Privacy Policy

Draft — last updated 31 July 2026. Pending legal review.

Who we are

OneUnitSocial is operated by OneUnit. You can reach us at privacy@oneunit.ai.

What we collect

• Account information. Your name and email address, from the identity provider you sign in with.
• Social account connections. When you connect a social account, we receive an access token from that platform, along with the account’s public identifiers — its ID, username, display name and profile image.
• Content you create. The posts, images and video you compose and schedule through the service.
• Analytics. Performance metrics we retrieve from the platforms for the accounts you have connected — follower counts, impressions, reach and engagement.

How we use it

Solely to operate the service: to publish the content you schedule, to show you how it performed, and to keep your connections working. We do not sell your data, and we do not use the content or analytics we retrieve on your behalf to train models or to build advertising profiles.

How access tokens are protected

Platform access tokens are encrypted at rest with AES-256-GCM before being stored. The encryption key is held in a managed secret store, separate from the database, and is never present in our source code. Tokens are decrypted only in memory, at the moment a request is made to the platform on your behalf.

Who we share it with

Our infrastructure runs on Google Cloud Platform and Firebase. We share data with the social platforms you connect, and only what is necessary to carry out the action you asked for. We do not share your data with anyone else, except where required by law.

How long we keep it

For as long as your workspace is active. Disconnecting a social account deletes its stored tokens immediately. Deleting your workspace removes your content, connections and analytics within 30 days.

Your rights

You can export or delete your data at any time from your workspace settings, or by writing to privacy@oneunit.ai. See Data Deletion for how to remove data associated with a specific connected platform account.

Changes

We will post any change to this policy on this page and update the date above. If a change materially affects how we handle your data, we will notify you directly.