Privacy Policy — Werepost

Introduction

This Privacy Policy describes how Sofuto Solutions LLP, a United Kingdom Limited Liability Partnership (Companies House registration OC454766) with registered office at 27 Old Gloucester Street, London WC1N 3AX, United Kingdom (“we,” “our,” or the “Company”), handles personal information when you use Werepost (the “Service”) at werepost.ai.

It applies to the Werepost website, web application, API, connected social accounts, and support communications. It does not replace the privacy terms of any social platform you choose to connect.

Information We Collect

Information you provide to us

Account and profile information. We process your email address, account identifier, profile names, optional profile images, and authentication session information.
Connected-account information. When you authorize a social account, Werepost receives account identifiers, display names, usernames, profile images, available pages or channels, and connection status. A server-side publishing processor handles the platform OAuth credential needed to carry out your instructions; that credential is not exposed to the Werepost browser application. Werepost does not receive or store your social-platform password.
Content and publishing instructions. We process captions, titles, media files or media URLs, selected destinations, platform-specific settings, scheduled times, post status, delivery identifiers, and error details.
Developer information. If you use the API, we store API-key metadata such as its name, prefix, final characters, one-way hash, creation time, revocation state, and last-used time. The full key is shown only when it is created and is not stored in plaintext.
Communications. We process information you send when requesting support or exercising a privacy right.

Automatically collected information

Technical data. Our infrastructure may process IP address, browser and device information, request time, requested route, response status, and security or diagnostic data.
API activity. We generate request identifiers and process authentication, publishing, and error events needed to secure and operate the API.
Browser storage. The web application uses browser storage to keep your sign-in session, selected profile, interface state, and local preferences on your device. We do not currently use advertising cookies or cross-site behavioural tracking in the web application.

Information from third parties

Connected services. Social platforms and publishing infrastructure return account, channel, post, delivery, and error information as permitted by your authorization and their terms.

How We Use Your Data

We use personal information only where necessary to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with law, or act on consent where consent is the appropriate basis. We use it to:

Deliver the Service. Authenticate you, maintain profiles, connect accounts, ingest media, schedule or publish content, report delivery state, and carry out deletion or retry requests.
Protect the Service. Validate API keys, enforce profile ownership, investigate failures, prevent abuse, and maintain operational logs.
Maintain and improve the Service. Diagnose technical problems and understand aggregate service usage.
Communicate with you. Respond to support requests and send essential service communications. We do not currently use push-notification or behavioral-advertising systems in the web application.
Comply with legal obligations. Respond to lawful requests from authorities where required.

International Data Transfers

Sofuto Solutions LLP operates from the United Kingdom. Our processors and the social platforms you select may process information in other countries. Where applicable law requires a transfer safeguard, we use an available lawful mechanism such as an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or Standard Contractual Clauses. The protections available in another country may differ from those in your country.

Data Retention

Account, profile, and API-key records. Kept while needed to provide and secure the Service. Revoked keys may remain as limited audit records.
Content and post history. Kept until you delete a post record, close your account, or the information is no longer needed for the purposes described here, subject to legal, fraud-prevention, dispute, and backup requirements.
Media. Private media uploaded through the web application is retained to process the requested publication and is deleted when you delete the corresponding Werepost post where the file is still associated with that record. Media hosted at a public URL remains controlled by its host. Media already delivered to a social platform is controlled by that platform.
Operational and support data. Kept for only as long as reasonably necessary to diagnose issues, secure the Service, resolve disputes, and meet legal obligations.

Because retention depends on the type of record and why it is needed, we do not claim a universal automatic deletion period. You may contact us for information about a specific record.

Security

We use reasonable administrative and technical safeguards, including encrypted transport, access controls, profile-ownership checks, hashed API keys, short-lived links for private media transfers, and restricted server credentials. No system can be guaranteed completely secure. Keep your Werepost session and API keys confidential, rotate or delete a key you believe is exposed, and contact us about suspected unauthorized use.

Your Privacy Rights

Depending on your location and subject to applicable exceptions, you may have rights to:

Access. Request a copy of the personal data we hold about you.
Rectification. Request correction of inaccurate data.
Deletion. Ask us to erase personal information.
Restriction or objection. Ask us to restrict certain processing or object where processing relies on legitimate interests.
Portability. Receive certain information in a portable format.
Withdraw consent. Withdraw consent without affecting processing already carried out, where we rely on consent.
Complain. Lodge a complaint with the UK Information Commissioner's Office or your local data-protection authority.
Revoke connected access. Disconnect an account in Werepost or revoke authorization through the social platform's connected-app settings.

To exercise a right, email info@sofuto.uk. We may ask for information needed to verify your identity and authority. We will respond within the period required by applicable law and explain if an exception applies.

Deleting a Werepost post attempts to cancel its pending publication, removes the Werepost record, and removes associated private media where applicable. It does not necessarily remove content already published to a social platform; use that platform's controls for published content. Disconnecting a social account stops future Werepost access but does not delete existing posts from that platform.

Children's Privacy

Werepost is not directed to children and may not be used by anyone under 13 or below the minimum age required to hold the connected social-platform accounts in their country. If you believe a child has provided personal information in violation of this section, contact us so we can investigate and take appropriate action.

Changes to This Policy

We may update this Privacy Policy as the Service or law changes. We will post the revised policy and update the date above. Where required, we will give additional notice or request consent.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Company. Sofuto Solutions LLP
Email. info@sofuto.uk
Address. 27 Old Gloucester Street, London WC1N 3AX, United Kingdom
Companies House registration. OC454766