How Social Relay processes data for platforms and end users.

This privacy policy describes how Third Shift Group LLC (“we”, “us”), which operates the Social Relay product, processes information when you use socialrelay.dev, the Social Relay API at api.socialrelay.dev, and related operator consoles. Social Relay is a multi-tenant social publishing API for software platforms.

1. Who this policy covers

Platform customers integrate our API on behalf of their business. End users of those platforms may authorize social accounts through our hosted connect UI. Site visitors browse marketing pages. Operators may access the console using Microsoft Entra sign-in when invited.

When a platform customer submits personal data about their end users, they are typically the controller for that data; we process it to provide the service under our agreement with the platform.

2. Categories of information

• Account & identity: platform account name, contact emails, Entra identifiers for operators (name, object id, roles).
• Credentials: platform API key material (stored hashed; plaintext shown only at creation), encrypted OAuth access/refresh tokens for connected networks.
• Profile & content: profile titles and external identifiers supplied by the platform, post text, media URLs, network targets, and per-leg publish results.
• Usage & billing: token balances, ledger entries for billable actions, approximate request volume and rate-limit signals.
• Technical logs: request identifiers, IP address, user agent, timestamps, error codes—without logging raw API keys or OAuth secrets.
• Webhooks: destination URLs and delivery outcomes for events the platform registers.

3. Purposes of processing

• Provide, secure, and improve the Social Relay API and marketing site
• Complete OAuth connect with Facebook, Instagram, and LinkedIn on behalf of profiles
• Publish content and report network results
• Meter prepaid tokens and maintain an accurate ledger
• Detect abuse, spam, fraud, and security incidents
• Comply with law and social network platform requirements
• Respond to support, privacy, and legal requests

4. Legal bases (where applicable)

Depending on jurisdiction, we rely on performance of a contract with the platform customer, legitimate interests in operating a secure multi-tenant API, consent where required for optional cookies or communications, and legal obligation for regulatory requests.

5. Sharing

We share information with:

• Social networks (Meta, LinkedIn) as required to connect accounts and publish content the platform initiates
• Infrastructure providers (for example cloud hosting, databases, logging) under data processing terms
• Professional advisors or authorities when required by law or to protect rights and safety

We do not sell personal information.

6. International transfers

Infrastructure may process data in the United States or other regions where our providers operate. Where required, we use appropriate transfer mechanisms.

7. Retention

We retain account, profile, post, and ledger data for the life of the platform relationship plus a limited period for disputes and legal compliance. OAuth tokens are retained while connections remain active and deleted or invalidated when connections are removed. Operational logs are retained for a shorter rolling window unless needed for security investigation.

8. Security

We use HTTPS, hashed platform API keys, encryption for OAuth secrets at rest, role-based operator access, and least-privilege access to production systems. No method of transmission or storage is perfectly secure; platforms must protect their own API keys.

9. Your rights

Depending on location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. End users should contact the platform that integrated Social Relay for requests about data that platform submitted. You may also contact us at hello@socialrelay.dev.

10. Children

The service is directed to businesses and adult operators. We do not knowingly collect personal information from children under 16.

11. Changes

We may update this policy and will revise the “Last updated” date. Material changes may be communicated via the site or email to platform contacts.

12. Contact

hello@socialrelay.dev