AutoRS← Back to home

Privacy Policy

Last updated: June 9, 2026

SOMA Intelligence ("we", "us", or "our") operates AutoRS, a social media automation platform. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at autors.soma-ia.com.

1. Information We Collect

Account Information

When you register, we collect your email address and, optionally, your name. Passwords are hashed and never stored in plain text.

Social Media Account Data

When you connect a social media account via OAuth, we collect and store:

  • TikTok: Your TikTok Open ID (open_id) and display name (display_name), along with encrypted access and refresh tokens necessary to publish content on your behalf. We request the scopes user.info.basic and video.publish only.
  • Instagram / Facebook: Your account ID and display name, plus encrypted tokens for the pages you authorize.
  • LinkedIn: Your LinkedIn member ID and profile name, plus encrypted tokens scoped to content publishing.
  • X (Twitter): Your X user ID and username, plus encrypted OAuth 2.0 tokens for tweet publishing.

All access tokens are encrypted at rest using AES-256 encryption. We do not read your messages, followers, or any data beyond what is required to publish content you create in AutoRS.

Content You Create

We store the posts, captions, and scheduling information you create in AutoRS in order to deliver the Service.

Usage Data

We may collect standard server logs including IP addresses, browser type, and pages visited. This data is used solely for security monitoring and service improvement.

2. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage your account
  • Publish content to your connected social media accounts on your behalf
  • Send transactional emails (account verification, billing receipts)
  • Respond to support requests
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your social media content for advertising or marketing purposes.

3. Data Retention

We retain your account data for as long as your account is active. Connected social media tokens are deleted immediately when you disconnect an account. Published post records are retained for 12 months for your history, then automatically deleted.

You may request deletion of all your data at any time by contacting privacy@soma-ia.com. We will process deletion requests within 30 days.

4. Revoking Access to Social Media Accounts

You can disconnect any social media account at any time from your Connected Accounts page. This immediately deletes the stored tokens and revokes AutoRS's ability to publish on your behalf.

You can also revoke access directly from each platform's settings:

  • TikTok: Profile → Privacy → Apps and Websites → Manage app permissions
  • Instagram / Facebook: Settings → Security → Apps and websites
  • LinkedIn: Settings → Privacy → Permitted services
  • X (Twitter): Settings → Security and account access → Apps and sessions

5. Data Security

We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for sensitive data at rest (tokens), and access controls limiting who within our organization can access your data. Our infrastructure is hosted in the European Union.

6. Third-Party Services

We use the following third-party services to operate AutoRS:

  • Stripe — payment processing (governed by Stripe's Privacy Policy)
  • Resend — transactional emails
  • Supabase — database and authentication infrastructure

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability
  • Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@soma-ia.com.

8. Children's Privacy

AutoRS is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The date at the top of this page reflects the most recent update.

10. Contact

For privacy-related questions or requests, contact: privacy@soma-ia.com
SOMA Intelligence — France