Privacy Policy for DevSnit Social
Last updated: July 20, 2026
This Privacy Policy explains how DevSnit Ignited S.R.L. collects, uses, stores, shares, and protects personal data when you use DevSnit Social.
1. Data controller
The data controller is DevSnit Ignited S.R.L., CUI 38727368, Trade Register no. J2018000069178, VAT payer, registered office at Strada Blaj, Nr. 3, Bloc H, Sc. 1, Et. 2, Ap. 11, Galati, Judet Galati, Romania.
Fiscal address registered with ANAF: Strada Blaj, Nr. 3, Bloc F6, Sc. 3, Et. 3, Ap. 55, Galati, Judet Galati, Romania.
Contact for privacy matters: contact@devsnit.com.
2. About DevSnit Social
DevSnit Social is a private, self-hosted social media management and scheduling platform used by authorized users to connect social media accounts, prepare content, upload media, schedule posts, publish content, and manage related social media workflows.
The service may connect to third-party platforms such as TikTok, Facebook, Instagram, YouTube, Pinterest, LinkedIn, X/Twitter, Bluesky, Mastodon, and other supported services, depending on each user's configuration and the permissions granted through each platform.
3. Categories of personal data we process
Depending on how the service is used, we may process account data, technical data, content data, social account data received through authorized platform APIs, communication data, and billing or contractual references where the service is provided as part of a client relationship.
4. Sources of data
We receive data directly from users, from account administrators, from connected third-party social platforms through official APIs after authorization, and from technical systems used to operate and secure the platform.
5. Purposes of processing
We process personal data to create and manage accounts, authenticate users, secure access, connect authorized social accounts, upload, schedule, publish, update, or manage content requested by users, display connected account information, provide support, troubleshoot errors, prevent abuse, comply with legal obligations, and improve the service.
6. Legal bases under GDPR
Where GDPR applies, we rely on contract performance, legitimate interests, consent, and compliance with legal obligations, depending on the processing activity.
7. Third-party platform data and API use
DevSnit Social uses data from connected social media platforms only to provide the features requested by the authorized user. This may include identifying the connected account, displaying the account inside the dashboard, uploading media, scheduling posts, publishing posts, reading post status, and showing profile or analytics information where available and authorized.
For TikTok, DevSnit Social may use TikTok Login Kit and TikTok Content Posting API to identify the authorized account, upload approved videos, schedule content, and publish approved content to the authorized TikTok profile, depending on the permissions granted and features enabled.
For Meta platforms, Google/YouTube, Pinterest, LinkedIn, X/Twitter, Bluesky, Mastodon, and other supported platforms, DevSnit Social uses the permissions granted by the user through each platform's official authorization flow and only for the social media management features requested by the user.
8. No sale of personal data
We do not sell personal data or social platform data. We do not use data received from social platforms for unrelated advertising, profiling, resale, or unauthorized purposes.
9. Sharing and processors
We may share data only when necessary with hosting providers, infrastructure providers, email providers, analytics or logging tools, security providers, professional advisers, public authorities where legally required, or third-party platforms connected by the user.
10. International transfers
Some providers or connected platforms may process data outside Romania or the European Economic Area. Where required, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, contractual protections, or the user's direct relationship with the connected third-party platform.
11. Retention
We keep personal data only for as long as necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.
12. User control and revocation
Users can disconnect social accounts inside DevSnit Social where available. Users can also revoke access directly from the settings of the relevant social media platform.
13. Data subject rights
Where applicable, you may have the right to access, rectify, erase, restrict, object to processing, request portability, and withdraw consent. You may exercise these rights by contacting contact@devsnit.com.
14. Security
We use reasonable technical and organizational measures to protect personal data, including access controls, authentication, encryption in transit where applicable, logging, backups, and operational security practices.
15. Children's data
DevSnit Social is not intended for children. Users must be at least 18 years old or have the legal capacity required in their jurisdiction to use the service.
16. Changes to this policy
We may update this Privacy Policy when the service, legal requirements, or third-party platform requirements change.
17. Contact
For any privacy question or request, contact DevSnit Ignited S.R.L. at contact@devsnit.com.