Security & privacy
Your clients trust you with their accounts. Here is how we keep that safe.
What the product does today, in plain language. We do not hold a third-party security certification, and we will not imply one.
Every client in its own workspace
- Content, media, the calendar, connected accounts and members belong to a workspace.
- Every query is scoped to the workspace resolved from your session, so separation is enforced in the data layer, not only hidden in the interface.
- A feature a plan does not include is refused by the API and background jobs as well as hidden in the app.
Signing in
- Email and password with email verification, a six-digit one-time email code, or Google sign-in.
- Resetting a password signs out every other session.
- You can see your active sessions and revoke any of them from your profile.
- Sign-in and other sensitive endpoints are rate-limited.
Connected social accounts
- Accounts connect through each network's own OAuth sign-in; we never ask for a social password.
- Access tokens are encrypted before they are stored.
- Disconnect an account at any time from the workspace's channel settings.
Roles and an audit log
- Nine built-in roles, from Owner to Viewer, decide who can draft, approve, publish, manage billing or only read. Agency plans can define custom roles.
- Workspace actions are recorded in an audit log with who took them and when, and every approval decision is shown on the post it belongs to.
Client review links
- A review link covers one workspace and one month, and never shows drafts.
- Links expire after 60 days, can be revoked at any time, and are stored only as a hash.
- A client signs each decision with their name, and your team can see when a link has been opened.
AI and connected apps
- We do not use your content to train AI models.
- AI clients such as Claude or ChatGPT connect only after you approve them over OAuth 2.1, with the scopes you choose. Every call is rate-limited and audited, and access can be revoked from Connected apps.
- The AI assistant acts with your permissions and asks for approval at the level you set.
Deleting your data
- Delete your account yourself from your profile. Deleting an account also deletes the workspaces you own.
- Meta's data-deletion requests are honoured automatically.
Payments
- Subscriptions are billed through Razorpay. Card details are entered in Razorpay's checkout, not stored by Social Sphere.
Questions from your security team?
Read the privacy policy and terms, or send us your questionnaire.
Every feature on during the trial
Put next month's content in front of your client this week.
Start a 7-day free trial with every feature switched on. No card needed, and nothing converts to a paid plan unless you choose one.
- 7-day free trial
- No credit card
- Does not auto-convert
- Cancel anytime
