1. Introduction & who we are
Pocket Social ("Pocket Social", "we", "us", or "our") is a software-as-a-service application, available at pocketsocial.net, that helps small service businesses create, review, approve, schedule, and publish social media content with the assistance of artificial intelligence, and that may also provide text (SMS) marketing tools so those businesses can message their own customers who have opted in.
This Privacy Policy explains what information we collect, how and why we use it, who we share it with, and the choices and rights you have. It applies to your use of the Pocket Social website, application, and related services (together, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
Platform vs. business customer. Pocket Social is the technology platform. Our business customers (for example, a local car wash) use Pocket Social to operate their own social media and, where enabled, their own SMS/text programs. If you receive a text message, it is sent from or on behalf of that business customer. Pocket Social processes phone numbers and related data to provide the text marketing Service to that business and its end users — we are not the "message brand" you opted into unless we say so in a specific Pocket Social-branded program.
Pocket Social connects to third-party social media platforms — including Meta's Facebook and Instagram — on behalf of our business customers so they can publish and manage content. Our access to those platforms, and our handling of the data we obtain through them, is described in detail in the sections below and is in addition to the terms of the platforms themselves. SMS delivery is handled through our SMS provider as described in Section 4 and Section 6.
2. Information we collect
We collect only the information we need to provide the Service. This falls into the following categories.
a. Account information
When you register for and use Pocket Social, we collect your name and email address, and we store an encrypted (hashed) password or an authentication token used to sign you in. You may also choose to provide additional profile or business details (such as your business name) to personalize the Service.
b. Facebook & Instagram (Meta Platform Data)
When you connect a Facebook Page or Instagram account, you authorize us — through Meta's official OAuth login and permission flow — to access certain data from those accounts. We only receive data corresponding to the permissions ("scopes") you grant. See Section 3 for the full list of permissions and exactly what each is used for.
c. Content you create
We collect and store the content you create, upload, or manage in the Service — including post text and captions, prompts and instructions you give to our AI features, images you upload or that are generated for you, drafts, scheduling details, and approval decisions. This content is stored so that we can generate, hold for your review, schedule, and publish it on your behalf.
d. Phone numbers & SMS program data
When a business customer uses Pocket Social's text marketing features, we process mobile phone numbers and related messaging data as personal information. That may include:
- Mobile phone numbers of people who opt in to that business's text program;
- Consent and opt-out records (for example, when and how someone opted in, and STOP / HELP replies);
- Message content, delivery status, and keywords used to join or leave the program; and
- Limited contact profile details the business associates with a number (such as a name or membership identifier), when provided.
How numbers are collected is described in Section 4.
e. Usage & technical data
We automatically collect limited technical information when you use the Service, such as log data (IP address, browser type, pages or features accessed, and timestamps), device information, and diagnostic or error data. We use this to operate, secure, and improve the Service. See Section 10 for information about cookies and authentication tokens.
3. Meta Platform Data (Facebook & Instagram)
Pocket Social integrates with Meta Platforms so you can publish and manage content on your own Facebook Pages and Instagram professional accounts. We access this data only after you explicitly connect your account and grant the relevant permissions through Meta's official login dialog, and only for the purposes described below. This handling is consistent with the Meta Platform Terms and Developer Policies.
Permissions we request and why
| Permission (scope) | Why Pocket Social needs it |
|---|---|
public_profile | To authenticate you via Facebook Login and display your basic profile name so you can confirm which account is connected. |
pages_show_list | To retrieve the list of Facebook Pages you manage so you can choose which Page to connect and publish to. |
pages_read_engagement | To read Page content and engagement metadata so we can display your Page context and confirm posts were published successfully. |
pages_manage_posts | To create, schedule, and publish the posts you approve to your selected Facebook Page. |
pages_manage_ads | To support promotion of your published content and ads-related management features for your Page, at your direction. |
instagram_basic | To identify and connect the Instagram professional account linked to your Page and read basic account information needed to publish. |
instagram_manage_comments | To view and manage comments on your Instagram content so you can moderate and respond to your audience from within Pocket Social. |
business_management | To access the Business Portfolio assets (Pages and accounts) you manage so the correct business assets can be connected to Pocket Social. |
How Meta Platform Data is used
We use Meta Platform Data only to provide the Service to you — that is, to let you connect your accounts, view your Pages and content context, generate and schedule posts, publish approved content, and manage comments. We do not sell Meta Platform Data, we do not use it for advertising unrelated to your own account, and we do not transfer it to data brokers or any party except the service providers listed in Section 6 who process it on our behalf to operate the Service.
How Meta Platform Data is stored
Access tokens and the account data required to operate the integration are stored securely in our database and object storage, using encryption in transit (HTTPS/TLS) and at rest. Tokens are used only to make authorized API calls to Meta on your behalf. When you disconnect an account, or when your access token expires or is revoked, we stop accessing that account's data. When you disconnect an account or delete your Pocket Social account, we delete the associated Meta Platform Data as described in Section 9.
4. SMS / text messaging program
This section describes how Pocket Social handles information for SMS and text messaging features used by our business customers (the "Text Program"). Messaging program terms for end users — including message frequency, Msg & data rates, STOP, and HELP — are also set out in our Terms of Service (SMS / Text Messaging).
Program description
Business customers may use Pocket Social to send recurring marketing, promotional, transactional, and service-related text messages to mobile numbers that have provided prior express written consent (or other consent required by applicable law) to receive texts from or on behalf of that business. Messages are sent using the business customer's branding and program disclosures. Pocket Social provides the platform, consent records, and delivery tooling; the business customer is responsible for the content of its messages and for obtaining valid consent.
How phone numbers are collected
Mobile numbers may be collected through methods the business customer enables, including:
- QR code or landing page opt-in — a person submits their mobile number and affirmatively agrees to receive texts (for example, by checking a consent box or completing a web form that states they agree to receive recurring automated marketing texts);
- Keyword opt-in — a person texts a published keyword (for example, JOIN) to the business's texting number and receives a confirmation that completes or confirms enrollment; and/or
- Import with attestation — a business customer uploads or syncs numbers and attests that each person previously provided valid prior express written consent to receive texts from that business. Pocket Social relies on that attestation and stores consent metadata the business provides; we do not invent consent records.
After a successful opt-in, the person may receive a confirmation text that discloses the business name, that texts are recurring, that message frequency may vary, that Msg & data rates may apply, and how to get help (HELP) or cancel (STOP).
Consent and opt-in
We process phone numbers for marketing texts only when consent is recorded for that business customer's program. Consent is specific to the business that obtained it. Providing a phone number and opting in is voluntary. Where required by law, consent to receive marketing texts is not a condition of purchasing any goods or services from the business.
STOP, HELP, and choices
- STOP: Reply STOP to any text from that program to cancel. You will receive a confirmation that you are opted out and will not receive further texts from that program (except as needed to confirm the opt-out). Other keywords that mean the same thing (such as CANCEL, UNSUBSCRIBE, END, or QUIT) may also be honored.
- HELP: Reply HELP for help information about the program. You may also contact the business that messaged you, or email support@pocketsocial.net for platform-related questions.
How we use SMS-related data
We use phone numbers and messaging data to deliver the Text Program for the business customer: send and receive messages, honor opt-ins and opt-outs, maintain consent records, support compliance (including carrier and 10DLC requirements), troubleshoot delivery, and provide the business with tools and reports about its own program. We do not sell phone numbers for unrelated third-party marketing, and we do not share them with data brokers.
SMS delivery provider (Twilio)
We use Twilio as our SMS delivery and processing provider. Twilio processes phone numbers and message content on our instructions solely to transmit texts, receive inbound replies (including STOP and HELP), and support related messaging services. Twilio acts as a processor for Pocket Social in providing the Text Program. See also Section 6.
Retention of phone numbers and consent records
We retain phone numbers, consent evidence, opt-out status, and related message logs for as long as needed to operate the Text Program for the business customer, to honor opt-outs, and to meet legal, regulatory, carrier, and audit requirements. When a business customer's account ends, or when deletion is requested and verified, we delete or de-identify SMS-related personal data as described in Section 9, except where longer retention is required by law or necessary to demonstrate prior consent or opt-out.
5. How we use your information
We use the information we collect to:
- Provide, operate, and maintain the Service, including creating and managing your account;
- Generate content with our AI features based on the prompts and inputs you provide;
- Hold content for your review and approval, schedule it, and publish it to your connected Facebook and Instagram accounts;
- Let you view and manage engagement such as Instagram comments;
- Operate SMS/text marketing features for business customers, including consent management, message delivery via Twilio, and STOP/HELP handling;
- Authenticate you, keep your account secure, and prevent fraud or abuse;
- Respond to your requests, provide customer support, and send you service-related communications;
- Monitor, troubleshoot, and improve the reliability, security, and performance of the Service; and
- Comply with legal obligations and enforce our Terms of Service.
We use your information solely to provide and improve the Service. We do not sell your personal information, and we do not sell phone numbers for unrelated marketing.
7. Data storage, security & retention
Your data is stored in our database and object storage, and served through our cloud-hosted application. We protect data in transit using HTTPS/TLS encryption and rely on our providers' encryption-at-rest and access controls. Authentication is handled with JSON Web Tokens (JWT), and passwords, where used, are stored only in hashed form. Access to production data is limited to authorized personnel who need it to operate the Service.
We retain your information for as long as your account is active or as needed to provide the Service. SMS phone numbers, consent, and opt-out records are retained as described in Section 4. We retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, or when you delete your account, we delete or de-identify it as described in Section 9. No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.
8. Your rights & choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct information that is inaccurate or incomplete.
- Deletion: Request that we delete your personal information (see Section 9).
- Withdraw consent / disconnect: Disconnect your Facebook or Instagram account at any time from within the Service or from your Meta account settings, which stops our further access to that account's data.
- SMS opt-out: Reply STOP to cancel texts from a business customer's Text Program, or reply HELP for help (see Section 4).
- Object or restrict: Object to or ask us to restrict certain processing of your information.
To exercise any of these rights, contact us at support@pocketsocial.net. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.
9. Data deletion & how to request it
You can request deletion of your data at any time. There are two ways to do this:
- Disconnect an account: To stop Pocket Social from accessing a specific Facebook Page or Instagram account, disconnect it within the Service, or remove Pocket Social from your Facebook Business Integrations / Apps and Websites settings. This revokes our access token and stops further access to that account's data.
- Delete your data: To request deletion of your Pocket Social account and all associated personal information and Meta Platform Data, email support@pocketsocial.net with the subject line "Data Deletion Request" from the email address associated with your account. We will verify your request and delete the associated data from our database and storage, except where we are required to retain it by law. We aim to complete verified deletion requests within 30 days.
End users of a business customer's Text Program may opt out of further texts by replying STOP. To request deletion of a phone number and related SMS records held for a Text Program, contact the business that messaged you or email support@pocketsocial.net with enough detail for us to locate the record (such as the mobile number and the business name). We may need to retain limited opt-out or consent evidence where required for compliance.
When you delete your Pocket Social account, we delete your account information, the content you created, and the Meta Platform Data (including stored access tokens) associated with your connected accounts. Some information may persist in routine backups for a limited period before being overwritten, and may be retained where required for legal or security purposes.
11. Children's privacy
Pocket Social is a business tool intended for use by adults. The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18 (or the age of majority in your jurisdiction). Text Programs are likewise not intended for anyone under 18. If you believe a child has provided us with personal information, please contact us at support@pocketsocial.net and we will delete it.
12. International data transfers
Pocket Social and its service providers may store and process information in the United States and other countries where our providers operate. If you access the Service from outside those countries, you understand that your information may be transferred to, stored, and processed in a country whose data protection laws may differ from those of your country. Where required, we take steps to ensure appropriate safeguards for such transfers.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.
14. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us:
- Privacy & data deletion: support@pocketsocial.net
- General support: support@pocketsocial.net
- SMS / Text Program questions: support@pocketsocial.net (or reply HELP to a text from the program)
- Legal: support@pocketsocial.net