This policy explains what personal data Samero LLC collects when you use SolMarrow, how we use it, who we share it with, and the rights you have. We collect only what we need to run the service, and we do not sell your personal data.
1. Who is responsible
Samero LLC operates SolMarrow and is the controller of the personal data described here. Contact us at support@solmarrow.com.
2. Data we collect
Data you give us
- Account details: name, email address and password (stored only as a secure hash).
- If you sign in with Google: the name, email address and profile picture Google shares with us.
- Workspace details: workspace names, teammates you invite and their email addresses.
- Your content: posts, drafts, schedules, comments on review links, and images and videos you upload.
- Support messages you send us.
Data from social networks you connect
- Access tokens issued by each network when you connect an account. We store them encrypted and use them only to act on your instructions.
- Basic profile information of the connected account, such as its name, handle and profile picture.
- Information about the posts you publish through SolMarrow, such as their links and performance numbers (likes, comments, shares, views) where the network provides them.
- Comments on your published posts and direct messages sent to your connected accounts, on the networks where SolMarrow's inbox and comments support them: the sender's name, handle, profile picture and message, so you can read and reply in SolMarrow. These people are not SolMarrow users; we use their data only to show you the conversation and send your replies.
Data collected automatically
- Technical data: IP address, browser type, device type and logs of requests, used for security and to fix errors.
- Product usage: which features are used, measured without cookies.
Payment data
Payments are processed by Creem, our merchant of record. We do not receive or store your full card number. Creem shares with us the information needed to manage your subscription, such as your plan, billing country and payment status.
3. How we use your data
| Purpose | Legal basis (EU and UK) |
|---|---|
| Create and run your account, schedule and publish your posts, show analytics | Performance of our contract with you |
| Process payments and keep billing records | Contract; legal obligation |
| Keep SolMarrow secure, prevent abuse and enforce fair use | Legitimate interests |
| Fix errors and improve features | Legitimate interests |
| Send service emails (verification, password resets, failed posts, billing) | Contract |
| Send product news | Consent, which you can withdraw at any time |
We do not use your content or your connected accounts' data for advertising, and we do not sell it.
4. Who we share data with
We share personal data only with the following, and only as needed:
- Social networks you connect, when you publish or when we fetch your posts' analytics. Their own privacy policies apply to data they hold.
- AI assistants and tools you connect through our MCP server or API, which receive the data they request on your behalf within the access you approve.
- Service providers that process data for us under contract: Supabase (database, authentication and encrypted backups), Contabo (servers and file storage), Cloudflare (DNS, network security), Creem (payments), AgentiSend and Resend (service emails), Hostinger (support mailbox) and Google (sign-in, if you choose Sign in with Google).
- Authorities, when the law requires it, or to protect the rights and safety of users or the public.
- A buyer or successor, if Samero LLC or SolMarrow is sold or merged, under this policy.
5. Google, YouTube, Google Drive, Google Sheets and Notion data
SolMarrow's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you turn on and that are described below. We don't sell it, don't use it for advertising, don't use it to train AI or machine-learning models, and people at SolMarrow don't read it unless you ask us to for support, it is needed for security, or the law requires it.
SolMarrow for Google Sheets (add-on). The add-on only opens the spreadsheet you are using it in (the spreadsheets.currentonly permission). It reads the rows you select (date, text, image link and accounts) and sends them to your SolMarrow workspace only when you click Schedule rows or Save as drafts; it writes the status and post ID back into those rows. It shows its panel inside Google Sheets (script.container.ui) and talks only to app.solmarrow.com (script.external_request). Your SolMarrow sign-in is kept in your own Google user properties until you sign out or remove the add-on. We don't read other spreadsheets or other Google data, and the posts created from your rows are kept and deleted like any other post in your workspace.
When you choose Add from Google Drive, Google asks you to allow SolMarrow to open only the files you pick (the drive.file permission). SolMarrow copies those images or videos into your workspace's media library so you can add them to posts, the same as an upload. We can't see, list or change any other file in your Drive, we don't keep the Google access token after the copy, and the copies are deleted with your media library or your account.
When you connect a YouTube account, SolMarrow uses YouTube API Services. SolMarrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy. You can revoke SolMarrow's access at any time from your Google account permissions page.
When you connect Notion, Notion asks which pages SolMarrow may read. SolMarrow only reads those pages, and only when you pick one in Create post: its text fills the post and its images are copied into your media library. We never change or create anything in Notion. The Notion access is stored encrypted until you disconnect it in Settings → Apps (or remove SolMarrow in Notion's Settings → Connections).
Canva, Figma, Adobe Express, Trello and the browser extensions send SolMarrow only what you choose to share from them (a design, a frame, a card or the page you are on), using your SolMarrow sign-in. They don't give us access to the rest of your account in those apps.
6. International transfers
Our providers may process data in countries other than yours, including the United States and the European Union. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.
7. How long we keep data
- Account data and content: while your account is open.
- Images and videos you upload: deleted automatically after the posts that use them are published; uploads that are never used are deleted after 30 days.
- After you delete your account: removed from our live systems right away and from backups within 30 days.
- Access tokens: deleted as soon as you disconnect the account or delete your SolMarrow account.
- Inbox messages and comments: deleted when you disconnect that account or delete your SolMarrow account.
- Billing records: kept as long as tax and accounting law requires.
- Server logs: up to 90 days. Admin and team activity logs: 12 months. Email delivery records: 180 days.
8. Security
We use encryption in transit (HTTPS) and encrypt access tokens at rest. Access to production systems is limited to people who need it to run SolMarrow. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to withdraw consent. You can delete your account and data yourself (see data deletion) or email support@solmarrow.com. We answer within 30 days. You can also complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
10. Cookies
We use only the cookies needed to run SolMarrow. Details are in our cookie policy.
11. Children
SolMarrow is not meant for anyone under 16, and we do not knowingly collect their data.
12. Changes
If we change this policy in a significant way, we will email you or show a notice in SolMarrow at least 30 days before the change applies.