Go Social AI
العربية
Go Social AI

Privacy Policy

Effective: September 17, 2026 · Version 2.0

العربية

This Privacy Policy explains how GoSocialAI ("we", "us") collects, uses, shares and protects personal data when you use GoSocialAI, including our website, the dashboard at app.gosocialai.com, Bio Hub pages and Digital Menu pages. It is written to comply with Egypt's Personal Data Protection Law No. 151 of 2020 and, for users in the EU and UK, the GDPR.

Who we are and scope

GoSocialAI is a software-as-a-service platform based in Cairo, Arab Republic of Egypt. It gives businesses and agencies tools to manage social media accounts, link-in-bio pages (Bio Hub) and digital restaurant menus. It is operated by GoSocialAI.

We act as the "controller" of our customers' account and billing data. For data that customers collect about their own customers (end users), we act as a "processor" on the customer's behalf, as described below.

This policy does not cover how external platforms (such as Meta, TikTok, Google and LinkedIn) process your data; their own privacy policies apply.

Data you give us

  • Account data: name, email, password (stored hashed, never in plain text), interface language, and phone number if you provide it. If you sign in with Facebook, we receive only your name and email.
  • Workspace and team data: workspaces and brands, team members' names, emails and roles, and invitations sent.
  • Content: drafts, posts, captions, uploaded media, schedules, reports and competitor notes.
  • Brand Brain sources: website URLs you add and the text we read from them, uploaded documents, pasted text and posts, and notes.
  • Payment data: billing name, email, phone and address shown on invoices, payment receipts you upload, and the payment method used (Vodafone Cash or InstaPay). We do not collect or store card details.
  • Support and contact data: name, email, messages and attachments in the support chat, and website contact-form details (name, email, phone, company, city, message).

Data we collect automatically

  • Session data: IP address and browser user agent, to secure sign-in and sessions.
  • Activity and audit logs: significant actions taken in your account, for security and support.
  • Email verification codes (OTP) at sign-up or password reset.
  • Technical logs for platform notifications (webhooks) and AI points usage.
  • Cookies and browser local storage, as detailed in our Cookies Policy.

Facebook and Instagram (Meta) data

When you connect Facebook Pages or Instagram Business accounts and approve Meta's permission screen, we receive the following, depending on the features you use:

  • Page ID, name and picture; the connected Instagram Business account's username and picture.
  • Page access tokens, stored encrypted.
  • Posts and media you publish through the platform.
  • Comments and messages received on your Pages and Instagram accounts: the contact's name, profile picture, platform user ID, message text and attachment links.
  • Post and account insights, including audience demographics in aggregate form only.
  • Ad account data, when you connect Meta Ads.
  • Ad referral information on conversations started from click-to-message ads.

We use this data only to provide the features you use: publishing, the unified inbox, reply suggestions, analytics and reports. We do not sell it, do not use it for ad targeting, and do not share it except with service providers processing it on our behalf.

You can revoke our access at any time in Facebook Settings (Business Integrations) or Instagram Settings (Apps and Websites). Meta then sends a deletion request to our Data Deletion Callback, and you receive a confirmation code to check the request status at:

TikTok data

When you connect a TikTok account and give your consent, we access only what the features you use require:

  • Login and content: open_id, display name, avatar, username, your video list and its statistics, and publishing to your account only at your explicit request.
  • TikTok Business: profile data, insights and comments, where connected.
  • TikTok Ads: advertiser accounts and their reporting.
  • Access tokens are stored encrypted. Removing the authorization in your TikTok settings revokes our access.

Google and YouTube data

When you connect a Google account, we use YouTube API Services. By connecting a YouTube account, you agree to the YouTube Terms of Service and the Google Privacy Policy:

The Google data we use today:

  • Your YouTube channel ID and title.
  • Your Google Business Profile account list.
  • OAuth tokens, stored encrypted.

We use this data only to show and connect your account and, when the feature is available, to publish at your request. We do not use it for advertising, do not sell it, and no person reads it except with your consent, for security purposes, or to comply with the law. No Google or YouTube user data is ever sent to AI providers.

GoSocialAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

You can revoke our access at any time from your Google Account permissions page: https://myaccount.google.com/permissions

LinkedIn data

  • Your name and basic profile data via OpenID.
  • The organization pages you administer.
  • Posting to those pages, only at your request.

Data about your customers (our processor role)

The platform lets you collect data about your own customers and followers (end users). We process this data on your behalf and only on your instructions. It includes:

  • Inbox contacts and conversations.
  • Leads, bookings and orders submitted on Bio Hub pages (name, email, phone, message, answers).
  • Digital Menu orders (name, phone, address, notes) and the restaurant's customer list.
  • Recipients of scheduled email reports.

As the controller of this data, you are responsible for having a lawful basis to collect it and for informing your customers. End users who wish to exercise their rights should contact the relevant business first; we will assist the customer in responding.

How we use personal data

  • To provide the service: account creation, platform connections, publishing and scheduling, the inbox, analytics, reports, Bio Hub and Digital Menu pages.
  • To run the AI features you request.
  • To process manual payments, activate plans and issue invoices.
  • To send service messages: verification codes, team invitations, reports and order alerts.
  • To provide technical support and answer your questions.
  • To secure the platform and prevent fraud and abuse.
  • To meet legal, tax and accounting obligations.
  • To analyze and improve our marketing website, only after you accept analytics cookies.

Legal bases for processing

  • Contract: to provide the service you signed up for under our Terms of Use.
  • Consent: when you connect external platform accounts, and for analytics cookies. You can withdraw consent at any time.
  • Legitimate interest: to secure the platform, prevent abuse and improve the service, without overriding your rights.
  • Legal obligation: to keep invoice and payment records and to respond to requests from competent authorities.

AI processing

To provide AI features, we send only the data needed to AI providers (OpenAI and Google Gemini/Vertex AI), which act as data processors on our behalf. This includes:

  • The content and prompts you write.
  • Brand Brain sources and your brand profile.
  • For inbox reply suggestions: the latest messages of the conversation and the contact's name.

We do not use platform data to train our own models, and no Google or YouTube user data is sent to any AI provider. AI outputs can be inaccurate and must be reviewed before publishing.

Sharing and service providers

We share data only to the extent necessary with:

  • Hostinger: server, database and file hosting.
  • Hostinger SMTP: sending email (verification codes, invitations, reports, order alerts).
  • OpenAI and Google (Gemini/Vertex AI): processing AI features.
  • Social platforms (Meta, TikTok, Google, LinkedIn): when you take an action on them, such as publishing or replying to a message.
  • A WhatsApp relay service: to notify a restaurant owner of menu order details, if the restaurant enables it.
  • Google Tag Manager and Google Analytics: on the marketing website, only after you accept analytics cookies.
  • Government or judicial authorities: where the law requires it.

No sale and no advertising use

We do not sell or rent personal data to anyone. We do not use your connected account data or your customers' data for ad targeting or to build marketing profiles.

International data transfers

Our servers are hosted by Hostinger in the European Union (France and Lithuania). AI providers may process data outside Egypt: OpenAI in the United States, and Google Vertex AI/Gemini on Google's global cloud infrastructure.

These transfers rely on the providers' data processing terms, and we send only the data needed to deliver the feature you requested.

Data retention

  • Account data: while your account is active; after an account deletion request, we delete or anonymize it within 30 days.
  • Data from a disconnected social account (channels, inbox conversations and messages, insights, synced posts): deleted automatically 30 days after disconnection, and restored if you reconnect within that period. Deleted immediately when a deletion request arrives from Meta.
  • Brand Brain source text and files: erased after you delete the source, by a daily job.
  • Published videos: removed from our storage shortly after they are published.
  • Webhook and technical logs: 30 days; they contain delivery metadata, not message content.
  • Security and activity logs: up to 12 months.
  • Digital Menu customer data: anonymized 6 months after a restaurant's menu becomes inactive; restaurant owners can delete a customer at any time.
  • Invoices and payment records: as long as required by Egyptian tax and accounting law.
  • Backups: may persist for a short, limited period before being overwritten.

Data security

We protect data using encrypted connections (HTTPS/TLS), encryption of OAuth and Page tokens at rest, hashed passwords, role-based access for team members, an audit log of administrative actions, and restricted staff access. See our Security Policy for details.

If a personal data breach occurs, we notify affected users and the competent authorities as required by law and without undue delay, including notifying Egypt's Personal Data Protection Center within 72 hours.

Your rights

Under applicable law, you have the right to:

  • Access your personal data and learn how it is processed.
  • Correct inaccurate or incomplete data.
  • Delete your data.
  • Restrict or object to processing.
  • Data portability (export your data).
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint with Egypt's Personal Data Protection Center, or with the data protection authority in your country.

How to exercise your rights

In the platform: Settings → Profile → "Privacy requests", where you can export your data or request deletion of your account. Or email info@gosocialai.com from the email address registered on your account.

We respond within 30 days and may ask you to verify your identity before acting on a request, to protect your account.

Children

The service is for businesses, and users must be at least 18 years old. The service is not directed to children and we do not knowingly collect their data. If we learn that a child's data was collected, we will delete it.

Cookies

We use cookies that are strictly necessary to run the service, and analytics cookies only with your consent. The full list and how to manage your choices are in our Cookies Policy.

Changes to this policy

We may update this policy from time to time. For material changes, we will notify you by email or in the platform before they take effect. Current version: 2.0, effective September 17, 2026.

Contact us

For any question about this policy or to exercise your rights:

Contact

Back to home