Socivora AI

Privacy Policy

Last updated: 31 July 2026. Controller: Sakkas WW Ltd, Nicosia, Cyprus.

Socivora AI (“we”, “us”), operated by Sakkas WW Ltd (Cyprus), helps you create and publish social media content. This policy explains what personal data we process, why, and your rights under the EU GDPR.

Who we are

Sakkas WW Ltd, Nicosia, Cyprus, is the data controller. Contact: privacy@socivora.example.

Data we collect

  • Account data: name, email, authentication provider.
  • Business/brand profiles you create: names, logos, brand details.
  • Content you create or upload: captions, prompts, images and videos.
  • Connected social accounts: when you link a platform (e.g. LinkedIn, X), we store the account identifier and the OAuth access/refresh tokens needed to publish on your behalf.
  • Usage data: feature usage, AI generation counts, logs needed to run and secure the service.
  • Billing data: your plan and subscription status. Payment card details are handled by Paddle (our payment processor and merchant of record); we do not store card numbers.

Connecting your social accounts

When you connect a platform, you authorise us via OAuth to act on your behalf. We request the minimum scopes needed to publish and identify the account. Tokens are stored securely on our servers with restricted access and are never exposed to your browser. You can disconnect a platform at any time, which removes the stored tokens.

AI content generation

To generate captions and content, the topic, prompt and related text you provide are sent to OpenAI (via the Lovable AI gateway) to produce output. AI output may be inaccurate or generic; you are responsible for reviewing content before publishing. We do not use your content to train third-party models beyond what is necessary to return your result.

How we use your data

  • to provide the service;
  • to generate and publish content you request;
  • to enforce plan limits;
  • to secure the service and prevent abuse;
  • to process billing;
  • to communicate service and account emails.

Legal bases (GDPR)

performance of our contract with you (providing the service); your consent (e.g. connecting accounts, non-essential cookies); and our legitimate interests (securing and improving the service).

Sub-processors

We share data only with providers that help us run the service: hosting and database (Supabase), infrastructure and security (Cloudflare), payments (Paddle), transactional email (Resend), AI generation (OpenAI via the Lovable AI gateway), and the social platforms you connect (e.g. LinkedIn, X) when you publish. We never sell your data.

International transfers

Some providers may process data outside the EEA; where they do, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Data retention

We keep account and content data while your account is active and delete or anonymise it within a reasonable period after account closure, except where we must retain records (e.g. billing) by law. Disconnected social tokens are deleted promptly.

Your rights

You may access, correct, export, restrict, object to, or delete your personal data. Contact privacy@socivora.example. You also have the right to lodge a complaint with the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection.

Security

We use row-level security, restricted server-side access to secrets and tokens, and encryption in transit. No system is perfectly secure, but we work to protect your data.

Children

The service is not intended for anyone under 16.

Changes

We may update this policy and will change the “last updated” date; material changes will be communicated.