Privacy Policy — Merlin Social

Privacy & Data

    Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights regarding your information.
  

1. Who We Are

MerlinCloud operates Merlin Social, a social media management platform available at social.melrincloud.cc. For privacy inquiries, contact us at [email protected].

2. Data We Collect

Data Type	What We Collect	Why
Account Data	Name, email address, password (hashed)	Account creation and authentication
Social Media Tokens	OAuth access tokens for connected accounts	Publishing content on your behalf
Content Data	Posts, captions, media files you create	Scheduling and publishing
Usage Data	Login times, features used, IP address	Security and service improvement
Billing Data	Payment method details (processed by third-party)	Subscription management

3. How We Use Your Data

To provide and operate the Merlin Social platform.
To publish content to your connected social media accounts on your behalf.
To send service-related notifications (failed posts, account alerts).
To improve platform performance and fix bugs.
To comply with legal obligations.

    We do not sell your personal data. We do not share your data with advertisers or third parties for marketing purposes.
  

4. Social Media Platform Data

To connect your social accounts, we request OAuth authorization from platforms including Meta (Facebook/Instagram), Twitter/X, LinkedIn, TikTok, Google (YouTube/GBP), Threads, Bluesky, and Telegram. We store access tokens securely to enable publishing on your behalf.

Each platform has its own privacy policy governing data shared with us through their APIs. We recommend reviewing each platform's privacy policy.

5. Data Storage and Security

Your data is stored on secure servers. We implement industry-standard security measures including:

Encrypted storage of OAuth tokens and passwords.
HTTPS encryption for all data in transit.
Access controls limiting who can access your data.
Regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days, except where we are required by law to retain it longer. Published post history may be retained for up to 90 days after deletion.

7. Third-Party Services

We may use the following third-party services that have access to limited data:

Cloudflare — CDN and security (traffic data)
Payment Processors — billing data only
Social Media APIs — as described in Section 4

8. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data.
Correction: Update inaccurate data.
Deletion: Request deletion of your data ("right to be forgotten").
Portability: Receive your data in a portable format.
Objection: Object to certain types of processing.

To exercise these rights, email [email protected].

9. Cookies

We use session cookies for authentication and to keep you logged in. We do not use tracking cookies for advertising purposes. You can disable cookies in your browser settings, though this may affect platform functionality.

10. Children's Privacy

Merlin Social is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately.

11. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act. You may request disclosure of the categories and specific pieces of personal information we have collected. Contact us at [email protected] to exercise these rights.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy questions or requests: [email protected]