Privacy Policy

Information We Collect

We collect the following categories of personal data:

• Account information: name and email address when you register
• Contact form data: name, email, and message content
• Usage data: pages visited, session duration, and feature usage collected via analytics tools
• Social account identifiers: Page IDs, User IDs, connected account usernames, and profile information from Facebook, Instagram, TikTok, and X (Twitter)
• OAuth access tokens from connected social media platforms (Facebook, Instagram, TikTok, X)
• Post performance metrics: likes, comments, shares, reach, and impressions from your connected accounts

Meta (Facebook & Instagram) Integration

PC Social Media connects to your Facebook Pages and Instagram Business accounts via the Meta Graph API. When you authorize this connection, we access the following on your behalf:

• Facebook Page access tokens required to publish content on your behalf
• Page posts and post metadata (IDs, timestamps, content)
• Engagement metrics: likes, comments, shares, and reach on your pages
• Instagram Business account identifiers and basic profile information

We use this data solely to publish content you have scheduled and to display analytics within the PC Social Media dashboard. We do not sell, share, or disclose Meta user data to any third party. For information about how Meta handles your data, see Meta's Data Policy: https://www.facebook.com/policy

How We Use Your Information

We use your information only for the following purposes. We do not sell your personal data to any third party.

• Publish scheduled content to your connected social media accounts on your behalf
• Display post performance analytics in your dashboard
• Respond to inquiries and provide customer support
• Improve and maintain our products and services
• Send service-related communications such as account alerts and security notices

How We Store & Protect Your Data

We take the security of your data seriously, particularly your social media access tokens:

• All OAuth access tokens are encrypted at rest using AES-128 (Fernet) encryption
• Tokens are stored in an encrypted database — never in plain text
• Tokens are decrypted only in-memory during API operations and are not persisted in decrypted form
• No access tokens or credentials are transmitted to any third party
• Access to stored credentials is restricted to authorized system processes only

Data Retention

We retain your personal data for the following periods:

• OAuth access tokens: retained until you revoke access or delete your account; upon revocation, tokens are deleted within 24 hours
• Post and analytics logs: retained for 12 months
• Contact form submissions: retained for 6 months
• Account data: retained for the duration of your account; deleted within 30 days of account deletion

You may request deletion of your data at any time by contacting us.

Third-Party Services

Our products integrate with third-party platforms including Facebook, Instagram (Meta), TikTok, Shopee, Lazada, X (Twitter), and other platforms. When you connect these accounts, their respective privacy policies also apply. We access only the permissions you explicitly grant during the OAuth authorization process.

Cookies & Analytics

This website uses the following cookies and analytics:

• Session cookies: maintain your login state during a browsing session; deleted when the browser is closed
• Persistent cookies: store your theme preference (light/dark mode) and language selection; expire after 12 months
• Vercel Analytics: collects anonymized page view and performance data — no personally identifiable information is collected
• No advertising or cross-site tracking cookies are used

To opt out of Vercel Analytics, you may enable Do Not Track in your browser or use a browser extension that blocks analytics scripts.

Your Rights

You have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: request that inaccurate or incomplete data be corrected
• Right to deletion: request deletion of your personal data; we will comply within 30 days
• Right to revoke social media access: disconnect any connected account at any time via the PC Social Media dashboard or directly through the platform's settings (e.g., Facebook Settings > Apps and Websites)
• Right to data portability: request an export of your data in a machine-readable format

To exercise any of these rights, contact us at PC.Infinite.Soft@gmail.com or use the account settings in your dashboard. We will respond within 30 days.

PDPA Compliance (Thailand)

PC Infinite Soft Co., Ltd. processes personal data in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Our legal bases for processing your data are:

• Consent: for collecting and processing your social media account data and OAuth tokens — you provide explicit consent during the account connection flow
• Contractual necessity: for processing data required to deliver the services you have requested
• Legitimate interest: for analytics and service improvement, balanced against your privacy rights

Under the PDPA, you have the right to withdraw consent at any time, object to processing, and lodge a complaint with the Personal Data Protection Committee (PDPC). To exercise your rights under the PDPA, contact us at PC.Infinite.Soft@gmail.com.

Contact & Data Controller

For privacy-related questions or to exercise your data rights, contact us:

• Company: PC Infinite Soft Co., Ltd.
• Address: 39/588 Thararam Village, Sukaphiban 5 Rd., Soi 82, Sam Wa Tawantok, Khlong Sam Wa, Bangkok 10510, Thailand
• Email: PC.Infinite.Soft@gmail.com
• Website: pcinfinitesoft.com