Privacy policy

K2026679039 (SOUTH AFRICA) (Pty) Ltd, trading as Social Post Generator. Information Officer: Pierre Blom · 31 Buitenzorg Road, Somerset West, South Africa

Social Post Generator is developed and operated by K2026679039 (SOUTH AFRICA) (Pty) Ltd, a South African company that serves customers worldwide. We are the responsible party under South Africa's Protection of Personal Information Act (POPIA) and the controller under the EU and UK GDPR. Our Information Officer is Pierre Blom. The full policy is also published at https://socialpostgenerator.app/privacy.

What we collect: your verified email and, when supplied by Apple or Google, your name and profile image; your business profile (business name, description, industry, audience, brand voice, offers and website address); product photos you choose to upload (the app only accesses the photos you select); your content inputs and edits; when you give or withdraw AI permission; draft reports and support messages; subscription and purchase records from Apple, Google or Stripe (not your card details); IP address, timestamps and security events; and scrubbed crash reports that do not include your email or sign-in tokens. The app contains no advertising or tracking SDKs.

How we use it and why: to provide the Service, generate drafts and sync your account across devices (our contract with you); to send your information to AI providers to generate content (our contract and your permission in the app, which you can withdraw in Settings at any time); to manage billing (our contract and tax and accounting obligations); to provide support and send service messages (our contract or legitimate interest); to keep the Service secure and handle abuse reports (legitimate interest and legal obligations); and to improve the Service using aggregated usage and error information (legitimate interest). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

AI processing: business information, website extracts, product photos, prompts and generated content may be sent to Anthropic (text), Google (Gemini and search services) and Runware (images) to produce the output you request. Generated content is a draft that you must review before publishing. Do not submit secrets or sensitive personal information.

Sharing: we do not sell personal information. We share it only with providers acting for us (Stripe, Apple, Google, Google Cloud, Anthropic, Runware, Resend, Inngest, Sentry and our hosting provider), with people you choose to share with (such as viewers of a public share link you create), when the law requires it, or in a merger or sale of the business subject to this policy. Payment providers and app stores keep their own financial records under their own policies.

International transfers: we are based in South Africa and our providers process data in other countries, including the United States and the European Union. We rely on the safeguards the applicable law recognises, such as the providers' data processing agreements and standard contractual clauses, or the transfer being necessary to provide the Service you asked for.

Your rights: wherever you live, you can ask us to access, correct, export or delete your personal information and withdraw consent. Under POPIA you may object to processing and complain to the Information Regulator (inforegulator.org.za). Under the GDPR you may also restrict processing, object to processing based on legitimate interests and complain to your local data protection authority or, in the UK, the Information Commissioner's Office. US residents of states with privacy laws may request access, correction and deletion; we do not sell or share personal information for advertising from the app. Email us to exercise a right; we verify your identity and respond within the time the law requires, usually within 30 days.

Deleting your account: use Settings in the app, your website account settings, or the account deletion page at https://api.socialpostgenerator.app/v1/mobile/account-deletion, which verifies ownership with an email code and, if enabled, your second factor. Deletion immediately ends access, revokes public share links and cancels website and Google Play renewals where we can. Cancel an Apple subscription in your Apple subscription settings. Files you exported to other apps cannot be recalled.

Retention: we keep your data while your account is open, including after a subscription is cancelled. After an accepted deletion request, account data, uploaded photos and generated content are permanently erased by our daily purge within 90 days. Audit records are kept with email, IP and details scrubbed; billing records are kept for the period tax and accounting law requires; residual copies may remain in backups until those backups expire on their regular schedule.

Security and children: we use HTTPS, authenticated access controls, encrypted storage of two-factor secrets and on-device sign-in tokens, security headers and rate limits. No service can guarantee absolute security; we will notify you and regulators of a breach as the law requires. The Service is a business tool for people aged 18 and over, and we do not knowingly collect children's information.

Changes: we will tell you about material changes by email or in the app. Last updated 2 October 2026.

Privacy contact: info@socialpostgenerator.app