Privacy Policy

Last updated: 21.09.2026

SocialXCenter ("Service", "we") is operated by Social X Center. This policy explains what data we process when you use https://socialxcenter.com and the connected social media integrations, why we process it, and how you can control it.

1. Data we collect

• Account data: name, e-mail address, password hash, language, IP address and login times.
• Connected Instagram / Facebook accounts: account ID, username, display name, profile picture, follower and post counts, and the access token issued by Meta. Tokens are stored encrypted (XSalsa20-Poly1305 / AES-256) and are never displayed.
• Content data from Meta: your posts, Reels and their captions; comments and direct messages sent to your account, including the sender's username/ID and message text; story mentions and replies. We receive these through Meta's official Instagram API and webhooks only after you authorize the Service.
• Data you create: automation rules, reply templates, knowledge-base text, notes and tags on contacts, giveaways and scheduled posts (including uploaded media).
• Derived data: intent and sentiment labels, lead records extracted from messages (name, phone, e-mail, city, product interest when the sender shares them), reports and rule suggestions.
• Billing data: orders, plan, invoices. Card details are processed by our payment provider (iyzico) and never stored by us.

2. Purposes and legal basis

We process data to provide the Service you signed up for (performance of contract): running the rules you define, replying to comments and messages on your behalf, showing your inbox and statistics, generating AI suggestions, sending notifications and invoices. We also process data to secure the Service (legitimate interest) and to meet legal obligations (tax law). We do not sell data and do not use it for advertising.

3. Meta Platform data

Data obtained from Instagram and Facebook is used exclusively to provide features you enable in your account and in accordance with the Meta Platform Terms and Developer Policies. We do not use Platform data to build profiles of people who are not our customers, do not transfer it to data brokers, and do not use it to train general-purpose AI models.

4. Artificial intelligence

When you enable AI features, the incoming message text, the related post caption and the business information you entered are sent to an AI model to generate a reply, a suggestion or a report. By default the model runs on our own servers and data does not leave our infrastructure. If a cloud provider (Anthropic) is enabled by the administrator, the same data is transmitted to that provider under its data processing terms and is not used for training.

5. Sub-processors

Hetzner Online GmbH (hosting, Germany), Cloudflare (DNS), iyzico (payments), Meta Platforms (social media APIs). E-mails are sent from our own servers.

6. Retention

Comment and message events: 180 days. System logs: 90 days. Queue and AI job records: 60 days. Account, rule and billing data: for the duration of the contract and afterwards as required by tax law (up to 10 years for invoices). Instagram access tokens are deleted immediately when you remove an account or the Service.

7. Your rights

You can access, correct, export (CSV) and delete your data from the panel at any time. You may also request deletion via the data deletion page. EU/EEA users have the rights set out in the GDPR; users in Türkiye have the rights set out in KVKK Art. 11 (see our KVKK notice). Requests are answered within 30 days.

8. Cookies

Only strictly necessary cookies are used: session, language, theme and trial-abuse prevention. No advertising or third-party tracking cookies.

9. Security

TLS on all connections, encrypted tokens, hashed passwords, rate-limited login, webhook signature verification, daily backups.

10. Changes and contact

We will announce material changes in the panel. Questions: info@socialxcenter.com.