Privacy Policy

1.Who we are

Sutriq (“we”, “us”, “our”) provides an all-in-one social media platform for businesses: account signup, business onboarding, connecting social channels, creating and scheduling posts, media storage, analytics, and related services.

This policy explains how we handle personal data across our marketing site (sutriq.com) and the product (app.sutriq.com). By joining the waitlist, creating an account, or otherwise using Sutriq, you agree to this policy.

2.Information we collect

We collect only what we need to run the service you asked for:

• Waitlist details — the email address you submit on this site, so we can tell you when access opens.
• Account information — name, email address, phone number, and a password we store only in hashed form. Your phone number is also used to send you the transactional SMS messages described below.
• Business information — business name, website, category, and anything else you provide during onboarding or in your profile.
• Connected social accounts — OAuth tokens and profile identifiers for the platforms you choose to connect (for example Facebook, Instagram, LinkedIn, TikTok, or YouTube), used to publish on your behalf and read insights.
• Content you create — posts, captions, uploaded media, schedules, approvals, and related campaign data.
• Usage and technical data — IP address, device and browser type, approximate location derived from IP, and server logs needed to operate, secure, and debug the service.
• Support communications — messages you send us about your account or the product.

We do not ask for payment card numbers directly; where we take payment it is handled by a payment processor under its own terms.

3.How we use information

• To create and manage your account — verifying your email, resetting passwords, and authenticating sessions.
• To provide the product — onboarding, channel connections, publishing, scheduling, media storage, approvals, and analytics.
• To keep the service reliable and secure — abuse and fraud prevention, rate limiting, and troubleshooting.
• To send transactional email — verification codes, password resets, and important service notices. Marketing email is sent only where permitted, always with a way to opt out.
• To send transactional SMS — one-time verification codes, and notifications when a post is submitted for approval, approved, or rejected. Message frequency varies with your usage; message and data rates may apply.
• To analyse a website you submit, when you use that feature, with AI providers, purely to pre-fill the business details you asked us to fill.
• To improve the product in aggregate — understanding which features are used, without profiling individuals.

We do not use your content to train third-party AI models.

4.SMS / text messaging

If you provide a phone number, Sutriq sends transactional SMS messages tied directly to your use of the Service: one-time verification codes, and notifications when a post you submitted is approved or rejected, or when a post is submitted to you for approval. These are not marketing messages.

By creating an account, being added as staff with a phone number, or requesting a verification code, you consent to receive these SMS messages at the number you provided.

Message frequency varies based on your account activity. Message and data rates may apply.

• Reply STOP to any message to stop receiving SMS from Sutriq. Reply HELP for help.
• Opting out of SMS may prevent you from receiving verification codes required to use certain features of the Service.
• Carriers are not liable for delayed or undelivered messages.

We do not sell or share your phone number with third parties for their own marketing purposes.

5.Legal bases

Where the GDPR or a similar law applies, we rely on one or more of the following: performance of a contract (delivering the service you signed up for), our legitimate interests (securing and improving the product), your consent (for optional features and marketing, withdrawable at any time), and compliance with a legal obligation.

6.Sharing and service providers

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We share data with providers that help us run Sutriq — hosting, databases, object storage, email delivery, and AI analysis — and only to the extent each one needs it to power a feature you use. They act on our instructions and are bound to protect it.

When you connect a social network, we exchange data with that platform under its terms and the permissions you granted — for example to publish a post or read page insights.

We may disclose information where the law requires it, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, with notice where notice is required.

7.YouTube API Services and Google user data

Sutriq uses YouTube API Services. By using Sutriq, you agree to be bound by the YouTube Terms of Service. Please also see the Google Privacy Policy.

What we access: when you connect your YouTube channel, Sutriq accesses your channel ID and name, details of your videos, and analytics for your own channel (such as views, watch time, average view duration, subscribers gained and lost, likes and comments).

How we use it: to upload videos you create in Sutriq to your own channel, and to show you your own channel information and analytics.

What we store: an encrypted OAuth token, your channel ID and channel name, and the video ID of videos you publish through Sutriq. YouTube analytics and statistics are fetched live from YouTube each time you view them and are not stored. Stored channel details are refreshed from YouTube at least every 30 days.

Sharing: YouTube data is shown only to members of your Sutriq workspace. We do not sell or share YouTube data, use it for advertising, or use it to train AI models.

How to revoke access: you can revoke Sutriq's access to your data at any time on the Google security settings page. You can also click "Disconnect" next to YouTube on the Connections page in Sutriq.

How to delete your stored data: click Connections > YouTube > Disconnect in Sutriq, or email contact@sutriq.com with the subject "Delete my YouTube data". We revoke the token with Google and delete all stored YouTube data as soon as possible and within 7 calendar days. Deleting your data from Sutriq does not delete your videos or data on YouTube.

Questions or complaints: contact@sutriq.com

Sutriq’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8.Storage, retention, and security

Account, business, and application data live in our databases; media you upload lives in our object storage.

We keep information while your account is active and afterwards only as long as we need it to meet legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account at any time; residual copies may persist in backups for a limited period before they expire.

We protect data with encryption in transit, access controls, and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.How we protect your data (including Google and YouTube user data)

We treat data received from Google APIs, including YouTube OAuth tokens, channel information and analytics, as sensitive data and protect it with the following measures:

• Encryption in transit: all data between your browser, our servers, and Google’s APIs is sent over HTTPS using TLS 1.2 or higher.
• Encryption at rest: OAuth access and refresh tokens are encrypted with AES-256 before they are stored in our database. Encryption keys are stored separately from the database as protected server secrets and are never exposed to the browser.
• Access controls: access to production servers, databases and storage is limited to authorized personnel who need it to run the service, protected with strong passwords and multi-factor authentication. Inside Sutriq, role-based permissions (admin, employee, client) ensure users only see the channels and data of workspaces they belong to.
• Least-privilege scopes: we request only the Google scopes needed for the features you use (uploading your videos and viewing your own channel and analytics data).
• No exposure of tokens: tokens are used only by our backend servers to call Google APIs on your behalf. They are never shared with other users or third parties, or shown in the app.
• Secure infrastructure: our servers and databases are hosted with reputable providers, kept up to date with security patches, and protected by firewalls. Backups are encrypted and kept only for a limited period.
• Monitoring and incident response: we log and monitor access to our systems. If a security incident affects your personal data, we will notify you and the relevant authorities as required by law.
• Data minimization and deletion: we store only the Google data needed to provide the service. When you disconnect YouTube, we revoke the token with Google and delete your stored YouTube data as soon as possible and within 7 calendar days. You can also remove Sutriq’s access at any time at myaccount.google.com/connections.

10.Cookies and similar technologies

We use essential cookies and local storage for authentication and session continuity, and limited analytics to understand product usage. You can control cookies in your browser; blocking essential storage will prevent you from logging in.

11.Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing rests on consent.

• Update your profile details in the app at any time.
• Disconnect a social channel whenever you like — that stops future publishing through Sutriq for that channel. Revoke the app on the platform itself to invalidate the token there too.
• Ask us to delete your account or exercise any other right by emailing contact@sutriq.com. We may need to verify your identity first, and we will respond within the time the applicable law allows.
• Unsubscribe from the waitlist or marketing email using the link in any message we send.

You also have the right to complain to your local data protection authority.

12.Children

Sutriq is a business tool for adults. We do not knowingly collect personal information from anyone under 16, or under the higher age your jurisdiction sets. If you believe a child has given us data, contact us and we will delete it.

13.International transfers

Your information may be processed in countries other than your own, including wherever our hosting providers and subprocessors operate. Where the law requires it, we put appropriate safeguards in place for those transfers.

14.Changes to this policy

We may update this policy from time to time. The revised version will appear on this page with a new “Last updated” date, and we will tell you by email or in the product when a change is material.

15.Contact

Questions about this policy or your data: email contact@sutriq.com with the subject “Privacy request” and we will get back to you.