Privacy Policy

BetterSocials (“BetterSocials,” “we,” “us”) is a unified inbox for creators. It brings your comments, direct messages, and email from connected platforms into one place, drafts replies in your voice, and turns keyword comments into DMs. This policy explains what data we handle and why. Questions: privacy@bettersocials.ai.

• Account data. The email and password you use to sign up, and your workspace settings.
• Connected accounts. When you connect Instagram, Facebook, YouTube, Threads, LinkedIn, or an email inbox, we store the access tokens needed to read and reply on your behalf. Tokens are encrypted at rest and never shown to you or anyone else.
• Message content. The comments, direct messages, and emails on your connected accounts, plus the replies you and the AI draft and send. This is what powers your inbox.
• Billing data. Your subscription status and plan. Card details are handled by Stripe; we never see or store your full card number.
• Usage data. Basic logs needed to run the service and keep it secure.

• To show your messages in one inbox and let you reply from one place.
• To draft replies in your voice and power the automations you turn on. Message text is sent to our AI provider (Anthropic) solely to classify it and generate replies for you. It is not used to train their models.
• To send the replies you approve, and to run keyword-to-DM automations you set up.
• To process your subscription and provide support.
• To keep the service secure and prevent abuse.

We do not sell your data, and we do not use the content of your messages for advertising.

BetterSocials’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data from YouTube and Gmail is used only to provide and improve the in-app features you connected them for. We do not transfer or sell this data, do not use it for advertising, and do not use it to train generalized AI or machine-learning models. Humans do not read your Google data except with your explicit permission, to fix a problem you report, for security, or as required by law.

We rely on a small set of vetted providers to run BetterSocials:

• Zernio connects and manages your Instagram, Facebook, YouTube, and Threads accounts and delivers comments and DMs.
• Unipile connects LinkedIn and email inboxes and delivers those messages.
• Google provides Gmail access for inboxes connected directly through Google sign-in.
• Anthropic generates reply drafts from message text (no model training on your data).
• Stripe processes payments.
• Supabase and Vercel provide database, authentication, and hosting.
• Google Analytics and Microsoft Clarity measure traffic and record how our public pages are used. They never run inside the product.
• Meta measures our advertising on those same public pages.

We share only what each provider needs to do its job, and only to operate BetterSocials for you.

The platforms you connect (Meta, Google, LinkedIn, and others) handle your data under their own privacy policies and terms, both on their own services and when BetterSocials reads from or sends through them. We do not control what a platform does with a message once it is delivered, what it logs about your account’s activity, or decisions it makes about your account. Review the privacy policy of each platform you connect.

Most of what BetterSocials stores is about other people. When someone comments on your post or sends you a DM, their name, handle, profile picture, and message end up in your inbox, and we hold them so your inbox works. Those people never signed up with us and most of them have never heard of us. We think that deserves saying plainly rather than leaving it to be inferred.

Here is the split. For your own account data, we are the company deciding what happens to it, and this policy governs it. For the messages and contacts inside your workspace, you are the one who decides: you chose to connect the account, you decide what to reply, you decide what to keep. We hold that data on your behalf and act on your instructions. In privacy law terms you are the controller and we are your processor.

What that means in practice: we do not sell it, mine it, use it to train AI models, or look at it to build our own audience. We do not message your contacts on our own behalf, ever. If one of your contacts asks us to delete what we hold about them, we will point them to you, because it is your workspace and your call, and we will help you act on it. If you need contractual processor terms for your own compliance, our Data Processing Addendum covers this and applies automatically.

We keep different things for different lengths of time:

• Messages, comments, and contacts stay while your account is active, so your inbox has history. Deleted with your workspace.
• Access tokens are deleted the moment you disconnect an account, and syncing stops with them.
• Your account and workspace data are deleted within 30 days of you deleting your account.
• Billing records and proof that you agreed to our terms outlive the account, because tax law and consumer-protection law both require it. The record of your agreement keeps the document version, a fingerprint of the wording, the date, and a one-way hash of your email. It stops identifying a live person: your name, your IP, and your browser are removed with everything else.
• Security and error logs roll off within 90 days.

You can delete your account yourself in Settings, or email privacy@bettersocials.ai and we will do it for you.

BetterSocials runs in the United States, and so do the providers listed above. If you use it from the UK, the EEA, or Switzerland, your data is transferred to the US to be processed. Where the law requires a transfer mechanism for that, we rely on the European Commission’s Standard Contractual Clauses with the providers who handle your data, plus the UK Addendum where it applies. Ask us and we will tell you exactly which provider holds what.

We have never sold personal information and we do not share it for cross-context behavioural advertising. The Meta pixel and the analytics on our marketing pages are the one place third parties see anything, they never run inside the product, and if your browser sends a Global Privacy Control signal we treat that as an opt-out and load none of them. No sale means there is nothing for you to opt out of beyond that, but if you want it on the record anyway, email us and we will log it.

We also do not use your messages to train AI models, ours or anyone else’s, and we do not use them for advertising. Message text goes to Anthropic to classify it and draft a reply for you, and nothing else.

Access tokens are encrypted at rest. Your workspace data is isolated from every other workspace at the database level, so one customer can never see another’s data. We restrict internal access and never log secrets.

Three of these you can do yourself, right now, without asking us. In Settings you can export everything in your workspace as a file, delete your account and its data, and disconnect any connected account.

Depending on where you live you may also have the right to know what we hold, to correct it, to limit how we use sensitive information, to object to a particular use, and to not be discriminated against for asking. Email privacy@bettersocials.ai from the address on your account and we will handle it within 30 days. If we need longer we will tell you why before that runs out, and we will never charge you for asking.

If we turn a request down, we will say why, and you can reply to that same email to appeal it. A person reads appeals, not a filter. If we still say no, several states let you take it to your attorney general, and we will give you the reference you need to do that. You can also authorise someone to make a request for you.

One limit worth being upfront about: to protect other people, we verify that a request really comes from the account holder before acting on it. If we cannot, we will tell you what would let us, rather than going quiet.

If a breach affects your data, we will tell you and the regulators the law points us to, without waiting to have a complete picture first. We will say what happened, what was reached, what we have done, and what you should do. We would rather tell you early and update you than send one polished notice weeks later.

If you have found a security problem in BetterSocials, please tell us before you tell anyone else: security@bettersocials.ai. We do not pay bounties and we will not threaten you.

We use Google Analytics, Microsoft Clarity, and the Meta pixel on our marketing pages. They tell us how people find BetterSocials and where they give up. These set cookies, including advertising and cross-site identifiers, and Clarity records mouse movement, clicks, and scrolling on the page. Google, Microsoft, and Meta can combine what they collect here with data they already hold about you from other sites.

The sign-in and sign-up screens are narrower on purpose. Those pages count visits and report to Google and Meta that a signup happened, but they carry no session recording, so nothing watches you type your email or your password.

None of it runs once you are signed in. Your inbox and the rest of the product carry no analytics, no session replay, and no advertising trackers. Other people’s private conversations live in there, and we do not record them. Inside the app we set only the cookies that keep you signed in and remember which workspace you are viewing.

Block any of this with your browser settings or an ad blocker and BetterSocials still works.

BetterSocials is for people 18 and older and is not directed to children.

If we make a material change to this policy, we will update the date above and, where appropriate, notify you. Continued use after a change means you accept the updated policy.

Questions about privacy or a data request: privacy@bettersocials.ai.