Privacy Policy
Effective Date: September 15, 2026
This Privacy Policy explains what information Lunera AI Solutions FZC ("Lunera", "we", "our", "us") collects when you use AutoSocials (the website at autosocials.cc, the AutoSocials web application and its publishing workspace, together "the Service"), how we use and protect it, and the choices you have. AutoSocials helps you edit your own videos and publish them to your own YouTube, TikTok, Facebook and Instagram accounts.
Our design principle is simple: we collect only what is needed to publish the content you ask us to publish, to the accounts you connect, and nothing more. We do not sell personal information, we do not run advertising, and we do not use your content to train AI models.
In plain language
- We store your sign-in identity, the social accounts you connect, the media and captions you upload, and logs of publishing activity.
- Platform access tokens are encrypted at rest and used only to publish what you choose and to keep the connection alive.
- Disconnecting a platform deletes its token immediately. Most operational records are deleted automatically on fixed schedules listed below.
- You can access, correct or delete your data by emailing us. Deletion requests are completed within 30 days.
1. Information We Collect
The table below lists every category of information the Service handles.
| Category | Examples | Source | Why we use it |
|---|---|---|---|
| Identity | Name, email address, sign-in identifier | You, via our identity provider (WorkOS) | Authenticate you, create and secure your workspace, contact you about the Service |
| Connected accounts | Platform account or channel ID, display name, username, avatar, granted permissions, access and refresh tokens | The platform, when you consent | Show which accounts are connected, publish to them, refresh access, detect when reconnection is needed |
| Your content | Videos, cover images, titles, captions, hashtags, per-platform settings, schedules, drafts | You | Prepare, review, schedule and publish your posts; show status and history |
| Publishing records | Post and destination status, platform-assigned IDs and links, error messages returned by platforms | Generated by the Service and the platforms | Show you what was published, when, and why something failed |
| Technical and security data | IP address, browser type, request timestamps, audit log of account and connection changes | Automatically | Operate and secure the Service, prevent abuse, investigate incidents |
We never receive or store your social media passwords; authorisation happens on the platform's own consent screen.
2. How We Use Information
- To operate your workspace and publish or schedule the content you create to the accounts you have connected and authorised.
- To generate optional, AI-assisted suggestions such as clip selections, titles, captions and hashtags, which you review and can edit or discard before posting.
- To show you the status and history of your posts, including any reason a platform gives for rejecting or delaying content.
- To keep the Service secure, detect and prevent abuse, enforce our Terms, and comply with law.
- To communicate with you about the Service, such as a required reconnection or a change to these terms.
We do not sell or rent personal information. We do not use the content of your connected accounts or your uploads for advertising, profiling, or training machine-learning models.
3. Legal Bases
Where data-protection law such as the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service you asked for), legitimate interests (securing and improving the Service, preventing abuse), consent (connecting a platform, which you can withdraw by disconnecting), and legal obligation where we must retain records.
4. Platform-Specific Disclosures
Google and YouTube
AutoSocials uses YouTube API Services to upload videos, set titles, descriptions, tags, visibility and thumbnails on channels you connect. By using these features you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.
Limited Use disclosure. AutoSocials' use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the publishing features you request, we do not transfer it except as necessary to provide the Service or as required by law, we do not use it for advertising, and no human reads it except with your permission, for security, or to comply with law.
You can revoke AutoSocials' access at any time from your Google Account permissions page.
TikTok
AutoSocials uses TikTok Login Kit to identify the TikTok account you connect (display name, username and avatar) and the TikTok Content Posting API to upload and publish videos to that account with the title, privacy level, comment, duet, stitch and disclosure settings you choose. Depending on TikTok's requirements an upload may be delivered to your TikTok inbox for you to finalise in the TikTok app. We use TikTok data solely to provide these features, in accordance with the TikTok Developer Terms. You can revoke access at any time in the TikTok app under Settings and privacy, Security and permissions, Manage app permissions.
Meta (Facebook and Instagram)
AutoSocials uses the Facebook Graph API and Instagram API to publish Reels and videos to Facebook Pages and Instagram professional accounts you connect, and to read the basic Page or account information needed to show them in your workspace. Our use of Meta data complies with the Meta Platform Terms and Developer Policies. You can remove AutoSocials at any time in Facebook Settings under Business Integrations, or in Instagram under Apps and Websites.
5. Service Providers and Sub-processors
We share information only with providers that help us run the Service, and only what each needs:
- The social platforms (Google/YouTube, TikTok, Meta) receive the content and settings you publish.
- WorkOS provides sign-in and workspace identity.
- Convex hosts our application database, including drafts, post records and encrypted platform credentials.
- Cloudflare provides DNS, this website's hosting and network security.
- Our own servers store uploaded media and run the publishing worker that transmits content to platforms.
- Anthropic (Claude) processes descriptions of your clips to draft optional titles, captions and hashtags, under terms that prohibit training on that data. Anthropic Privacy Policy.
We may also disclose information when required by law, to protect the rights, safety or property of users or the public, or as part of a merger or acquisition, in which case this policy continues to apply to the transferred data.
6. Data Retention
We keep information only as long as it serves the purpose it was collected for. Current retention schedules are:
- Platform tokens: until you disconnect the platform, revoke access on the platform, or delete your workspace. Disconnection deletes the token immediately.
- Uploaded media and covers: while a draft or post that uses them exists in your workspace. Uploads that never complete are marked expired and removed by a daily clean-up.
- Drafts and post records: until you delete them or your workspace is deleted, so your history remains available to you.
- Publishing activity events: 90 days.
- Completed background jobs: 30 days; failed jobs, kept for troubleshooting: 180 days.
- Security audit log (account, connection and permission changes): 400 days.
- Backups: cycled on a rolling schedule; deleted data leaves backups as they expire.
Content that has already been published lives on the platform and is governed by that platform's retention; to remove it, delete it on the platform.
7. Security
We take security seriously and design the Service around least privilege:
- All traffic to the Service and to platforms is encrypted in transit with TLS.
- Platform access and refresh tokens are encrypted at rest with AES-256-GCM using keys held separately from the database, and are decrypted only by the isolated publishing worker at the moment of use.
- Workspaces are strictly isolated at the data layer; every query and change is scoped to your organisation.
- We request the minimum platform permissions needed and never store platform passwords.
- Administrative and connection changes are recorded in an audit log, and rate limits protect against abuse.
No system is perfectly secure. If we become aware of a breach affecting your personal information we will notify you and any required authority without undue delay.
8. Your Rights and Choices
- Disconnect any platform from the Accounts page at any time.
- Revoke access directly in Google, TikTok, Facebook or Instagram settings.
- Access, correct, export or delete your information by emailing [email protected]. See our Data Deletion page for the full process.
- Object or restrict processing based on legitimate interests, and withdraw consent at any time without affecting earlier processing.
- Complain to your local data-protection authority if you believe we have not handled your information lawfully.
We respond to verified requests within 30 days. Residents of the European Economic Area, United Kingdom, California and other jurisdictions with privacy laws have the rights those laws provide; we honour them regardless of where you live.
9. Cookies
The Service uses only strictly necessary cookies: a session cookie that keeps you signed in and a short-lived cookie that protects the sign-in and platform-connection flows. We do not use advertising or cross-site tracking cookies. The marketing website may use privacy-preserving, cookie-free traffic measurement provided by Cloudflare.
10. International Transfers
We are based in the United Arab Emirates and our providers operate in the United States and other countries. When information is transferred internationally we rely on the providers' contractual safeguards, including standard contractual clauses where applicable, so that it remains protected to the standard described here.
11. Children
AutoSocials is intended for adults and businesses. It is not directed to children under 13, or under the higher minimum age in your jurisdiction, and we do not knowingly collect their information. Videos that feature your family remain your content; publishing them is your decision and remains subject to each platform's rules on minors.
12. Changes to This Policy
We may update this policy as the Service evolves. Material changes will be announced in the Service or by email, and the effective date above will change. The previous version is available on request.
13. Contact
Lunera AI Solutions (FZC)
Block B, Office B56-065, University City
Sharjah Research Technology and Innovation Park (SRTIP)
Sharjah 00000, United Arab Emirates
General: [email protected]
Privacy and data requests: [email protected]
Website: autosocials.cc