Privacy policy

Last updated: 10 October 2026

SocialSuite is a tool for writing social media posts once and publishing them to the accounts you connect, now or at a time you choose. This page explains what information this site keeps about you, why, and what you can do about it. This site (socialsuite.joshuagboga.xyz) is run by Joshua Gboga.

What we collect

• Your account details. Your name, your email address and your password. The password is stored only as a one-way hash, so nobody, including us, can read it.
• The social accounts you connect. For each one: its name, handle, profile picture address and platform ID, plus the access token (or, for Bluesky, the app password) that lets SocialSuite post for you. These tokens are encrypted before they are saved. We never see or store the password of your X, LinkedIn, Facebook, Instagram or Threads account; you sign in on the platform's own page.
• Your posts. The text, images, schedule times and target accounts of the posts and drafts you create, and the result of each attempt to publish (links to the published post, or the error).
• A sign-in cookie. One cookie, ss_session, keeps you signed in for up to 30 days. It is required for the site to work. There are no advertising or analytics cookies and no third-party trackers.
• Your IP address, briefly. It is held in memory for up to an hour to limit abuse such as password guessing. It is not written to the database. Our hosting provider may keep its own standard access logs.

We do not read your feeds, followers, messages or contacts on any connected platform.

How we use it

• To sign you in and keep your data separate from every other user's.
• To publish your posts to the accounts you chose, at the times you chose.
• To show you your calendar, drafts and publishing history.
• To protect the service from abuse.

We do not sell your information, show ads, or use your posts for anything other than publishing them for you.

Who else receives your information

• The platforms you connect. When a post is published, its text and image are sent to the platforms you selected (X, LinkedIn, Facebook, Instagram, Threads, Bluesky or Mastodon). What they do with it is covered by their own privacy policies.
• Anthropic, only if you use "Write with Claude". The brief or draft you type is sent to Anthropic's API to produce suggestions. Nothing is sent unless you press that button.
• Claude, only if you set up the Claude connector. If you add your connector link to Claude, it can see your connected account names and your posts, and can schedule, edit or publish posts for you. You can cut this off at any time by generating a new key.
• The company that hosts this site, which stores the database on our behalf.

Images you upload are public links

Some platforms fetch images from a web address, so every image you upload gets a public link. The link is long and random and is not listed anywhere, but anyone who has it can view the image. Do not upload an image you would not be willing to post.

How long we keep it

• Your account, connected accounts and posts are kept until you delete them or ask us to delete your account.
• Disconnecting a social account deletes its token from our database straight away. To fully revoke access, also remove SocialSuite from that platform's list of connected apps.
• Deleting a post removes it from SocialSuite. It does not remove anything already published on a platform; delete that on the platform itself.
• Sign-in sessions expire after 30 days, or immediately when you sign out.

How we protect it

Passwords are hashed with scrypt. Access tokens and connector keys are encrypted with AES-256-GCM. Sign-in and sign-up attempts are rate limited. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you.

Your choices and rights

You can edit or delete your posts and disconnect accounts yourself at any time. You can also ask us for a copy of your data, to correct it, or to delete your account and everything in it. Depending on where you live, data protection law (for example Nigeria's Data Protection Act or the GDPR) may give you further rights, including the right to complain to your data protection authority.

Children

SocialSuite is not meant for anyone under 16, and we do not knowingly collect their information.

Changes

When this policy changes, we will update the date at the top of this page.

Contact

Questions or requests about your data: bigjosh.web3@gmail.com.