Privacy Policy
This policy describes how we collect, use, and protect information when you use our application, including when you connect third-party accounts such as LinkedIn.
Who we are
iUtils Social is operated by iUtils. This policy applies to your use of the service and related websites.
What this application does
We provide authenticated accounts, brand workspaces, and tools to create, schedule, and publish content to connected social networks. You may connect the platforms below so that posts can be sent on your behalf according to your settings, results can be read back, and — where the platform offers it — comments, messages and reviews can be answered.
- Meta — Facebook, Instagram and Threads — Publishing, inbox, analytics and Meta Ads.
- LinkedIn — Publishing, analytics and LinkedIn Ads.
- X — Publishing and analytics.
- TikTok — Publishing and analytics.
- Google — YouTube, Business Profile, Google Ads, Google Analytics and Google Drive — Publishing and analytics (YouTube, Business Profile), reviews (Business Profile), paid results (Google Ads), site traffic (Google Analytics, read-only) and media import from a folder you choose (Google Drive, read-only).
- Pinterest — Publishing and analytics.
- Bluesky — Publishing, using an app password you create in Bluesky.
- Canva — Importing designs into the media library.
Data we collect
- Account and authentication data you provide (for example name, email, and credentials used to sign in).
- Content and metadata you create in the product, including drafts, scheduled posts, media you attach, and client or workspace records needed to operate the service.
- Technical and operational data such as request logs, error diagnostics, and security-related events, as needed to run, secure, and improve the service.
OAuth and third-party services
When you connect a social account, you authenticate with that provider (for example via LinkedIn OAuth). We store tokens and related connection data securely so we can call provider APIs on your behalf—for example the LinkedIn Community Management API or other channel APIs—to publish content you authorize. Those providers process data under their own terms and privacy policies.
We only use connection data to provide the features you enable. You can disconnect integrations where the product supports it; revocation may also be available in the third-party account settings.
How we use data
We use information to provide and improve the service, authenticate users, schedule and deliver posts, troubleshoot issues, protect against abuse, and meet legal obligations. We do not sell your personal information.
AI features and recordings
When you use Content Studio, the AI writer, inbox reply drafts or report insights, the prompt — composed from the brand's own material and whatever free text you typed — is sent to an AI provider (OpenAI, or Anthropic where selected) to generate the response. Your prompts and the copy returned are kept for 12 months.
Video and audio you upload, or that arrives from a Google Drive folder you connect, can be transcribed. The audio track is sent to OpenAI for transcription and carries the voices of whoever appears in the recording — usually people who have no account here and were never asked. Transcripts and the content briefs derived from them are deleted after 18 months. A brand can turn transcription off and still use the media library. If you record people, it is your responsibility to have told them.
Subprocessors
These providers process personal data on our behalf and under our instructions. Which of them is active in this deployment, what each receives, where it is processed and where its data-processing agreement is published are all on the subprocessors page, which is generated from the same list as this one.
- Hosting provider — Runs the application, its database and queue workers, and takes the hourly database backup outside the application.
- OpenAI — AI text generation (Content Studio, inbox reply drafts, report insights) and audio transcription of uploaded media.
- Anthropic — AI text generation when the deployment or a Content Studio batch selects Claude as the chat provider.
- Stripe — Subscription billing and checkout.
- Sentry — Error monitoring.
- Transactional email provider — Sends invitations, approval notifications, password resets and scheduled reports. Which provider is the one configured by MAIL_MAILER: Postmark, Resend, Amazon SES or an SMTP relay.
- Amazon S3 — Media storage when the s3 disk is configured; the local disk is used otherwise.
- bunny.net (Bunny Fonts) — Serves the typeface a SmartLink page owner picks for that page. The app's own interface font is served from this app.
- Pexels — Stock photo and video search from the composer.
Security
Platform tokens are encrypted at rest, API and public link tokens are stored only as hashes, two-factor authentication is available to every account and can be required by an agency, and security events are written to an audit log the agency can read. The security overview describes each measure and names the code that implements it. Security overview
Retention
We keep the work you create — drafts, scheduled posts, campaigns and brand settings — for as long as your account exists, because it is yours. Records about people, rather than about the work, are deleted on a fixed schedule. Those periods are set in the application itself and are the same periods the nightly job enforces; they are not deployment settings that can differ between environments.
- Access reviews are kept for 24 months, the same period as the security audit trail they evidence.
- Invitations are deleted 30 days after they are accepted, or 30 days after they expire if they were never accepted.
- AI generation history is kept for 12 months.
- Replay keys are deleted one day after the request they answered for.
- Invitations are deleted 30 days after they are accepted, or 30 days after they expire if they were never accepted.
- Brand-learn snapshots are kept for 18 months, then pruned.
- A record that produced a file in the library lives as long as that file does. A record of one that failed or was too large is deleted after 18 months.
- Records of who has an inbox conversation open are deleted after one day.
- Conversations from connected accounts are deleted 18 months after their last activity, along with the messages in them.
- Content briefs are deleted 18 months after they are made, with the transcript they came from.
- Transcripts are deleted 18 months after they are made.
- In-app notifications are deleted after 90 days.
- Website conversion records are kept for 13 months.
- Short-link click records are kept for 13 months.
- Review invitations are deleted 13 months after they were sent.
- Security and sign-in records are kept for 24 months. Records that demonstrate an erasure was carried out are kept beyond that.
- Shared report links are deleted 90 days after they are revoked. Links that are still live are kept until someone revokes them.
- Short-link click records are kept for 13 months.
- Records of what was published, and by whom, are kept for 24 months.
- Website reviews are deleted 13 calendar months after they were published (website:prune-reputation).
- Export files expire after 7 days and their records are cleaned up.
Records that demonstrate an erasure was carried out are kept beyond these periods, because they exist to prove the erasure happened.
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. To exercise these rights or ask questions about this policy, contact us using the email below.