Ailopex Social Privacy Policy

Who we are

Ailopex Social (studio.ailopex.com) is a social media management application operated by AILOPEX MARKETING MANAGEMENT L.L.C S.O.C, a limited liability company (single owner) in Dubai, United Arab Emirates, holding Commercial License No. 1231783, issued by the Dubai Department of Economy and Tourism (DET), with its registered address at Office 1-46, Bin Dasmal Building, Al Quoz Industrial Area 1, Dubai, United Arab Emirates ("Ailopex", "we", "us"). This policy explains what the application does with personal data. The website ailopex.com has its own privacy policy.

Who is responsible

Each company using Ailopex Social has its own private workspace. For the content and the social media accounts of a workspace, the company that owns the workspace decides how they are used (it is the controller) and Ailopex processes the data on its behalf (processor). For the accounts of the people who sign in to Ailopex Social, Ailopex is the controller. We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable laws.

What data we process

Only what the service needs:

• users of the application: name, work email, role in the workspace, sign-in and two-step verification data, and a log of the actions they take (for example who approved a post);
• content created in the application: post texts, their versions and the corrections made by the team, images, videos and logos uploaded by the workspace, topics and calendars;
• connected social media accounts: the account name and identifier and the access tokens granted by the platform through its official sign-in (we never ask for or store social media passwords);
• comments and private messages received on connected accounts, only where the platform's official access allows it: the author's public display name, the text and the date;
• statistics provided by the platforms about the workspace's own posts (for example reach, likes, comments, shares, clicks).

We do not collect followers' lists, we do not build profiles of the people who comment or write, we do not use the data for advertising, and we never sell personal data.

Data from social media platforms

Ailopex Social connects to Instagram, Facebook, Threads, LinkedIn, TikTok, X, YouTube, Pinterest, Google Business Profile and Telegram only through their official programming interfaces, after a workspace owner signs in on the platform and grants access. We use the data received only to provide the features the workspace asked for: publishing its approved posts, showing its comments and messages so its team can answer them, and showing its statistics. Nothing is published, and no reply is sent, without the approval of a person of the workspace.

• Ailopex Social's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Data received from Meta, LinkedIn, TikTok, X and Pinterest is used in accordance with their developer terms and policies, and is not shared with data brokers or used to train general AI models.

Artificial intelligence

When a workspace chooses it, texts are written or rewritten with the help of an AI model (Claude, provided by Anthropic) acting as our service provider. We send it only what is needed for the request (the workspace's brand description, the brief, the text to rewrite, the comment to answer, and examples chosen by the workspace). Under its commercial terms, the provider does not use this data to train its models. A person always reviews the result before anything is published.

Where the data is kept and who can access it

Data is stored with our hosting providers (Supabase for the database and files, Cloudflare for the application), which may process data outside the United Arab Emirates, including in India and the European Union, with appropriate safeguards under the PDPL. Inside the application, each workspace is strictly separated: only the members of a workspace can see its data, according to their role. When a workspace connects the application to its own CRM, the data it chooses to send there is sent to that CRM under its responsibility.

How long we keep it

We keep workspace data while the workspace uses the service. Access tokens are deleted when an account is disconnected. Comments, messages and statistics of a disconnected account are deleted with it. When a company stops using Ailopex Social, its workspace data is deleted within 30 days, except what the law requires us to keep.

How we protect it

Access is restricted by role, two-step verification is mandatory for workspace owners, data is encrypted in transit, access tokens are only usable by our servers, and every important action is logged.

Your rights and how to delete data

Under the PDPL you can ask to access, correct, delete or receive your data, restrict or object to its processing, and withdraw your consent. How to ask for deletion is explained on our data deletion page (studio.ailopex.com data can also be deleted directly by a workspace owner). If you believe your data has not been handled properly, you can file a complaint with the UAE Data Office.

Changes to this policy

We may update this policy. The latest version is always on this page, with its date at the top.