Privacy Policy

01 Who we are

Sharek is a tool that lets you plan, schedule, publish, and analyse content across multiple social media and content platforms from one place. For the personal data we process about you and your account, Sharek is the data controller. You can reach us about any privacy matter at contact@sharek.app.

Where we process personal data about your audience on your behalf — for example, analytics for content you publish to a connected platform — we act as a processor and you act as the controller. A data-processing addendum is available on request.

02 The data we collect

Account & identity data

Your name, email address, hashed password, profile picture (if you add one), organisation or workspace name, role, and preferences such as language and time zone, together with team invitations and workspace membership.

Connected-platform data

When you connect a social platform, we collect and store, through that platform's official API and with your authorisation:

• encrypted OAuth access and refresh tokens, and the permission scopes you grant;
• your platform username, account identifier, and account-level metadata (such as the pages, channels, or business accounts you manage);
• content you create, schedule, or publish through Sharek; and
• basic analytics and insights for content published through Sharek (such as impressions, reach, and engagement).

Content you upload

Text, images, video, audio, captions, links, hashtags, schedules, prompts, and calendar metadata that you add to the Service.

Usage, logs & device data

IP address, browser and device information, referring pages, approximate location (country or region), and application telemetry such as pages visited, features used, errors, and performance metrics.

Communications & support

Messages you send us, support requests, and survey or feedback responses.

Cookies

We use strictly-necessary cookies and similar technologies to keep you signed in, secure the Service, and remember preferences. See section 12.

03 How we use your data

We use personal data to operate and improve the Service, on the following legal bases under the UK GDPR:

We do not use the content of your scheduled posts, your connected-platform content, or your private messages to send you advertising, and we do not sell that data.

04 Connected-platform data

To provide the Service, Sharek accesses and processes data from the platforms you choose to connect — such as X, Facebook, Instagram, Threads, LinkedIn, TikTok, YouTube, and Pinterest — through their official APIs and with your authorisation. We handle this information in line with the requirements of the platforms we integrate with, including the Meta Platform Terms and Developer Policies, the X Developer Agreement and Policy, the TikTok Developer Terms, the LinkedIn API Terms, the Google API Services User Data Policy, and the YouTube API Services Terms of Service. In particular:

• we use connected-platform data only to provide the features you ask us to perform;
• we do not sell connected-platform data, and we do not use it for advertising or to build advertising profiles;
• we do not share it with third parties except the service providers needed to operate Sharek (see section 6) or where required by law;
• we store access credentials (such as OAuth tokens) in encrypted form and only for as long as the connection is active; and
• we delete connected-platform data when you disconnect the platform, delete your account, or ask us to, unless we must retain it to comply with law.

YouTube API Services

Sharek uses YouTube API Services. Our use of information received from those services complies with the YouTube Terms of Service and the Google Privacy Policy. We use Google user data only to provide the features you request and in accordance with Google's Limited Use requirements. You can revoke Sharek's access to your Google account data at any time at the Google security settings page.

Meta (Facebook, Instagram, Threads)

If you connect a Meta platform, you can request deletion of the data we obtained from Meta by emailing contact@sharek.app, or by removing Sharek from the "Apps and Websites" / "Business Integrations" settings of your Meta account.

05 AI features

Where the Service offers AI-assisted features, your prompts and inputs may be transmitted to third-party AI model providers acting as our sub-processors to generate the requested output. We instruct these providers not to use your inputs or outputs to train their models, except where you opt in or where the provider's default policy requires it. AI output is generated probabilistically and should be reviewed before you publish it.

06 How we share data

We do not sell or rent your personal data. We share it only as needed to run the Service:

• Infrastructure sub-processors that host and operate Sharek under contractual data-protection and security obligations — currently including Hetzner (cloud hosting, in Germany / the EU), Cloudflare (object storage, content delivery, and security), and Resend (transactional email). Where AI features are enabled, AI model providers act as additional sub-processors (see section 5).
• Connected platforms — when you schedule or publish content, that content is transmitted to the platforms you have connected, and we receive analytics you request in return.
• Members of your workspace — content, schedules, and comments are visible to the team members and collaborators you invite, according to their role.
• Authorities and advisors — where required by law (for example, a court order or lawful request) or to investigate fraud, abuse, or security threats, and to our professional advisers under confidentiality.
• Successors — if Sharek is involved in a merger, acquisition, or sale of assets, your data may transfer to the successor, which must honour this Policy or provide notice of a new one.

07 Data retention

We keep personal data only for as long as needed for the purposes described in this Policy:

We may retain certain data for longer where necessary to comply with legal obligations, resolve disputes, or prevent fraud and abuse.

08 Security

We use technical and organisational measures to protect your data, including encryption in transit (TLS), encryption of sensitive data such as OAuth tokens at rest, password hashing, role-based access controls on a least-privilege basis, and access logging. No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.

09 Your rights

Depending on where you live, you may have rights to access the personal data we hold about you and receive a copy, to correct inaccurate data, to request deletion, to restrict or object to certain processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). We do not sell your personal data or share it for cross-context behavioural advertising.

You can exercise many of these rights directly in your account settings, or by emailing contact@sharek.app. We will respond within the time required by law (generally within one month). If you are in the UK or the EEA and believe we have not handled your data properly, you may lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ICO) — though we hope you will contact us first.

10 Disconnecting & deleting your data

You are in control of the accounts you connect and the data we hold:

• Disconnect a platform. Remove any connected platform from your Sharek account settings at any time. This revokes and deletes the access tokens we hold for that platform.
• Revoke from the platform. You can also revoke Sharek's access from the platform's own settings — for example, Facebook/Instagram "Apps and Websites" or "Business Integrations", X "Connected accounts", TikTok "Manage app permissions", or the Google security settings page for YouTube.
• Delete your account and data. To request deletion of your account and associated personal data, email contact@sharek.app. We will action verified requests within a reasonable period, except where we must retain certain information to comply with law.

11 International transfers

We primarily process and store data within the European Union / European Economic Area. Some of our sub-processors may process data in other countries. Where personal data protected by the UK GDPR or EU GDPR is transferred outside the UK or EEA, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — together with technical measures such as encryption. A copy of the relevant safeguards is available on request.

12 Cookies

We use cookies and similar technologies that are strictly necessary to provide the Service — to keep you signed in, secure your session, and remember your preferences. We do not use advertising cookies. You can control cookies through your browser settings, though disabling strictly-necessary cookies may prevent the Service from working.

13 Children

The Service is not directed to, or intended for, children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact contact@sharek.app and we will delete it.

14 Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice — for example, by email or through the Service — and update the date at the top of this page. Please review it periodically.

15 Contact

Questions about this Policy or your data? Contact us at contact@sharek.app.