Privacy Policy

The Social Atelier ("we", "us", "our") is a company based in the Netherlands, operating a social media scheduling, publishing and AI-assisted content platform (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights.

For any privacy questions, contact us at hi@thesocialatelier.nl.

Account data: name, email address, business name and password (stored hashed) when you create an account.

Platform connection data: when you connect a social account via OAuth, we receive and store access tokens and limited profile information needed to operate the Service, such as account handles and, where granted, basic account identifiers.

Content: media, captions and scheduling data you upload or generate using the Service.

Usage data: log data, device information and interaction data that help us operate and improve the Service.

We use your data to:

• operate, maintain and improve the Service;
• schedule and publish content to your connected social platforms on your behalf;
• provide AI-assisted content generation features;
• authenticate your sessions and secure your account;
• respond to your support requests;
• comply with legal obligations.

The Service integrates with third-party platforms including TikTok, Meta (Instagram and Facebook) and LinkedIn through their official APIs. When you connect an account, you are redirected to the platform to authorise access via OAuth.

We store the access tokens issued by the platform and use them solely to perform actions you request — such as publishing content and reading insights where available. We do not access private messages, payment information, or data beyond what the platform's API returns and what is necessary to provide the Service.

Each platform's use of data is also governed by that platform's own terms and privacy policy. We encourage you to review them.

When you use AI-assisted features, the content you provide as input (such as brand context or prompts) and the generated output may be processed to produce suggestions. We do not use your private content to train third-party AI models beyond what is necessary to generate your output. You remain responsible for reviewing and approving any AI-generated content before publishing.

As a company based in the Netherlands, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). Our legal bases for processing are:

• performance of a contract (providing the Service you requested);
• your consent (e.g. connecting a social platform via OAuth);
• our legitimate interests (e.g. security and Service improvement);
• compliance with legal obligations.

We do not sell your personal data. We share data only with service providers and sub-processors who help us operate the Service — such as hosting, email delivery and the connected social platforms themselves — under appropriate data protection terms. We may also disclose data where required by law.

We retain your personal data only for as long as necessary to provide the Service and meet legal obligations. Access tokens and platform connection data are deleted when you disconnect a platform or delete your account. Content and account data are deleted within 30 days of account deletion, except where retention is required by law.

You can request deletion of your data at any time by contacting hi@thesocialatelier.nl.

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and secure storage of access tokens. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

As we work with clients worldwide and use global infrastructure, your data may be processed in countries outside the Netherlands, including outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.

Under the GDPR, you have the right to:

• access your personal data;
• rectify inaccurate data;
• erase your personal data (the right to be forgotten);
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We use essential cookies and similar technologies to operate the Service and authenticate your session. We may use analytics cookies subject to your consent. You can manage preferences through our cookie banner or browser settings.

The Service is not intended for individuals under 18, and we do not knowingly collect personal data from them. If you believe we have collected data from a minor, contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised date. We encourage you to review it periodically.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at hi@thesocialatelier.nl.