Privacy Policy

Social Studio (“we”, “us”) is a tool for scheduling and publishing content to Instagram and Telegram, made for creators and businesses in Uzbekistan and beyond. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have. It applies to our website and app at socialstudio.uz. If you have any privacy question, or want to reach the person responsible for data protection, email us.

We collect only what we need to run the service:

• Account details — the name, email address and password you provide when you register.
• Connected social channels — for each Instagram or Telegram channel you connect, the platform account ID and handle, the profile name and follower count, and an access token, which is encrypted at rest.
• Content you create — the posts, captions, schedules and media (images and videos) you upload to publish through the service.
• Technical and usage data — basic log data such as IP address, browser and device type, and the actions you take in the app, used to keep the service secure and reliable.

We do not collect special categories of data (such as health, biometric or political data), and we ask you not to submit them.

We use your data only to provide and operate the service: to create and secure your account and sign you in; to show your connected channels; to schedule, publish and manage the posts and media you create; to provide support and answer your requests; and to keep the service secure, prevent abuse and meet our legal obligations. We do not sell your personal data, and we do not use your data — or data obtained through the Instagram or Telegram APIs — for advertising or profiling.

Where data protection law such as the GDPR applies, we process your personal data on these legal bases: to perform our contract with you (to deliver the service you sign up for); your consent (for example when you connect a social channel and grant permissions, which you can withdraw at any time); our legitimate interests in operating, securing and improving the service; and compliance with our legal obligations.

When you connect an Instagram account, you authenticate through Meta and grant permissions that let us act on your behalf. Using the Instagram Graph API, and in accordance with the Meta Platform Terms and Developer Policies, we access only what is needed to publish and manage your content:

• your Instagram professional account’s ID, username and profile name;
• your follower count and the basic account details shown in the app;
• permission to publish and manage the posts and media you schedule.

We use this information solely for the features described in this policy. We do not sell it, and we do not transfer it to third parties except the service providers described below who help us run the service. If our use of Meta data ever changes, we will update this policy and, where required, ask for your consent. You can revoke our access at any time — see “Deleting your data and revoking access” below.

To publish to Telegram, you add a bot we provide to your channel and grant it permission to post. We act only through that bot and store your channel’s ID and title and the bot access token needed to publish. We use the Telegram Bot API strictly to publish and manage the content you schedule, in line with Telegram’s terms. You can remove the bot from your channel at any time to stop all access.

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf to run the service — such as cloud hosting and infrastructure providers that store our data, and the tools we use to reply to you. These providers act on our instructions under contract and may not use your data for their own purposes. We may also disclose data where required by law, to protect our rights or our users, or as part of a business transfer, in which case we will notify you.

We keep your personal data only for as long as your account is active or as needed to provide the service and meet legal obligations. Access tokens and other sensitive data are encrypted at rest, and we apply organisational and technical safeguards to protect data against unauthorised access, loss or misuse. When you delete a channel or your account, the associated data is removed from our active systems, and any residual copies in backups are deleted on our regular backup cycle.

You are in control of your data. You can disconnect any Instagram or Telegram channel, or delete your entire Social Studio account, at any time from within the app — this permanently removes the associated tokens and profile data from our systems. You can also revoke access directly on the platform: remove Social Studio under Settings → Apps and Websites in your Instagram or Meta account, or remove the bot from your Telegram channel. For step-by-step instructions, including how to ask us to delete your data for you, see our Data Deletion page.

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time.

To exercise any of these rights, email us at the address below. We will respond within the time required by applicable law, and you have the right to complain to your local data protection authority.

Social Studio is intended for businesses and creators and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with data, contact us and we will delete it.

We are based in Uzbekistan and may process and store data on servers located in other countries. Where we transfer personal data across borders, we take steps to ensure it stays protected in line with this policy and applicable law.

Our website uses only essential cookies needed to make the site and your session work — for example to remember your language and keep you signed in. We do not use advertising or third-party tracking cookies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the service after an update means you accept the revised policy.

Questions about this policy or your data, or want to exercise your rights? Email us and we’ll be glad to help.