Privacy Policy

Who we are

Social Content Creator is an AI-assisted social media content workspace operated by JEMI Labs, a brand of Insight Capital & Advisory Ltd, a company registered in England and Wales (company number 05568989) (“we”, “us”). It helps teams research, draft, design, and publish content to social networks they connect. For any privacy question or request, contact info@insight-ca.com.

Information we collect

• Account information — your email address and display name, used to create and secure your account.
• Content you create — projects, drafts, uploaded assets, brand settings, and the sources and topics you configure for research features.
• Connected social accounts — when you connect LinkedIn, Facebook, or X, we store the OAuth access tokens those platforms issue so SCC can publish on your behalf. We never see or store your social media passwords.
• Organization API credentials — organizations may store their own AI/search provider API keys so usage is billed to their accounts. These keys are encrypted at rest (AES-256-GCM) and are never displayed back in full or shared across organizations.
• Usage records — we log AI-generation usage (token counts, timestamps, feature used) for cost attribution and service health. We do not use third-party advertising or cross-site tracking.

How we use your information

Solely to provide the service: authenticating you, generating drafts and images you request, monitoring sources you configure, and publishing to social accounts you have explicitly connected — always on your action, never autonomously. We do not sell personal data, and we do not use your content to train AI models.

AI processing

When you use generation features, the relevant content (your prompts, drafts, and configured context) is sent to AI providers — Anthropic (text), Google and OpenAI (images) — under their API terms, which do not permit training on API data. Organizations may route this processing through their own provider accounts by supplying their own keys.

Service providers

We rely on a small set of processors to run SCC: Supabase (authentication and database, hosted in AWS eu-west-2), Vercel (application hosting), Anthropic, Google, and OpenAI (AI processing), Exa, Jina, and Firecrawl (web search and content retrieval for research features you invoke), Resend (transactional email such as sign-up confirmation), and the social platforms you connect (LinkedIn, Facebook, X) for publishing you authorize.

Social platform data

OAuth tokens for connected social accounts are used only to publish content you explicitly approve, to report publish status back to you, and, for the LinkedIn features described below, to read the data those features need. You can revoke access at any time by disconnecting the account in SCC’s settings or from the social platform’s own security settings; revocation takes effect immediately.

LinkedIn data

When you connect a LinkedIn profile or a LinkedIn Page you administer and use SCC’s LinkedIn features as they become available (publishing to the Page, viewing and replying to comments, and post and Page analytics), SCC receives data through LinkedIn’s APIs:

• Your own account — your LinkedIn member ID and basic profile, and the Pages you administer.
• Engagement on your posts — comments, reactions and mentions on posts published by you or your Page, and the basic profile (name, headline, photo) of the members who made them.
• Page reporting — aggregate follower, visitor and engagement statistics for your Page.

We keep this data only as long as LinkedIn allows: other members’ profile data is cached for no more than 24 hours and never stored; the content of members’ comments, reactions and posts for no more than 48 hours; your Page’s own posts for up to six months; and aggregate Page reporting for up to one year. Identifiers LinkedIn permits us to keep (such as post and comment IDs) may be kept longer so SCC can link replies to the right post.

LinkedIn data is shown only to users in your workspace who are authorised to manage that profile or Page. We do not sell it, share it with third parties other than the processors needed to run the feature you use, or use it for advertising, lead generation, prospecting, recruiting or profiling, and we do not use it to train AI models. If you ask SCC to draft a reply to a comment, that comment is sent to our AI provider solely to generate the draft. LinkedIn data is excluded from data exports. When you disconnect LinkedIn, or a LinkedIn member asks us, we delete the related LinkedIn data we hold.

Security and retention

All data is encrypted in transit (TLS) and at rest. Stored provider API keys receive additional envelope encryption (AES-256-GCM). Access is isolated per workspace and organization. We retain your data while your account is active, except LinkedIn data, which is kept only for the periods described above; contact us to request export (LinkedIn data excluded) or deletion, which we will complete within 30 days.

Your rights

You may request access to, correction of, or deletion of your personal data at any time via the contact address above. If you are in the UK or EU, you additionally have the rights provided by UK/EU GDPR, including the right to lodge a complaint with your supervisory authority.

Children

SCC is a professional tool and is not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

We will update this page when our practices change and revise the “Last updated” date above. Material changes will be communicated to account holders by email.