Privacy policy
CeriseSocial helps businesses publish and manage posts on social media. We only use your data to provide that service. We do not sell personal data and we do not use it for advertising. You can disconnect your accounts or ask us to delete your data at any time.
Who we are
CeriseSocial is a service operated by Afribrainy Investment Co Ltd, a company registered in Tanzania, with its office in Dar es Salaam (“CeriseSocial”, “we”, “us”). We are responsible for the personal data described in this policy. For any privacy question or request, contact us at [email protected].
Data we collect
Data you give us
- Account details: your name, email address and password. Passwords are stored only as a secure one-way hash; we cannot read them.
- Business details: the names of your organization and workspaces, timezone, and the team members you invite and their roles.
- Content: the posts, captions, photos, videos and schedules you create in CeriseSocial, and the status labels you assign, such as “Sold”.
- Messages to us: anything you send when you contact support.
Data from connected platforms
When you connect a Facebook Page or Instagram professional account, Meta sends us, with your permission:
- the account or page ID, name, username and profile picture;
- an access token that allows CeriseSocial to publish on your behalf, and the list of permissions you granted;
- the IDs, links and status of posts we publish for you, and, where available, basic engagement figures for those posts.
We do not request access to your personal Facebook profile, your friends list or your private messages.
Data collected automatically
- Technical data: IP address, browser type, device type and the times you use the service, kept in security and error logs.
- Cookies: we use only cookies that are needed for the service to work: a session cookie that keeps you signed in and a security cookie that protects forms against forgery. We do not use advertising or tracking cookies.
How we use data
We use personal data to:
- create and run your account and workspaces;
- publish, update and delete posts on the platforms you connect, but only when you or your team instruct us to;
- show you the status of each post on each platform, and notify you when something needs attention;
- keep the service secure, prevent misuse and fix problems;
- reply to your questions and send essential service messages, such as security alerts and changes to these terms.
We process data because it is necessary to provide the service you signed up for, because you have given consent (for example, when you connect a social account), to meet legal obligations, or for our legitimate interest in keeping the service secure and working well.
Data from Meta platforms
Data received from Facebook and Instagram is used only to provide the features you ask for in CeriseSocial. In particular, we:
- do not sell, license or share this data with data brokers or advertisers;
- do not use it to build profiles of people or for advertising;
- keep access tokens encrypted and never display them in the app or include them in logs;
- delete access tokens immediately when you disconnect an account, and delete the related data as described in our data deletion instructions.
Our use of this data also follows Meta’s Platform Terms and Developer Policies.
Who we share data with
We share personal data only with:
- The platforms you connect, such as Facebook and Instagram, to publish the content you schedule. Their own privacy policies apply to what is posted there.
- Service providers that help us run CeriseSocial, under contracts that require them to protect the data and use it only on our instructions: hosting and storage (Hetzner Online), network security and content delivery (Cloudflare), and email (Zoho).
- Authorities, when the law requires it, or to protect the rights and safety of our users and the public.
- A new owner, if CeriseSocial or Afribrainy Investment Co Ltd is sold or merged. We would tell you before your data becomes subject to a different privacy policy.
Members of your workspace can see the content and connected accounts in that workspace, according to the role you give them.
Where data is stored
CeriseSocial’s servers are located in the European Union. This means your data is transferred outside Tanzania. We protect it with the safeguards described in this policy, and our providers apply security standards required by European data protection law.
How long we keep data
| Data | How long |
|---|---|
| Account, workspace and content data | While your account is active |
| Access tokens for a connected account | Deleted immediately when you disconnect the account |
| All data after you delete your account | Deleted within 30 days of your request |
| Backups | Overwritten within a further 30 days |
| Security and error logs | Up to 90 days |
| Records we must keep by law, such as invoices | As long as the law requires |
How we protect data
- All connections to CeriseSocial use encryption (HTTPS).
- Access tokens for social accounts are encrypted in our database.
- Each business’s data is kept separate, and our systems check permissions on every request.
- Only authorized staff can access production systems, and only when needed to run or support the service.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as the law requires.
Your rights
Under the Personal Data Protection Act, 2022 of Tanzania, and other laws that may apply to you, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data;
- stop or limit how we use your data, or withdraw a consent you gave;
- give you your data in a format you can take to another service.
Email [email protected] from the address linked to your account. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission of Tanzania.
Children
CeriseSocial is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If the change is significant, we will also notify account owners by email before it takes effect.
Contact
Afribrainy Investment Co Ltd
Dar es Salaam, Tanzania
[email protected]