1. Who is responsible
Adrian Irimia / adx-fusion, Romania, is the controller for personal data processed through SocialBot. Contact: adxfusiondev@gmail.com. This product-specific policy covers the SocialBot Android MVP and its public information pages, taking precedence over the general adx-fusion privacy policy for SocialBot.
The current MVP has developer-granted access. TikTok authorization, posting, AI processing and push notifications are not currently connected. Their planned handling is explained separately below and does not mean these data are currently collected.
2. Data used by the current MVP
Account data: email address, Firebase user ID and administrator access role. Firebase Authentication handles sign-in credentials and session security; SocialBot does not store passwords in its app or content documents.
Content you provide: app names, descriptions, store links, hashtags, icons, selected screenshots, upload dates and content usage metadata. Campaign preferences and any stored post records are associated with your account. Screenshots may contain personal information if you include it; remove such information before uploading.
Support messages: your email address and the information you send us. Firebase services and website hosting also process technical information such as IP addresses and request data to operate and protect the service.
3. Purposes and legal bases
We use account and content data to provide the requested workspace and respond to service requests. Where GDPR applies, this is based on performing our agreement with you. Security and abuse prevention rely on legitimate interests; legally required processing relies on legal obligations. Optional processing that requires consent will be explained before activation, and that consent can be withdrawn. We do not sell personal data or use SocialBot content for targeted advertising.
4. Storage and service providers
Google Firebase provides authentication, Firestore database storage and Cloud Storage for the configured mobile workspace; Firebase Hosting serves this website. Data are processed by these providers as needed to deliver those services. We may disclose data when legally required or necessary to protect legal rights.
Processing may involve locations outside the EEA. Where applicable, international transfers must use an appropriate lawful mechanism, such as an adequacy decision or standard contractual clauses. Contact us for information about the configured services and applicable safeguards.
5. Planned TikTok and AI features
These features are not enabled in the current MVP. Before activation we will update this policy with the actual permissions, providers, processing and retention. TikTok connection would use OAuth authorization, not your TikTok password; permitted account identifiers and tokens would support only the authorized functions.
AI generation would send the selected app context, images and relevant content history to the disclosed AI provider. No images are currently sent to an AI provider. A future notification feature would require a device notification token and the applicable permission. You will be informed before these optional data flows begin.
6. Retention and deletion
Account and workspace data are kept while the account is active and needed to provide the service. You can delete managed apps and screenshots in the app. App deletion removes its source images and metadata but retains any post history. To remove your account, retained post history or other remaining data, email adxfusiondev@gmail.com from your registered address.
We verify requests and remove data we control unless a lawful retention requirement or permitted exception applies. Provider logs and backups follow their own retention cycles; deletion is not an instant purge of all backups. We will explain any applicable exception when responding. The current app does not publish to TikTok.
7. Security and device storage
Firebase authentication and ownership rules restrict workspace access to provisioned administrators. The mobile app keeps the sign-in session on the device so you can stay signed in. Keep your device secure and use sign-out to end a session. Stored image download links contain access tokens: do not share private links. No system can guarantee absolute security.
The SocialBot pages add no advertising trackers, analytics or signup forms. Hosting may process technical request information. The mobile app accesses only the images you select through the system picker, not your whole gallery.
8. Your rights and contact
Where applicable, you can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent. Email adxfusiondev@gmail.com. You may also complain to the Romanian data protection authority (ANSPDCP) or your local authority. SocialBot is intended for adults; we do not knowingly provide accounts to children. We will update this page when processing changes.