Legal

Privacy Policy

Last updated

Introduction

This Privacy Policy describes how Sofuto Solutions LLP, a United Kingdom Limited Liability Partnership (Companies House registration OC454766) with registered office at 27 Old Gloucester Street, London WC1N 3AX, United Kingdom (referred to as “we,” “our,” or the “Company”), collects, uses, stores, and protects personal information when you use WeRepost (the “Application” or “Service”), accessible at werepost.ai.

By using the Application, you agree to the collection and use of your personal data as described in this Policy.

Information We Collect

Information you provide to us

  • Account information. When you register, we collect your email address, user ID, and authentication tokens.
  • Social media credentials. When you authorize WeRepost to access your TikTok, Instagram, or Facebook accounts, we store secure OAuth access tokens to enable automated cross-posting on your behalf. We do not store your passwords.
  • Content you submit. Captions, links, video files, and other content you add through the Service for the purpose of reposting.

Automatically collected information

  • Device data. Device model, operating system version, IP address, unique identifiers, and crash data.
  • Usage data. Application interactions such as features used, screens viewed, and buttons clicked, collected to improve user experience.

Information from third parties

  • Social platform APIs. When you connect TikTok, Instagram, Facebook, or YouTube, we receive data from those platforms as permitted by their respective APIs and your authorization.

How We Use Your Data

Your personal data is used to:

  • Deliver the Service. Connect your accounts and automate cross-posting of your content to your selected platforms.
  • Improve the app. Analyze user behavior patterns and resolve technical issues.
  • Communicate with you. Send notifications about post status, errors, or product updates.
  • Comply with legal obligations. Respond to lawful requests from authorities where required.

Sharing and Disclosure

We do not sell your personal data. We share data only with trusted service providers that help us operate the Application:

Technical infrastructure

  • Database & hosting. Google Firebase (Firestore) and Cloud Functions store user data and run the backend.
  • Crash reporting. Google Crashlytics monitors stability and identifies bugs.
  • Push notifications. OneSignal receives device ID and push tokens to deliver notifications.

Analytics

  • Product analytics. Amplitude analyzes user behavior, associating events with your User ID to help us understand how the app is used.

Legal & business transfers

  • Legal compliance. We may disclose information if required by applicable law, regulation, or legal process.
  • Business transfers. In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity.

International Data Transfers

Sofuto Solutions LLP operates from the United Kingdom. Where data is transferred outside the UK/EEA (for example to our hosting and analytics providers in the United States), we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or applicable adequacy decisions as the transfer mechanism. We comply with the UK GDPR and the Data Protection Act 2018.

Data Retention

  • Account data. Retained in Firebase while your account remains active.
  • Video & media files. Content uploaded or processed for reposting is stored on our servers for a maximum of 30 days, then automatically deleted.
  • Post history. Records of posts you have submitted remain stored until deleted by you or upon account deletion.

Security

We use reasonable administrative, physical, and electronic measures — including encryption and secure OAuth token management — to protect your information from unauthorized access. However, no Internet transmission can be guaranteed to be completely secure.

Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

  • Access. Request a copy of the personal data we hold about you.
  • Rectification. Request correction of inaccurate data.
  • Deletion. Request deletion of your account and associated data.
  • Revocation of access. Revoke our access to your social media accounts at any time through each platform's security settings.

To request account and data deletion, email support@werepost.ai or visit our data deletion page. We will process your request and delete your data from active databases within 30 days.

Data deletion via connected platforms. If you delete WeRepost from your Facebook or Instagram account, Meta will notify us and we will automatically remove your social connection records and any uploaded media within 30 days. You can verify the status of any such request at werepost.ai/data-deletion using the confirmation code Meta provides.

Children's Privacy

WeRepost is not intended for individuals under 13 years of age (or the applicable digital consent age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child's data has been collected without verified parental consent, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top of this page indicates when the most recent revision was made. Your continued use of the Application after changes are posted constitutes your acceptance of the updated Policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Company. Sofuto Solutions LLP
  • Email. support@werepost.ai
  • Address. 27 Old Gloucester Street, London WC1N 3AX, United Kingdom
  • Companies House registration. OC454766