← Back to home

Privacy Policy

Last updated: 17 May 2026

1. Who we are

Social Autopilot ("we", "us", "our") is an AI-powered social media scheduling tool operated by Stack Labs. We are based in Birmingham, United Kingdom. Contact: adeniyi.tosin@outlook.com

2. What data we collect

We collect: (a) Account information — email address and password when you register. (b) Social platform tokens — OAuth access tokens for LinkedIn, Facebook, Twitter, Instagram and TikTok that you connect. (c) Content data — posts, topics, brand voices and calendar slots you create. (d) Usage data — page views and feature usage for improving the product.

3. How we use your data

We use your data to: provide and operate the Social Autopilot service; authenticate you and manage your account; connect to social platforms on your behalf and publish content you approve; improve the product through aggregated analytics. We do not sell your data to third parties. We do not use your data for advertising.

4. Facebook and Meta data

When you connect a Facebook Page, we access it via the Facebook Graph API using the pages_manage_posts, pages_show_list, and pages_read_engagement permissions. We store your Page access token to publish content on your behalf. We do not store personal Facebook user data beyond what is necessary to operate the service. You can revoke access at any time via Facebook Settings → Apps and Websites.

5. LinkedIn data

When you connect LinkedIn, we access your profile via the LinkedIn API using the openid, profile, email, and w_member_social permissions. We store your access token to publish posts on your behalf. You can revoke access at any time via LinkedIn Settings → Data Privacy → Third-party applications.

6. Data storage and security

Your data is stored in Supabase (PostgreSQL) hosted on AWS in the EU region. Access tokens are stored encrypted. We use Vercel for hosting with HTTPS enforced on all connections. We retain your data for as long as your account is active. You may request deletion at any time.

7. Your rights

Under UK GDPR you have the right to: access your personal data; correct inaccurate data; delete your data; export your data; object to processing. To exercise any right, email adeniyi.tosin@outlook.com. We will respond within 30 days.

8. Data deletion

To delete your account and all associated data, email adeniyi.tosin@outlook.com. All your posts, variants, calendar slots, brand voices, and platform connections will be permanently deleted within 30 days.

9. Cookies

We use only functional cookies necessary for authentication (Supabase session tokens stored in localStorage). We do not use tracking cookies or advertising cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of Social Autopilot after changes constitutes acceptance.

11. Contact

For privacy questions: adeniyi.tosin@outlook.com. For data deletion requests: adeniyi.tosin@outlook.com.