Privacy Policy

Last updated October 24, 2026

SocialMint is operated by Scimej ("we", "us"). It makes social media posts with AI and publishes them to the Facebook Pages and Instagram accounts you connect, when you schedule or approve them. This policy explains what data we handle and how.

Data we collect

• Account details: your name, email address, company or brand name, and a hashed password.
• Meta data, after you connect Facebook: an access token and Page access tokens (stored encrypted), and the names, ids and pictures of the Pages and Instagram professional accounts you choose. Later versions read the performance of posts published through us.
• Your content: brand kits (logo, colours, fonts, voice), product pages you add and their photos, images you upload, the posts we generate and their versions, review comments and schedules.
• Review links: the email address of anyone you send a post to for review, and the name and comments they enter.
• Notification settings, such as alert email addresses and Slack webhook URLs (webhooks are stored encrypted).
• Activity logs of what happened in your workspace, and credit usage.

How we use it

• To generate posts, captions, hashtags and images in your brand, and to render them.
• To publish the posts you schedule or approve, at the times you choose, to the accounts you choose.
• To send review requests, alerts and notifications to the people and destinations you choose.
• To sign you in and keep your account secure.

We do not sell your data, use it for advertising, or share it with data brokers.

Services we share data with

• Meta Platforms, to list your Pages and Instagram accounts and publish your posts through the Graph API.
• Anthropic (or Google Gemini, if the operator enables it), to write post text: your prompts, brand kit, product details and, for posts made from a photo, that photo. Anthropic does not use this data to train its models.
• Replicate, only when you ask for AI photos: the image description (no personal data).
• Amazon Web Services, to store images (S3) and serve them (CloudFront).
• Google (Gmail), to send review requests, invites and alert emails from the address a workspace sets up.
• Slack, only if you add a Slack webhook.

We may also disclose data when required by law.

Security and retention

Access tokens and webhooks are encrypted at rest, and all traffic uses HTTPS. We keep your data while your account is active. Disconnecting Meta deletes your access token straight away. Images of published posts stay available at their links so Facebook and Instagram can show them.

Your choices

You can disconnect Meta at any time from the Connect page, or remove the app in your Facebook settings. To see how to delete your data, or to request a copy of it, see Data Deletion or email us.

Changes to this policy

If we make material changes we will update the date above and notify account owners by email.

Contact

Questions about privacy: contact@scimej.com.