1. Who we are
Social Moderator AI is a software service that helps businesses moderate comments on Facebook Pages, Instagram accounts and YouTube channels they manage. We act as a data controller for account and billing information you provide to us, and as a data processor when we process comment content on your instructions through your connected platform accounts.
2. Information we collect
We collect information in these categories:
- Account data: name, email address, password (stored hashed), workspace name, and team membership details.
- Billing data: subscription status, plan, and payment-related identifiers processed by Stripe (we do not store full card numbers).
- Connected Meta data: Page and Instagram account identifiers, access tokens, page names, and permissions needed to read comments and apply moderation actions you approve.
- Connected YouTube data: channel identifier and name, OAuth tokens, video identifiers and titles, and the comments on those videos, obtained through YouTube API Services (see section 11).
- Comment and moderation data: comment text, author display names, timestamps, post context, moderation rules you publish, AI reasoning outputs, audit logs, and actions taken (hide, flag, draft reply).
- Usage and technical data: IP address, browser type, device information, log data, and product usage metrics needed to operate and secure the service.
- Support communications: messages you send to us and related metadata.
- Registration security: reCAPTCHA signals when enabled on sign-up, processed by Google according to its policies.
3. How we use information
We use personal data to:
- Provide, maintain, and improve the service, including AI-assisted moderation and reply drafting.
- Authenticate users, enforce workspace access, and prevent abuse.
- Process subscriptions, trials, invoices, and account changes through Stripe.
- Connect to Meta and Google (YouTube) APIs on your behalf when you authorize us.
- Send transactional emails (account verification, security alerts, billing notices).
- Comply with legal obligations and respond to lawful requests.
- Analyze aggregated, de-identified usage to improve reliability and features.
4. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the service); legitimate interests (security, fraud prevention, product improvement balanced against your rights); consent where required (for example optional marketing, if offered); and legal obligation where applicable.
5. How we share information
We do not sell your personal data. We share data only with service providers that help us operate the service, under contracts that require appropriate safeguards, including:
- Meta Platforms (Facebook/Instagram) - to access comments and perform actions on Pages you connect.
- Google (YouTube) - to access comments and perform moderation actions on channels you connect.
- Stripe - payment processing and subscription management.
- Anthropic (or another configured AI provider) - to analyze comments and generate moderation decisions and draft replies according to your rules.
- Cloud hosting and infrastructure providers - to run the application and store data.
- Google reCAPTCHA - bot protection on registration when enabled.
- Email delivery providers - transactional messages.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with notice where legally permitted.
6. International transfers
We may process data in countries outside your own, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for transfers from the EEA/UK.
7. Retention
We retain account and billing records for as long as your account is active and for a reasonable period afterward to meet legal, tax, and accounting requirements. Comment and moderation data is retained according to your workspace settings and operational needs; you may delete connected Pages or request account deletion, after which we delete or anonymize data within a reasonable timeframe unless retention is required by law.
8. Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; you are responsible for keeping your credentials confidential.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may withdraw consent where processing is consent-based. You also have the right to lodge a complaint with your local supervisory authority. To exercise rights, contact us at info@socialmoderator.ai. We may need to verify your identity before responding.
10. Meta platform data
When you connect a Facebook Page or Instagram account, your use is also subject to Meta’s terms and policies. You can disconnect Pages at any time in the product; disconnecting stops new data collection from that asset, subject to retention described above.
11. YouTube API Services and Google user data
When you connect a YouTube channel, Social Moderator AI uses YouTube API Services to read comments on your videos, hide or hold comments for review, and post replies you approve. By connecting a channel you also agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.
Through the YouTube Data API we access and store your channel identifier and name, the OAuth tokens needed to act on your behalf, your video identifiers and titles, and the comments on those videos (comment text, author display names, timestamps and moderation status). We use this data only to provide the moderation and reply features you configure in your workspace. We do not sell it, use it for advertising, or share it with third parties other than the AI provider that evaluates comments against your rules and the infrastructure providers listed in section 5.
You can disconnect a channel at any time in the product, which stops further collection, and stored YouTube data is then deleted as described in section 7. You can also revoke our access to your Google account at any time from the Google security settings page.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
12. Children
The service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. Contact us if you believe we have collected such data.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated by email or in-product notice where appropriate.
14. Contact
For privacy questions or requests, email info@socialmoderator.ai.