No badges, no certificates, no crests

You are handing over the keys to your shopfront. Here is exactly what that means.

What it asks each platform for, what it keeps, who else can see any of it, and how to take it all back. In plain words, because this is the page people skim when they are already nervous.

What it asks each platform for

And, just as importantly, what it leaves alone.

It asks for

Put posts on the Page you pick, and take them down again
Read comments and Messenger messages on that Page, and answer them
Read how the Page’s posts performed

It never asks for

Your personal profile, your friends or anything you post as yourself
Other Pages you run but did not tick
Your ad account or any way to spend money

Taking it back

Remove it from Business Settings on Facebook, or disconnect from here. Either way, posting stops immediately and the key it held stops working.

What it keeps, and for how long

Everything on this list can be exported or deleted by you.

What	Why it is there	How long
The words on your website	So it knows what you sell, what it costs and when you are open.	Until you delete the business.
What it learned about you	The summary you corrected on day one, which every post is written from.	Until you delete the business.
Posts and pictures	So you can look back at what went out, and reuse what worked.	While your account is open, and 30 days after you close it.
Messages and comments	So a reply makes sense in the context of what was already said.	Kept for 12 months, then removed.
The key to each account	So it can post without asking for your password, which it never has.	Until you disconnect.
Billing	So you can get an invoice and see what you paid.	As long as the law says, then gone.

Switches that are yours

All of these are in Settings, and none of them need anyone's help.

Pause everything — one tap, from any screen, including your phone.
Disconnect one account without touching the others.
Turn off replies sending themselves, per account, so every answer waits for you.
Decide who sees what — staff can write and review without touching billing or connections.
Export the lot — posts, pictures, threads and what it learned — as files you keep.
Delete a business, or all of it. Gone from the app straight away, and out of backups within 14 days.

Nobody here reads your messages to help unless you ask them to, and when you do, you can see that it happened.

Who else touches any of it

The companies underneath this, and the single thing each one sees.

netcupRents the server this runs on, in Germany. Holds everything above, encrypted at rest, and never looks at it.
AnthropicGets the summary of your business and the subject of a post, to write the words. Does not get your messages or your customers, and does not train on any of it.
ResendSends you the nudge that something needs a yes. Sees your email address and the subject line.
StripeTakes the payment on its own pages. Sees your card; this app never does.
SentryCatches crashes so they can be fixed. Sees which screen broke, not what was on it.
Google AnalyticsCounts visits on the public site. Nothing from inside your account.

Your card details are never seen here at all — payment happens on the payment company's own pages.

If something goes wrong

Found a hole, or seen something odd on your account? Write to security@sociant.co.uk and a person answers within 24 hours. No ticket numbers, and it goes to a person rather than a queue.

If something happens that touches your accounts or your information, you get told what happened, what it reached and what to do about it — within 72 hours of it being known, not when the investigation finishes.

The paperwork

Terms, privacy and the data-processing agreement your accountant or IT person may ask for are all on one page, in the same plain words as this one.

Read the legal bits →