This policy explains what personal data Samero LLC collects when you use SolMarrow, how we use it, who we share it with, and the rights you have. We collect only what we need to run the service, and we do not sell your personal data.
1. Who is responsible
Samero LLC operates SolMarrow and is the controller of the personal data described here. Contact us at [email protected].
2. Data we collect
Data you give us
- Account details: name, email address and password (stored only as a secure hash).
- Workspace details: workspace names, teammates you invite and their email addresses.
- Your content: posts, drafts, schedules, comments on review links, and images and videos you upload.
- Support messages you send us.
Data from social networks you connect
- Access tokens issued by each network when you connect an account. We store them encrypted and use them only to act on your instructions.
- Basic profile information of the connected account, such as its name, handle and profile picture.
- Information about the posts you publish through SolMarrow, such as their links and performance numbers (likes, comments, shares, views) where the network provides them.
Data collected automatically
- Technical data: IP address, browser type, device type and logs of requests, used for security and to fix errors.
- Product usage: which features are used, measured without cookies.
Payment data
Payments are processed by Paddle, our merchant of record. We do not receive or store your full card number. Paddle shares with us the information needed to manage your subscription, such as your plan, billing country and payment status.
3. How we use your data
| Purpose | Legal basis (EU and UK) |
|---|---|
| Create and run your account, schedule and publish your posts, show analytics | Performance of our contract with you |
| Process payments and keep billing records | Contract; legal obligation |
| Keep SolMarrow secure, prevent abuse and enforce fair use | Legitimate interests |
| Fix errors and improve features | Legitimate interests |
| Send service emails (verification, password resets, failed posts, billing) | Contract |
| Send product news | Consent, which you can withdraw at any time |
We do not use your content or your connected accounts' data for advertising, and we do not sell it.
4. Who we share data with
We share personal data only with the following, and only as needed:
- Social networks you connect, when you publish or when we fetch your posts' analytics. Their own privacy policies apply to data they hold.
- AI assistants and tools you connect through our MCP server or API, which receive the data they request on your behalf within the access you approve.
- Service providers that process data for us under contract: Supabase (database and authentication), Contabo (servers and file storage), Cloudflare (DNS, network security), Paddle (payments), Resend (service emails), Sentry (error monitoring) and PostHog (product analytics).
- Authorities, when the law requires it, or to protect the rights and safety of users or the public.
- A buyer or successor, if Samero LLC or SolMarrow is sold or merged, under this policy.
5. Google and YouTube data
When you connect a YouTube account, SolMarrow uses YouTube API Services. SolMarrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy. You can revoke SolMarrow's access at any time from your Google account permissions page.
6. International transfers
Our providers may process data in countries other than yours, including the United States and the European Union. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.
7. How long we keep data
- Account data and content: while your account is open.
- After you delete your account: removed from our live systems right away and from backups within 30 days.
- Access tokens: deleted as soon as you disconnect the account or delete your SolMarrow account.
- Billing records: kept as long as tax and accounting law requires.
- Security logs: up to 90 days.
8. Security
We use encryption in transit (HTTPS) and encrypt access tokens at rest. Access to production systems is limited to people who need it to run SolMarrow. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. You can delete your account and data yourself (see data deletion) or email [email protected]. We answer within 30 days. You can also complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
10. Cookies
We use only the cookies needed to run SolMarrow. Details are in our cookie policy.
11. Children
SolMarrow is not meant for anyone under 16, and we do not knowingly collect their data.
12. Changes
If we change this policy in a significant way, we will email you or show a notice in SolMarrow at least 30 days before the change applies.