Security

1. Infrastructure

Socioi runs on reputable cloud infrastructure. Traffic to our apps is served over HTTPS. Production systems are segregated from development where practical, and access to production environments is limited to authorized personnel.

2. Authentication

Account authentication is handled through our auth provider. Passwords are not stored in plaintext by Socioi. You should use a strong, unique password and keep your login details confidential. Workspace owners should remove users who no longer need access.

3. Channel tokens & sensitive credentials

When you connect social channels (including YouTube via Google OAuth), access and refresh tokens are encrypted at rest with AES-256-GCM and transmitted only over TLS. Tokens are decrypted server-side solely to perform actions you request (such as listing channels and publishing). You can disconnect channels in the product and revoke app access from the platform settings, including Google Account permissions (see Data deletion). Our Privacy Policy describes these data protection mechanisms in full.

4. Payments

Card payments are processed by Paddle. Socioi stores subscription and plan status, not full payment card numbers. Paddle’s security practices are described in Paddle’s own documentation and policies.

5. Data handling

• Encryption in transit (TLS) for app and API traffic
• Encrypted storage of sensitive channel credentials
• Least-privilege access for operational tooling where feasible
• Logging focused on reliability, abuse prevention, and support

6. Your responsibilities

• Protect account credentials and devices
• Grant workspace access only to trusted teammates
• Review connected apps on Meta and other platforms periodically
• Report suspected unauthorized access promptly

7. Incident reporting

If you discover a vulnerability or suspect a security incident involving Socioi, email security@socioi.com with “Security” in the subject line. Please include enough detail for us to reproduce or investigate, and avoid publicly disclosing sensitive exploit details before we can respond.

8. Limitations

No system is perfectly secure. We work to reduce risk continuously, but we cannot guarantee absolute security. Additional disclaimers appear in our Disclaimer and Terms of Service.