Security Policy

How we protect data

• Encrypted connections over HTTPS/TLS.
• OAuth and Page tokens encrypted at rest.
• Hashed passwords, never stored in plain text.
• Email verification with one-time codes (OTP).
• Role-based access for team members.
• An audit log of administrative actions.
• No card data stored.

Staff access

Our staff may access account data only as needed for support, security or legal compliance, and such access is logged.

Your responsibilities

• Use a strong password and do not share it.
• Give team members only the permissions they need, and remove those who no longer need access.
• Disconnect social accounts you no longer use.
• Tell us immediately if you suspect unauthorized access.

Security incidents

If a personal data breach occurs, we notify affected users and the competent authorities as required by law and without undue delay, including notifying Egypt's Personal Data Protection Center within 72 hours.

Responsible disclosure

If you discover a security vulnerability, email info@gosocialai.com with the subject "Security Report" and the steps to reproduce it.

• We acknowledge reports within 5 business days.
• Please do not disclose the vulnerability publicly before it is fixed.
• Please do not access or modify other users' data or disrupt the service while testing.

No system is perfectly secure

No system can be completely secure, and we continuously work to improve our security measures.