Who we are
Social Publisher is operated by Two Techies, SCO-3, 1st floor, Sarabha Nagar Extension, Ludhiana, Punjab, India - 141013. For any question about this policy or your data, contact info@two-techies.com.
For the account you hold with us — your store's contact details and your settings — we are the data controller. For the store content we handle on your behalf, such as your products and the posts we publish for you, we act as a data processor following your instructions: you decide what gets posted, and we carry it out.
What we store
When you install the app, we store data about your store:
- Your store domain, contact email, timezone and storefront URL.
- A copy of the product details needed to choose what to post and write captions: title, handle, status, price, tags, collections, product type and vendor.
- The posts we have created for you, their schedule, and whether they succeeded.
- Your posting settings: which products qualify, caption layout, and schedule.
When you connect Meta accounts, we additionally store:
- Your Facebook Page's id and name.
- Your Instagram professional account's id and username.
- The Meta user id of the person who authorised the connection.
- The access token Meta issues, which lets us post on your behalf. Tokens are encrypted before they are written to our database and are never shown in our interface, our logs or our error reports.
- The list of permissions you granted.
When you connect a Pinterest account, we additionally store:
- Your Pinterest account id and username.
- The ids and names of the boards you choose to post to.
- The access token Pinterest issues, encrypted and handled exactly as above.
- The list of permissions you granted.
Our servers also keep ordinary technical logs — the time of a request, the address it came from, the page or endpoint reached, and any error raised. These are used to keep the service running and secure, and are deleted automatically after 5 days.
We do not collect your Facebook, Instagram or Pinterest password, and we never see it. We do not read your direct messages. We do not collect data about your customers.
What we do with it
We use it for one purpose: creating and publishing the posts you have configured, and showing you what was published. We do not sell it, and we do not use it to build advertising profiles.
Our legal basis
Where data protection law requires us to name a basis for processing your data, ours are:
- Performing our contract with you — the store and product data, and the posts themselves. The app cannot do its job without them.
- Your consent — connecting a Facebook, Instagram or Pinterest account. Nothing is read or published until you authorise it, and you can withdraw that consent at any time by disconnecting.
- Our legitimate interests — keeping the service secure and diagnosing faults, which is what the technical logs above are for.
Who else processes it
To provide the service we pass data to:
- Meta Platforms — the images, captions and account ids needed to publish your Facebook and Instagram posts.
- Pinterest — the images, captions and board ids needed to publish your pins.
- Shopify — we read your products and media, and write back the posts' results.
- Hostinger — our hosting provider, which runs the app and its database.
- SendGrid — our email provider, used only to send you notifications about your own posts.
Where your data is stored
The app and its database run on servers operated by Hostinger in Mumbai, India. Social Publisher is available to merchants worldwide, so your data may be stored and processed in a country other than your own, including outside the European Economic Area and the United Kingdom. Where we transfer personal data across borders we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, and we require the same of the providers listed above.
Cookies
The app sets a session cookie so that you stay signed in while you are using it. That is all it is used for. We do not use advertising cookies, and we do not track you across other websites.
How long we keep it
While the app is installed. When you uninstall, we delete your store's data straight away, and in any event no later than 48 hours after uninstalling, when Shopify sends us its redaction request. Access tokens are deleted as soon as you disconnect the account they belong to.
Deleting your data
You can disconnect your Meta or Pinterest accounts at any time from the app's Settings page, which deletes the stored access tokens immediately. Uninstalling the app removes your store's data. If you would like your data deleted while keeping the app installed, email info@two-techies.com and we will do it.
Security
Access tokens are encrypted at rest with AES-256-GCM. Each store's data is isolated, and all traffic is over HTTPS.
Changes to this policy
If this policy changes materially we will update the date above and notify you in the app.
Your rights
Depending on where you are, you may have the right to access, correct, export or delete your data, and to object to or restrict how we use it. Contact info@two-techies.com and we will respond within 1-2 working days.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to put things right first — please write to us at info@two-techies.com.