Privacy Policy

Social Assist is a social media management application. It lets you connect the social accounts you already own, create and schedule posts, read conversations where the network permits it, and see how your content performed.

Social Assist is a product of Assistora. Assistora is the business name operated by DPL Tech Pty Ltd, an Australian company based in Brisbane, Queensland. In this policy, “we”, “us” and “our” mean DPL Tech Pty Ltd, the company responsible for Social Assist and for the personal information described here. You can write to us at 16 McDougall Street, Milton QLD 4064, Australia, or email social@assistora.au.

This policy explains what information we handle, why, and the choices you have. We aim to handle personal information consistently with applicable Australian privacy requirements, including the Australian Privacy Principles under the Privacy Act 1988 (Cth) where they apply to us.

We only collect what the product needs to work:

• Account and contact details — your name, email address and the sign-in details you create or the identity provider you choose.
• Workspace details — workspace names, team members you invite, roles, and the business details you choose to enter so content can be tailored.
• Connected social accounts — when you authorise a network we receive an access token plus basic account details the network returns, such as page or channel name, username, profile picture and account identifiers.
• Content you create — captions, prompts, uploaded images and video, generated drafts, scheduling times and publishing results.
• Messages and comments — where a network allows it and you have authorised it, we retrieve comments, messages, mentions or reviews so you can read and reply in the inbox.
• Performance figures — the metrics a network makes available for your own accounts and posts.
• Support enquiries — the subject, message, name and email you send us through the contact page or the in-app Help & Support centre.
• Subscription and payment records — your plan, credit purchases and invoice metadata. Card details are entered on and handled by Stripe; we never receive or store your full card number.
• Technical and security logs — sign-in events, device and browser information, error reports and audit records used to keep accounts secure.
• Content assistance data — where you use the optional content-generation helper, the prompt you submit and the output returned are processed to give you the result.
• Bring-your-own key configuration — if you supply your own Google Gemini API key, it is stored encrypted and is never displayed back to you or to us in full.

• To create your account, sign you in and keep it secure.
• To connect the social accounts you choose and show them in your workspace.
• To publish or schedule content — only when you ask us to.
• To retrieve messages, comments and performance figures where the network permits it and you have authorised it.
• To answer your support enquiries.
• To manage plans, credits, invoices and payments.
• To detect, investigate and prevent abuse, fraud and security incidents.
• To fix faults and improve how the product works.

We do not sell your personal information, and we do not use the data from your connected social accounts for advertising.

Connecting an account happens on the network's own sign-in screen. We never ask for your social passwords. The access token we receive is stored encrypted and used only to provide the functionality you authorised — reading your account details, showing your content, publishing what you create or schedule, and retrieving messages and figures where supported.

You can disconnect a network at any time in Accounts, which removes the stored access for that account. You can also revoke access from the network's own settings. See Delete your data for the full process.

Content assistance is optional. When you use it, the prompt and any content you include are sent to the model provider that processes the request so a draft can be returned.

If you choose the bring-your-own-key mode and enter your own Google Gemini API key, your requests are sent directly to Google using your key, under your own relationship with Google. Your key is stored encrypted, is never shown in full again, and can be removed at any time from Settings.

• Social networks you connect — they receive the content and actions you direct through Social Assist, and their own privacy terms apply to what they do with it.
• Service providers that run the product on our behalf — hosting, database and file storage, email delivery, payment processing by Stripe, and the model provider used for content assistance. They may only process the information to provide those services to us.
• Where required by law — for example in response to a lawful request, or to protect people's safety or our legal rights.

Some of these providers may process or store information outside Australia. We do not list specific countries here because the exact processing locations depend on our providers' infrastructure; if you need that detail for a compliance review, contact us and we will confirm what we can.

Information is transmitted over encrypted connections and stored on managed cloud infrastructure. Access tokens and your own API keys are encrypted before they are stored. Access to production systems is limited to people who need it, and administrator actions are recorded in an audit log. No online service can promise perfect security, so we also encourage you to use a strong, unique password.

We keep your information for as long as your account is active and you keep using Social Assist. When you disconnect a network we remove the stored access for that account and the account data cached from it. When your account is deleted we remove your profile, workspaces, content, connected-account records and stored tokens.

We do not publish fixed retention periods for every record type. Some information — such as billing and tax records, and limited security or audit logs — is retained for as long as we are required to keep it or need it to resolve disputes.

You can view and update most of your information directly in the app. You may also ask us to give you access to the personal information we hold about you, correct it if it is wrong, or delete it.

Email social@assistora.au from the address on your account, or follow the steps on Delete your data. We may need to verify your identity before we act on a request.

We use cookies and browser storage for the things the app needs to function: keeping you signed in, remembering your active workspace, and holding drafts you are working on so they are not lost if you close a tab. We do not use advertising or cross-site tracking cookies. Clearing your browser storage will sign you out and discard unsaved drafts.

If you have a privacy question or you believe we have mishandled your information, email social@assistora.au with “Privacy” in the subject. We will acknowledge your complaint, investigate it and let you know the outcome. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

You can also write to us:

We may update this policy as the product changes. The date at the top always shows the current version, and we will tell you in the app or by email if a change materially affects you.