Privacy Policy

Effective date: 2 September 2026

Vibsocial (“Vibsocial,” “we,” “us,” or “our”) provides tools for creating, managing, scheduling, and publishing content across third-party social media platforms.

This Privacy Policy explains how we collect, use, store, and share personal data when you visit vibsocial.net, create an account, connect a social media account, or use our services.

1. Data controller

The data controller responsible for Vibsocial is:

Legal entity: Bitbytesoft
Business ID: FI
Address:Kuussikallionkuja 4, Espoo, Finland
Email:[email protected]

2. Information we collect

Account information

When you register, we may collect your:

• Name
• Email address
• Password in securely hashed form
• Profile and organisation information
• Account preferences
• Subscription and billing status

Connected social media accounts

When you connect a third-party platform such as TikTok, Facebook, Instagram, LinkedIn, YouTube, X, or another supported service, we may receive:

• Social media account ID
• Username, display name, and profile image
• Access and refresh tokens
• Granted permissions and scopes
• Pages, channels, profiles, or business accounts you manage
• Information returned by the platform’s authorised API

We do not receive or store your social media password. Authentication is performed by the relevant platform through its official authorisation process.

Content and publishing information

We process information you upload or create through Vibsocial, including:

• Images, videos, captions, hashtags, and links
• Drafts and scheduled posts
• Publishing destinations and schedules
• Publishing status, platform responses, and error logs
• Content-generation instructions and generated content
• Available engagement or performance information provided through authorised APIs

Payment information

Payments may be handled by an external payment provider. We may receive billing details, transaction identifiers, subscription status, and limited payment information. We do not normally store complete payment-card details.

Technical and usage information

We may automatically collect:

• IP address
• Browser and device information
• Login times and activity records
• Cookie identifiers
• Pages and features used
• Diagnostic, security, and error logs
• Approximate location derived from your IP address

3. How we use personal data

We process personal data to:

• Create and manage your Vibsocial account
• Connect authorised social media accounts
• Create, schedule, and publish content at your direction
• Display your connected accounts and available publishing destinations
• Provide analytics and publishing results
• Process subscriptions and payments
• Provide customer support
• Secure the service and prevent fraud or abuse
• Diagnose technical problems and improve performance
• Communicate important service or policy changes
• Comply with legal and regulatory obligations
• Send marketing communications where permitted

Vibsocial does not publish content to a connected social media account without an action, configuration, or schedule authorised by the user.

4. Legal bases under the GDPR

Where the General Data Protection Regulation applies, we rely on:

• Contract: Processing necessary to provide the service you requested.
• Consent: Connecting optional integrations, receiving certain marketing communications, or using non-essential cookies.
• Legitimate interests: Securing and improving the service, preventing abuse, and maintaining business operations.
• Legal obligation: Meeting accounting, taxation, regulatory, and lawful disclosure requirements.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

5. Social media integrations

Vibsocial uses official APIs and authorisation systems provided by supported social media platforms.

When you connect TikTok or another platform, Vibsocial only requests permissions relevant to the features you choose to use. Depending on the integration, these permissions may allow Vibsocial to identify your account, upload content, save content as a draft, or publish content following your instruction.

Your use of a connected platform remains subject to that platform’s own terms and privacy policy. Platforms may independently collect and process information about your activity.

You can disconnect an integration from Vibsocial or through the applicable social media platform. Disconnecting an account prevents new actions but may not automatically delete content already published.

6. AI-assisted features

Vibsocial may provide AI-assisted features for generating or editing text, images, ideas, captions, or other content. Information submitted to these features may be processed by contracted AI or infrastructure providers solely to provide the requested functionality.

You should not submit confidential, sensitive, or unlawfully obtained personal data to AI features. You remain responsible for reviewing generated content before publishing it.

Where required by law or a third-party platform, you are responsible for appropriately labelling AI-generated or materially manipulated content.

7. How we share information

We may share personal data with service providers that help us operate Vibsocial, such as:

• Cloud hosting and storage providers
• Database and security providers
• Payment processors
• Email and customer-support providers
• Analytics and error-monitoring providers
• AI-service providers
• Connected social media platforms, when necessary to perform your requested action
• Professional advisers and public authorities where legally required

Providers may only process information under our instructions and contractual safeguards, except where they act as independent controllers.

We do not sell your personal data.

8. International data transfers

Some providers or social media platforms may process data outside Finland or the European Economic Area.

Where required, we use safeguards such as European Commission Standard Contractual Clauses, adequacy decisions, or other legally recognised transfer mechanisms.

9. Data retention

We retain information only for as long as needed for the purposes described in this policy:

• Account data is generally retained while your account remains active.
• Drafts, uploaded media, and scheduled content are retained until deleted by you, your organisation, or our applicable retention process.
• Social media tokens are retained while the relevant integration remains connected.
• Security and activity logs are normally retained for a limited operational period.
• Billing and accounting records may be retained for the period required by Finnish law.

After account deletion, data may remain temporarily in encrypted backups before being securely removed through our backup lifecycle. We may retain limited information where required for legal compliance, fraud prevention, dispute resolution, or enforcement of agreements.

10. Data security

We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, encryption in transit, restricted production access, credential protection, monitoring, and backup procedures.

No online service can guarantee absolute security. You are responsible for protecting your password, devices, and connected accounts and for notifying us promptly of suspected unauthorised access.

11. Your privacy rights

Depending on applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict or object to processing
• Receive certain information in a portable format
• Withdraw consent
• Object to direct marketing
• Lodge a complaint with a supervisory authority

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

To exercise your rights, contact [Privacy contact email]. We may need to verify your identity before completing a request.

12. Account and data deletion

You may delete content or disconnect social media accounts through your Vibsocial settings where those controls are available.

To request complete account deletion, use the account-deletion feature or contact [Privacy contact email]. We will delete or anonymise eligible information, subject to legal retention requirements.

Deleting data from Vibsocial does not delete content already published on a third-party platform. You must manage published content through the applicable social media account.

13. Cookies

We may use essential cookies for authentication, security, session management, and preferences. With your consent, we may also use analytics or marketing cookies.

You can control non-essential cookies through our cookie-consent tool or browser settings. Disabling essential cookies may prevent parts of the service from working.

14. Children

Vibsocial is intended for business and professional users and is not directed to children under 16. We do not knowingly collect personal data from children below the applicable age of digital consent.

If you believe a child has provided personal data to us without valid authorisation, contact us so we can investigate and remove it.

15. Changes to this policy

We may update this Privacy Policy when our services, integrations, or legal obligations change. We will publish the revised version with a new effective date and provide additional notice when a change materially affects your rights.

16. Contact us

For questions, privacy requests, or complaints, contact:

Legal entity: Bitbytesoft
Business ID: FI
Address:Kuussikallionkuja 4, Espoo, Finland
Email:[email protected]