Podo Social

Privacy Policy

Last updated: 28 September 2026

This policy explains what data Podo Social (operated by PodoSphere Technologies Pvt Ltd) collects, why, and the choices you have. Podo Social helps businesses and agencies plan, publish and analyse social media content and manage messages, leads and ads across Facebook, Instagram, WhatsApp, LinkedIn, YouTube and Google Business Profile.

1. Data we collect

  • Account data: your name, email address, workspace name and a hashed password.
  • Connected platform data: when you connect a Facebook Page, Instagram business account or other channel, we receive the account's ID, name and profile picture, access tokens, and the content you ask us to manage: posts, comments, direct messages, reviews, lead-form responses, page and ad insights, and ad campaign details.
  • Content you create: post drafts, media, schedules, brand kit details and replies.
  • Usage data: log data such as IP address, browser type and actions in the app, used for security and support.

2. How we use it

  • To publish and schedule content, show analytics, and run the unified inbox, leads and ads features you use.
  • To power Podo AI features (for example writing captions or drafting replies). The relevant content is sent to our AI provider, Anthropic, to generate a response. It is not used to train their models.
  • To keep the service secure, prevent abuse, provide support, and meet legal obligations.

We do not sell personal data, and we do not use data from Meta platforms for advertising profiles or resale.

3. Sharing

We share data only with:

  • The platforms you connect (for example Meta), to carry out the actions you request.
  • Service providers that host or process data for us (cloud hosting, database, AI processing), under contract.
  • Your own CRM, if you turn on lead sync.
  • Authorities, when required by law.

4. Security and retention

Platform access tokens are encrypted at rest (AES-256-GCM) and never shown in the app. Data is kept while your workspace is active. When you disconnect an account, its tokens are deleted. When you delete your workspace or ask us to, we delete the associated data within 30 days, except where we must keep records by law.

5. Your rights

Under applicable law, including India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or delete your personal data, and withdraw consent. See how to delete your data, or contact us at [privacy contact email: set in src/modules/marketing/config/legal.ts].

6. Contact

PodoSphere Technologies Pvt Ltd, [registered office address: set in src/modules/marketing/config/legal.ts]. Email: [privacy contact email: set in src/modules/marketing/config/legal.ts]. We may update this policy; the date at the top shows the latest version.

PodoSphere Technologies Pvt Ltd · [registered office address: set in src/modules/marketing/config/legal.ts] · [privacy contact email: set in src/modules/marketing/config/legal.ts]