Privacy Policy

This document is an operational template for SocialLitr. It is not a substitute for independent legal advice.

1. Who we are

Litrgroup Limited operates SocialLitr, a social media management platform for creators and teams (the “Platform”). We are the data controller for personal data processed to provide the Platform, unless we act as a processor for content you publish to third-party social networks (in which case those networks’ terms also apply).

2. Information we collect

• Account data: name, email address, password (hashed), organisation and space details, role and billing plan information.
• Service data: posts, media, captions, campaigns, tasks, approvals, inbox messages synced into the Platform, brand kit settings, and related workflow metadata.
• Connected accounts: OAuth tokens and profile identifiers for social platforms you connect (for example Instagram, TikTok, YouTube, LinkedIn, X), used to publish, schedule, and sync engagement data.
• Guest & approval data: names, emails, and comments from guest reviewers or sponsors using share links.
• Usage & device data: IP address, browser type, approximate location derived from IP, pages viewed, and diagnostic logs needed to secure and operate the Platform.
• Cookies: as described in our Cookie Policy. Non-essential cookies are only set after you consent via our cookie banner.

3. How we use information

We process personal data to:

• provide, maintain, and improve the Platform (contract / legitimate interests);
• authenticate users, prevent abuse, and keep accounts secure (legitimate interests / legal obligation);
• schedule and publish content to connected platforms at your direction (contract);
• send service emails (for example security alerts, billing notices) (contract / legitimate interests);
• send product updates or marketing only where permitted by law and, for UK/EEA users, with consent where required (consent / soft opt-in where applicable);
• analyse aggregated usage to improve features when you have consented to analytics cookies (consent).

4. Legal bases (UK GDPR)

Depending on the activity, we rely on: performance of a contract; consent (including cookies and some marketing); legitimate interests (security, product improvement that does not override your rights); and legal obligation.

5. Sharing

We share data with:

• Social platforms you connect, to publish and retrieve content/engagement as you instruct;
• Service providers (hosting, email delivery, storage, payment processors when billing is enabled) acting as processors under contract;
• Team members in your organisation/spaces according to roles you configure;
• Authorities when required by law.

We do not sell your personal data. Targeted advertising preferences are described in our Targeted Ads Preferences.

6. International transfers

The Platform may be hosted or supported using infrastructure outside the UK. Where we transfer personal data internationally, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or Standard Contractual Clauses where required.

7. Retention

We keep account and service data while your organisation is active and for a reasonable period afterwards (typically up to 12 months) unless a longer period is required for disputes, security, or legal compliance. You may request deletion of your account; some residual logs may remain for security and audit purposes for a limited time.

8. Security

We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS in production), hashed passwords, access controls, and session security. No method of transmission or storage is completely secure.

9. Your rights

Under UK GDPR you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time (including via our cookie settings) without affecting prior lawful processing. You may complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

To exercise rights, email privacy@sociallitr.com.

10. Children

SocialLitr is not directed at children under 16. If you believe we have collected data from a child, contact us and we will take appropriate steps.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may also be notified in-product or by email where appropriate.

12. Contact

Litrgroup Limited · SocialLitr · privacy@sociallitr.com