy Policy describes how we collect, use, and protect information about you when you use our Service.

By using SocialBurst you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed password.

Social media connection data: When you connect a live social platform (Facebook, Instagram, or LinkedIn) via OAuth, we store OAuth access tokens, page IDs, page names, and account usernames. Pinterest may be offered as future platform support after publishing is fully live. These are used solely to publish content on your behalf.

Content data: Posts you draft, schedule, or publish through SocialBurst; RSS feeds you connect; AI-generated content produced from your prompts or feeds.

Usage data: Login timestamps, posts published, errors encountered, and feature usage. This helps us operate and improve the Service.

Payment information: Payment processing is handled entirely by Stripe. We do not store credit card numbers. We store only your subscription plan status, renewal dates, and Stripe customer ID.

Agency client data: If you use SocialBurst on an Agency plan, we store information about the client accounts you manage, including client names, emails, and their social connections, at your direction.

3. How We Use Your Information

• Authenticate your account and maintain secure sessions
• Publish content to your connected social platforms when you instruct us to
• Generate AI-powered content from your RSS feeds and text prompts
• Send transactional emails: billing receipts, password resets, connection alerts
• Provide customer support when you contact us
• Monitor for errors and improve the reliability and quality of the Service
• Comply with legal obligations

We do not use your data for advertising or sell it to third parties.

4. Social Platform Data

We access social platform APIs only to the extent needed to deliver the Service you authorized:

• Facebook: pages_show_list, pages_read_engagement, pages_manage_posts, business_management — used to list and publish to Facebook Pages you authorize.
• Instagram: instagram_basic, instagram_content_publish — used to publish posts to Instagram Business accounts linked to your authorized Facebook Pages.
• LinkedIn: Profile and publishing scopes — used to publish to LinkedIn profiles and pages you authorize.
• Future platform support: Pinterest may require boards and pins scopes if and when Pinterest publishing becomes fully available.

We publish only when you manually schedule a post or enable auto-publishing for new RSS items. We do not read, analyze, or share your social media content beyond what is necessary to fulfill your publish requests. We do not use social platform data to train AI models.

5. Data Storage and Security

Your data is stored in Supabase-managed databases hosted on encrypted infrastructure. OAuth access tokens are stored server-side only and are never exposed to client-side code or third parties.

All communication between your browser and our servers uses HTTPS. We apply industry-standard security practices including access controls, audit logging, and regular security reviews.

No method of transmission or storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal data. We share data only with the following processors, limited to what is necessary for each to perform its function:

• Supabase — database hosting and authentication
• Stripe — payment processing and subscription management
• Resend — transactional email delivery
• Vercel — application hosting and edge infrastructure
• Anthropic — AI content generation (prompts are processed; outputs are not retained by Anthropic to train models per their API usage policy)

Each processor is bound by their own privacy policies and data processing agreements. We do not share your data with advertisers, brokers, or any other third parties.

7. Your Rights

• Access: Request a copy of the data we hold about you.
• Correction: Update or correct inaccurate data.
• Deletion: Request deletion of your account and all associated data.
• Disconnect social platforms: Revoke access to any connected platform at any time from the Settings page. This immediately removes the stored token.
• Export: Request an export of your data by emailing us.
• Opt out: Unsubscribe from non-essential communications at any time.

To exercise any of these rights, contact us at privacy@socialburst.ai.

8. Data Deletion

Disconnect a platform: Go to Settings → Connected Accounts and click Disconnect. The OAuth token is immediately revoked and deleted from our database.

Delete your account: Email privacy@socialburst.ai with the subject line “Delete My Account.” All personal data, content, social connections, and subscription records will be permanently deleted within 30 days.

Facebook Data Deletion: To request deletion of data collected via Facebook Login, use the data deletion request endpoint at https://socialburst.ai/api/facebook/data-deletion or email us directly.

9. Cookies and Tracking

We use essential cookies only — for authentication sessions and security. We do not use third-party advertising cookies, tracking pixels, or behavioral analytics tools.

10. Children’s Privacy

SocialBurst is not directed at users under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated date at the top of this page reflects the most recent revision. For material changes, we will notify active users by email at least 7 days before the change takes effect.

12. Contact

If you have questions about this Privacy Policy or your data, contact us:

Email: privacy@socialburst.ai
Company: Tastic Consumer Brands LLC
Country: United States