Privacy Policy

Effective: 2026-11-11

This policy describes how Social Account Manager (“SAM”) handles data. SAM is operated privately by its owner, an individual, for the owner's own accounts. Contact: privacy@jobersi.com.

1. Who uses SAM

SAM is a private, self-hosted tool. It has no customers and no public sign-up. Only the owner can sign in to it and connect accounts to it.

2. Data SAM accesses

When the owner connects one of the owner's accounts through the platform's official sign-in, SAM reads:

• Account data: the account's, Page's or channel's ID, username or handle, display name, profile picture and follower or subscriber count.
• The account's own posts and videos: IDs, titles, captions or descriptions, links, thumbnails, publish dates, media type, duration, visibility, and public counts such as views, likes and number of comments.
• Analytics: totals the platforms provide to account owners, such as views, reach, interactions, watch time, subscribers gained or lost, and traffic source types.
• Access tokens issued by Google and Meta, used only to call their official APIs for the connected accounts.

SAM does not read comment text, private messages, or lists of the people who follow, like or comment, and it does not read audience demographics. Content prepared in SAM for publishing (text and media files) is stored with the rest of SAM's data.

3. Data about other people

SAM is not built to process data about anyone other than the owner. However, the owner's own posts and videos (their titles, captions, descriptions, images and thumbnails) can name or show other people, and SAM stores copies of that text and those links as part of the post data above. Analytics are totals only and do not identify individual viewers or followers.

When someone visits these public pages, the request passes through Tailscale (see section 7). SAM uses the visitor's network address briefly in memory to limit the rate of requests. SAM sets no cookies on these pages and uses no analytics or tracking.

4. Google user data

With the channel owner's permission, SAM uses only the read-only scopes youtube.readonly and yt-analytics.readonly. It reads the channel data, videos and analytics listed in section 2, only to show them to the owner inside SAM. SAM does not upload, change or delete anything on YouTube. It does not transfer Google user data to others, use it for advertising or sell it. SAM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How data is used

Data is used only to show the owner the connected accounts' status, content and analytics. Publishing to Facebook or Instagram is disabled. If the owner ever enables it, data will also be used to publish posts the owner explicitly approves to the owner's own accounts. SAM does not sell data and does not use it for advertising.

6. Storage and security

• SAM's data is stored on a server the owner controls. The owner may also keep reports exported from SAM on the owner's own devices.
• Access tokens are encrypted at rest (AES-256-GCM).
• The administration interface is protected by a password and is reachable only through the owner's private network.
• Actions are recorded in an audit log.

7. Who else receives data

• Google and Meta, when SAM calls their official APIs for the connected accounts.
• Tailscale carries the network traffic to SAM's public addresses, including these pages and the sign-in return address.
• An engagement-service provider the owner uses receives only the order numbers of the owner's orders there, so that SAM can read their status. It receives no Google user data.

No one else receives data from SAM.

8. Retention

• Data is kept while an account is connected.
• Disconnecting an account deletes its access tokens and cached posts, and SAM asks the platform to revoke its access where the platform offers that.
• The account's record (ID and handle), its analytics history and the audit log remain until the owner explicitly deletes them.
• Application logs can contain account handles, IDs and error messages. They are rotated automatically by size.
• Background job records are deleted automatically within 7 days.
• Backups are stored on the same server and deleted automatically after 14 days. Data deleted from SAM can therefore remain in a backup for up to 14 days.

9. Deletion and your choices

To have data deleted, email privacy@jobersi.com. The owner will disconnect the account and delete its stored data. You can also remove SAM's access at any time:

• Google: myaccount.google.com/permissions
• Facebook / Instagram: Facebook Settings → Business integrations, or Meta Business Suite → Settings → Integrations → Connected apps.

10. Your data-protection rights

Where data-protection law such as the EU General Data Protection Regulation (GDPR) applies, you can ask for access to the personal data about you, its correction or deletion, restriction of its processing, a copy of it in a portable format, or object to its processing, by emailing privacy@jobersi.com. You can also complain to a data-protection supervisory authority, in particular in the EU country where you live or work, or where you think the infringement took place.

11. Changes

Changes to this policy are published at this address with a new effective date.