Privacy Policy

Sohoj Post helps small businesses in Bangladesh manage their Facebook Page and Instagram account: writing and scheduling posts, and answering customer messages and comments. This policy explains what we collect, why, who processes it, and how to delete it. WhatsApp and TikTok are coming soon; this policy will cover them before they are switched on for customers.

What we collect

• Your account: name, email address, password (stored by our login provider, never readable by us), and language.
• Your business details that you enter: business name, category, website, phone, address and description, and product information read from the website you add and from your own Page posts, so replies can use correct prices and stock.
• Accounts you connect: Facebook Page and Instagram professional account names, IDs and pictures, and their access tokens. Access tokens are stored encrypted.
• Content: posts, captions, reel videos and images you create, upload or schedule.
• Your customers' messages and comments sent to your connected accounts: their public name and ID on that platform, the text, and photos they send (for example about a complaint). For complaints, also the details a customer gives, such as product, order number, phone and address.
• How to address a customer: the app may guess from a customer's name or words whether to say "apu" or "bhaiya". You can change or turn this off for each chat.
• Payments: plan, period, amount, payment method (bKash, Rocket or CellFin), the number you paid from and the transaction ID (TrxID). We never see your PIN or wallet password.
• Team: email addresses of people you invite.
• Usage and technical data: records of automatic replies and AI writing (to count your monthly allowance), and server logs such as error messages.

How we use it

• To publish the posts and videos you approve, at the time you choose.
• To show you comments and messages, flag scam links, collect complaint details, and send the replies you or your settings allow.
• To let the AI assistant draft posts, captions and replies.
• To check payments and switch on your plan, and to count your monthly allowance.
• To keep the service secure and fix problems.

We do not sell your data or your customers' data, and we do not use it for advertising.

AI processing

When the AI writes a post or a reply, the needed text (for example the customer's recent messages and your business details) is sent to an AI model through OpenRouter. Our main model is Anthropic's Claude; if it is unavailable, other model providers available through OpenRouter may be used as a backup. The text is sent only to produce the answer.

Who processes your data

• Supabase: database, login and file storage (data centre in Singapore).
• Hostinger: our web server.
• OpenRouter and the AI model providers it connects to (see above).
• Meta (Facebook, Instagram): we use only their official APIs, to post and reply when you ask us to.
• Payment services (bKash, Rocket, CellFin) for the payments you make.
• Email delivery service, only if email notifications are switched on.

Cookies

We use only the cookies needed for the site to work: your login session, your language choice, your selected workspace, and a short-lived security check while connecting Facebook. We do not use advertising or tracking cookies.

Keeping and deleting data

• Your data is kept while your account and workspace exist, including after a plan ends, so you can continue later.
• Disconnecting an account in Sohoj Post deletes its stored access token.
• To delete your account and all workspace data, follow the steps on the Data deletion page.

Your choices

You can see and change your business details in Settings, turn automatic replies on or off, disconnect accounts, and ask us for a copy of your data, a correction, or deletion by emailing kausarcontact@gmail.com.

Security

The site uses HTTPS, access tokens are encrypted, each business's data is separated from every other business, and only owners and admins can connect accounts or change important settings. No system is perfectly secure; if we learn of a problem that affects your data, we will tell you.

Children

Sohoj Post is a tool for businesses and is not meant for children.

Changes

If we change this policy, we update the date at the top. Important changes will also be announced on this page.

Contact

Questions about privacy: kausarcontact@gmail.com or the Contact page.