Privacy Policy

Last updated: 28 September 2026

Sociomatix ("the Service") is operated by Cadabra Secure Private Limited, Plot No. 94, 3rd Floor, Near Radisson Blu, Sector 13, Dwarka, New Delhi 110078, India ("we", "us"). This policy explains what data the Service collects, why, and how it is handled.

What we collect

Account data. When you sign in with email, Google or Microsoft we store your email address, display name and profile picture so we can identify your account. We never receive or store your Google or Microsoft password.

Connected social accounts. When you connect an Instagram, Facebook Page or LinkedIn Page, we store the access tokens the platform issues, encrypted at rest, together with the account name, id and public metrics. We use them only to publish content you approve, read comments and messages addressed to your accounts, and fetch analytics for those accounts through each platform's official API.

Content you create. Brand knowledge, drafts, approvals, schedules and settings you enter into the Service.

Usage logs. Standard server logs and an audit trail of actions taken by you or by the Service's AI agents on your behalf.

How we use data

To provide the Service: planning, drafting, scheduling and publishing content; classifying and replying to engagement you approve; reporting analytics; and sending you notifications you have enabled. Content and brand data are sent to our AI model providers (currently Anthropic) solely to generate outputs for you; they are not used to train models.

We do not sell personal data and we do not use it for advertising.

Google and Microsoft sign-in

Sign-in with Google uses the openid, email and profile scopes only. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Sign-in with Microsoft uses the equivalent OpenID Connect scopes.

Storage and security

Data is stored with Supabase (Postgres) and hosted on Vercel. Platform tokens are encrypted with AES-256-GCM before storage. Access is restricted by row-level security to members of your organisation.

Retention and deletion

You can disconnect a social account at any time from Integrations, which stops all publishing and syncing for it. You can request deletion of your account and all associated data by emailing hello@nukebox.co; we complete deletion within 30 days. Data received from Facebook, Instagram or LinkedIn is deleted when you disconnect the account or on request.

Contact

Questions about this policy: hello@nukebox.co.