Privacy Policy

SocialOS — social media management application by Modus Altos Mikhail Kushnir (AgenticOS).
Last updated: 16 July 2026 · Contact: mikhail@agenticos.agency

1. Who we are

SocialOS is a hosted web service that helps businesses manage their own social media presence (Instagram, Facebook, LinkedIn): create and schedule posts, view analytics, and respond to comments and direct messages. The service is developed and operated by Modus Altos Mikhail Kushnir, ul. Partyzantów 8/2, 31-435 Kraków, Poland, NIP 9452325283, REGON 543982920 ("we", "us"). Contact: mikhail@agenticos.agency.

2. Data we access and why

When you connect your social media accounts through the official APIs (Meta Graph API, LinkedIn API), SocialOS accesses, on your behalf and only after your explicit OAuth authorization:

• Account and Page metadata — account name, ID, connected Pages and Instagram professional accounts — to let you choose which account to manage.
• Content you create — posts, captions, and media you compose in the app — to publish them to your accounts when you request it.
• Comments and direct messages addressed to your accounts — to display them in your inbox and let you (or your configured assistant) reply.
• Insights and analytics (reach, engagement, follower statistics) — to show you performance reports for your own content.

3. Where data is stored

SocialOS runs on our servers inside the European Union (Hetzner Online GmbH, Nuremberg, Germany). Access tokens, the content you create, inbox data, and analytics are stored there so the service can publish on schedule and answer messages while you are not logged in.

Access tokens are encrypted at rest. Each customer's data is kept under a separate tenant and is never mixed with another customer's. We do not transfer personal data outside the EU/EEA except to the platform APIs you connect and to the subprocessors listed below.

Media files are stored in Cloudflare R2 (EU) because the platform APIs require a publicly reachable URL to fetch media during publication.

3a. Subprocessors

• Hetzner Online GmbH (Germany) — servers and backups.
• Cloudflare, Inc. — R2 object storage for media and encrypted backups.
• Resend (Plus Five Five, Inc.) — transactional email (sign-up confirmation, password reset).
• Google LLC — sign-in with Google, and Gemini models for text generation.
• BytePlus Pte. Ltd. — image and video generation models.

Content you send for generation is processed by the model provider solely to return the result. We do not send your inbox messages or audience data to model providers.

4. Data sharing

We do not sell, rent, or share your personal data or your audience's data with third parties. Data is exchanged only with the platforms you connect (Meta, LinkedIn) via their official APIs, and with service providers you explicitly configure (e.g. an AI text assistant), strictly to provide the app's features.

5. Data retention and deletion

Disconnecting an account in Settings deletes its access tokens from our servers immediately. Deleting your account deletes your content, inbox data, and analytics within 30 days; encrypted backups are rotated out within a further 30 days. You may request deletion at any time — see our Data Deletion Instructions.

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact mikhail@agenticos.agency. You also have the right to lodge a complaint with your supervisory authority (in Poland: UODO).

7. Changes

We may update this policy from time to time. The current version is always available at this URL.