SOFTUS – Multi-Platform Advertising and Marketing Tool
Effective Date: August 31, 2025. Last Updated: June 15, 2026.
Template notice: Replace everything in with your own details. This is a general-purpose template and not legal advice. Have a qualified lawyer review it before publishing, especially for GDPR, UK GDPR, CCPA/CPRA, and the rules of each ad platform you connect to.
Introduction
Welcome to SOFTUS to our members. SOFTUS is a marketing platform that helps businesses, agencies, and creators create, schedule, publish, and manage advertisements and promotional content across multiple third-party platforms, including Facebook, Instagram, TikTok, Threads, and other social and advertising networks (together, the "Connected Platforms").
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and what choices and rights you have. It applies to our website and our web application, our mobile apps, our APIs, and any related services (together, the "Services").
By creating an account or using the Services, you confirm that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.
Who is responsible for your data?
Company Legal Name: Softus Service LTD, Registered Address: 111 Rd 9, Block-C, Banani 1213, Dhaka. Email: softussupport@gmail.com
For most information described in this policy, we act as the data controller. When you upload information about your own customers, leads, or audiences (for example, custom audience lists), you are the controller and we act as your data processor. In that case our Data Processing Agreement also applies.
Summary of Key Points
• We collect account details, billing information, ad content, and analytics so we can run the Services.
• When you connect a Facebook, Instagram, TikTok, Threads, or other account, we receive access tokens that let us publish and manage content on your behalf. We only use them for the actions you request.
• We do not sell your personal information.
• We never post, spend ad budget, or change campaigns on a Connected Platform without your instruction or an approved schedule or rule you have set up.
• You can disconnect any platform and delete your account at any time.
• You may have rights to access, correct, delete, or export your data, depending on where you live.
Information We Collect
1 Information you give us directly
• Account information: name, email address, password (stored in hashed form), phone number, job title, company name, and profile photo.
• Workspace and team information: names and email addresses of team members or clients you invite, along with their roles and permissions.
• Billing information: billing name and address, tax or VAT number, and payment details. Card numbers are handled by our payment processor, [Stripe/PayPal/other], and we do not store full card numbers.
• Ad and campaign content: text, images, videos, audio, links, captions, hashtags, product catalogs, landing page URLs, targeting choices, budgets, schedules, and any other material you create or upload to build and publish ads.
• Audience data you upload: lists of emails, phone numbers, or other identifiers that you choose to upload to create custom or lookalike audiences. You are responsible for having the right to upload this data.
• Communications: messages you send to our support team, survey responses, feedback, and information you provide when you join a webinar or beta program.
2 Information from Connected Platforms
When you connect an account from a Connected Platform, we receive information through that platform's official API, based on the permissions you approve. Depending on the platform, this may include:
• Account identifiers: user ID, page ID, business account ID, ad account ID, Threads profile ID, TikTok open ID, and similar identifiers.
• Profile information: username, display name, profile picture, follower count, and category.
• Access credentials: OAuth access tokens and refresh tokens. These are encrypted at rest and used only to perform actions you request.
• Content and performance data: posts, ads, ad sets, campaigns, creatives, comments, replies, impressions, reach, clicks, views, engagement, conversions, spend, and audience demographics in aggregated form.
• Page and inbox data (if you grant permission): comments, mentions, and direct messages related to your ads or posts, so that we can show them in your dashboard.
We request only the permissions we need for the features you use. You can review and revoke these permissions at any time in the settings of the Connected Platform or inside Softus.
3 Information collected automatically
• Device and technical data: IP address, browser type and version, operating system, device identifiers, language, time zone, and screen resolution.
• Usage data: pages viewed, features used, buttons clicked, campaigns created, time spent, error logs, and referral URLs.
• Approximate location: derived from your IP address (country, region, or city). We do not collect precise GPS location unless you enable it for a specific feature.
• Cookies and similar technologies: described in Section 10.
4 Information from other sources
• Single sign-on providers such as Google, Apple, or Facebook, if you use them to log in.
• Analytics, fraud-prevention, and advertising partners that help us understand usage and secure the Services.
• Our customers' teammates and clients who may add you to a workspace.
• Publicly available sources, such as your business website, when you ask us to import brand assets.
5 Sensitive information
We do not intentionally collect sensitive personal information such as health data, government ID numbers, biometric data, or information about racial or ethnic origin, religion, sexual orientation, or political opinions. Please do not upload this kind of information to the Services. If your ads involve special categories (for example, health, financial products, housing, employment, or political content), you are responsible for complying with the targeting restrictions and ad policies of each Connected Platform.
How We Use Your Information
We use personal information to:
1. Provide the Services: create your account, connect your platforms, build and schedule ads, publish content, sync campaign data, and display analytics.
2. Publish on your behalf: send your content, budgets, and targeting settings to Connected Platforms at the times and in the ways you instruct.
3. Process payments: manage subscriptions, invoices, refunds, and taxes.
4. Improve and develop the Services: troubleshoot, test new features, and understand how people use the product.
5. Provide recommendations and automation: suggest best posting times, ad copy ideas, audience suggestions, or budget changes, and run automation rules you configure.
6. Communicate with you: send service notices, security alerts, billing messages, product updates, and responses to your questions.
7. Send marketing messages: share news, offers, and tips, where permitted by law and always with an easy way to opt out.
8. Protect the Services: detect fraud, abuse, spam, policy violations, and security incidents.
9. Comply with legal obligations: respond to lawful requests, enforce our terms, and meet tax, accounting, and regulatory requirements.
10. Create aggregated or de-identified data: which we may use for research, benchmarking, and product improvement. This data cannot reasonably be used to identify you.
Legal Bases for Processing (EEA, UK, and Similar Regions)
If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, we process your personal data on these legal bases:
Purpose
Legal basis
Providing the Services, connecting platforms, publishing content
Performance of a contract
Billing and payments
Performance of a contract; legal obligation
Security, fraud prevention, and service improvement
Legitimate interests
Product analytics and customer support
Legitimate interests
Marketing emails and non-essential cookies
Consent, or legitimate interests where permitted
Tax, accounting, and legal compliance
Legal obligation
Connecting your Connected Platform accounts
Consent, which you can withdraw at any time
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that happened before withdrawal.
How We Share Information
We do not sell your personal information. We share information only in the following situations.
1 Connected Platforms
When you publish or manage content, we send the necessary information (such as ad creative, captions, targeting settings, budgets, audience lists, and tracking parameters) to the Connected Platforms you choose, including Meta (Facebook, Instagram, and Threads), TikTok, and others. Once information reaches a Connected Platform, it is governed by that platform's own privacy policy and terms, not ours. We encourage you to read them:
• Meta (Facebook, Instagram, Threads): [link to Meta privacy policy]
• TikTok: [link to TikTok privacy policy]
•
2 Service providers
We work with trusted vendors who process data on our behalf under written agreements, including:
• Cloud hosting and storage providers
• Payment processors
• Email and messaging providers
• Analytics and error-monitoring tools
• Customer support and CRM tools
• Security and fraud-prevention services
• AI and machine learning providers (see Section 9)
These providers may only use your data to provide services to us.
3 Your team and clients
If you use a shared workspace or agency account, other authorized members may see your name, email, activity, and the content and campaigns you create, depending on the permissions set by the workspace owner.
4 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
5 Legal and safety reasons
We may disclose information if we believe it is necessary to comply with a law, regulation, legal process, or government request; to enforce our agreements; to protect the rights, property, or safety of our users, the public, or ourselves; or to investigate fraud or security issues.
6 With your consent
We may share information for other purposes when you give us clear permission to do so.
Connected Platform Permissions and Tokens
Because our Services depend on third-party platforms, here is how we handle your connections:
• You are in control. Connecting a platform is always your choice. You will see the platform's own permission screen before access is granted.
• Limited use. We use data and tokens obtained from a Connected Platform only to provide and improve the features you use inside Softus. We do not use them for unrelated purposes, and we do not transfer them to data brokers or use them to build profiles for unrelated advertising.
• Token security. Access and refresh tokens are encrypted in storage and in transit and are accessible only to systems and personnel that need them to operate the Services.
• Disconnecting. You can disconnect a platform at any time in [Settings > Connections] or in the settings of the platform itself (for example, Facebook Business Integrations, Instagram Apps and Websites, or TikTok Security and Permissions). When you disconnect, we stop accessing the account and delete the stored tokens within [30] days.
• Platform data deletion. If a Connected Platform notifies us that a user has removed our app or requested deletion, we delete or de-identify the related platform data within the timeframe the platform requires.
• Platform rules. Your use of the Connected Platforms through Softus remains subject to their terms, advertising policies, and community standards. We are not responsible for platform decisions such as ad rejection, account restrictions, or content removal.
Advertising Pixels, Conversion Tracking, and Audience Features
Some features let you install tracking tools or upload audiences. If you use them:
• Pixels and conversion APIs. If you use pixel, SDK, or server-to-server conversion features (for example, the Meta Pixel and Conversions API or the TikTok Pixel and Events API), data about your website or app visitors may be sent to the relevant platform. You are responsible for posting a clear privacy notice and obtaining any consent your visitors are legally entitled to give.
• Custom and lookalike audiences. If you upload customer lists, we hash identifiers such as emails and phone numbers before sending them to a Connected Platform where the platform allows it. You confirm that you have the legal right to use that data for advertising.
• Your customers' data. We process audience and conversion data only on your instructions and do not use it for our own marketing purposes.
Artificial Intelligence Features
If we offer AI-powered tools such as ad copy generation, image creation, audience suggestions, or performance predictions:
• Content you enter may be processed by us or by third-party AI providers to generate results for you.
• We do not allow our AI providers to use your content to train their general-purpose models, unless you have given explicit permission. [Confirm this matches your provider agreements.]
• We may use de-identified and aggregated usage data to improve our own features.
• AI-generated content may be inaccurate, and you are responsible for reviewing it before publishing. Some platforms require you to label AI-generated media, and you should follow their rules.
• We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.
Cookies and Similar Technologies
We use cookies, local storage, pixels, and similar technologies to:
• Keep you signed in and remember preferences (strictly necessary)
• Measure and improve performance through analytics (analytics cookies)
• Understand marketing effectiveness and show relevant content about our Services (marketing cookies)
Where required by law, we ask for your consent before using non-essential cookies. You can manage your choices through our cookie banner, your browser settings, or your browser settings. Blocking some cookies may affect how the Services work. We currently [do / do not] respond to browser "Do Not Track" signals, but we do honor Global Privacy Control signals where required by law.
Data Retention
We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required by law.
Data type
Retention period
Account information
While your account is active, plus [30–90] days after closure
Ad content and campaign data
While your account is active; deleted or de-identified within [90] days after closure
Platform access tokens
Until you disconnect the platform or close your account, then deleted within [30] days
Analytics data from Connected Platforms
While your account is active; removed within [90] days after disconnection
Uploaded audience lists
Deleted within [30] days after campaign use ends or upon your request
Billing and tax records
[7] years, or as required by law
Support communications
[3] years
Server and security logs
[12] months
Backups
Overwritten within [35–90] days
When data is no longer needed, we delete it or irreversibly anonymize it.
Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information, including:
• Encryption in transit (TLS) and at rest
• Encrypted storage of access tokens and secrets
• Role-based access controls and the principle of least privilege
• Multi-factor authentication for internal systems [and offered to users]
• Regular security reviews, vulnerability scanning, and penetration testing
• Employee confidentiality obligations and security training
• Incident response procedures
No system is completely secure. You are responsible for keeping your password confidential and for activity under your account. Please notify us immediately at softussupport@gmail.com if you suspect unauthorized access.
If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.
International Data Transfers
We operate globally, and your information may be transferred to, stored in, and processed in countries other than where you live, including [United States, country list]. These countries may have different data protection laws.
When we transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary measures where needed. [If applicable: We participate in the EU-U.S. Data Privacy Framework.] You can request a copy of the safeguards by contacting us.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights:
• Access: request a copy of the personal information we hold about you.
• Correction: ask us to fix inaccurate or incomplete information.
• Deletion: ask us to delete your personal information.
• Portability: receive your data in a structured, commonly used format.
• Restriction or objection: ask us to limit or stop certain processing, including processing based on legitimate interests and direct marketing.
• Withdraw consent: at any time, where processing is based on consent.
• Opt out of sale, sharing, or targeted advertising: we do not sell personal information, and we do not share it for cross-context behavioral advertising [confirm for your own marketing tools].
• Limit use of sensitive information: where applicable.
• Non-discrimination: we will not treat you unfairly for exercising your rights.
• Complain to a regulator: you may contact your local data protection authority.
How to exercise your rights: email softussupport@gmail.com or use data deletion and privacy requests. We may need to verify your identity before acting on a request. We will respond within the time required by law, generally within 30 to 45 days. You may use an authorized agent to submit a request on your behalf, with proof of authorization.
If you are an end user whose information was uploaded by one of our customers (for example, a person on a customer's audience list), please contact that business directly. We will assist them in responding to your request.
1 Additional information for California residents
Under the CCPA/CPRA, we collect the following categories of personal information, as described above: identifiers, commercial information, internet or network activity, geolocation (approximate), professional information, and inferences drawn to personalize features. We disclose these categories to service providers and Connected Platforms for business purposes. We have not sold personal information in the preceding 12 months. Under California's "Shine the Light" law, you may request information about disclosures of personal information to third parties for their direct marketing purposes.
2 Additional information for other U.S. states
Residents of states such as Virginia, Colorado, Connecticut, Utah, Texas, and others may have the rights above, including the right to appeal a decision on a request. To appeal, reply to our response or email softussupport@gmail.com with the subject line "Appeal."
3 Additional information for EEA and UK residents
You have the rights described in the GDPR and UK GDPR, including the right to lodge a complaint with your national supervisory authority.
Account Deletion and Data Requests
You can delete your account at any time in [Settings > Account > Delete Account] or by emailing softussupport@gmail.com. When you delete your account:
1. Your connections to all Connected Platforms are removed and tokens are deleted.
2. Your content, campaigns, and uploaded audiences are deleted or anonymized in line with Section 11.
3. Content already published on a Connected Platform is not automatically removed. You must delete it directly on that platform.
4. We may retain limited information where required by law, for fraud prevention, or to resolve disputes.
Data deletion instructions for Connected Platforms: if you connected through Facebook, Instagram, or Threads, you can also remove Softus from your account settings and send a deletion request to softussupport@gmail.com or data deletion instructions URL. We will confirm deletion and provide a confirmation code where required.
Children's Privacy
The Services are intended for businesses and adults and are not directed to anyone under [18] years of age (or the age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
If your ads are directed at minors, you are responsible for complying with each platform's rules and all laws on advertising to children, such as COPPA and the GDPR provisions on children's data.
Third-Party Links and Services
The Services may contain links to third-party websites, integrations, or tools that we do not own or control. We are not responsible for their privacy practices. Please review the privacy policy of any site or service you visit or connect.
Email and Marketing Preferences
We may send you product updates, tips, and promotional messages. You can unsubscribe at any time by using the link in any email or by contacting us. You will still receive essential messages about your account, billing, and security. Where required by law, we only send marketing messages with your prior consent.
Your Responsibilities as a User
Because you can use Softus to reach other people through advertising, you agree to:
• Have the legal right to upload and use all content, audiences, and data you submit.
• Provide required notices and obtain required consents from your own customers and website visitors.
• Follow all laws and the policies of each Connected Platform, including rules on restricted categories, targeting, disclosures, and sponsored content.
• Not use the Services to collect or misuse personal information of others, to send spam, or to deceive or harass anyone.
We may suspend or terminate accounts that violate these responsibilities.
Changes to This Privacy Policy
We may update this policy from time to time to reflect changes to our practices, our Services, or the law. When we make material changes, we will update the "Last Updated" date and notify you by email, in-app notice, or another appropriate method before the changes take effect. Your continued use of the Services after the effective date means you accept the updated policy. We encourage you to review this page periodically.
Contact Us
If you have questions, concerns, or requests about this Privacy Policy or our data practices, please contact us:
Company Legal Name: SOFTUS SERVICE LTD. Attn: Privacy Team [Street Address: 111 Rd 9, Block-C. City: Dhaka, ZIP/Postal Code 1213, Country: Bangladesh.
Support: softussupport@gmail.com. Phone: +880 179475-3808.
Appendix A: Connected Platform Data Summary
Platform
Typical data we access (with your permission)
Main purpose
Page ID, ad account ID, posts, ads, comments, insights, access tokens
Publish posts and ads, show analytics, manage engagement
Business account ID, media, comments, insights, access tokens
Publish content and ads, show analytics
Threads
Profile ID, posts, replies, insights, access tokens
Publish and schedule posts, show analytics
TikTok
Open ID, profile info, video and ad data, insights, access tokens
Publish videos and ads, show analytics
[X / LinkedIn / YouTube / Pinterest / Snapchat / Google Ads]
[Account ID, content, performance data, tokens]
[Publish and report]
Exact permissions vary by platform and by the features you enable. You can view the permissions requested on each platform's authorization screen.
Appendix B: Short Notice for App Store and Platform Review Forms
Softus connects to your social and advertising accounts only after you authorize it. We use the data from those accounts solely to publish content, manage campaigns, and show you performance reports. We do not sell your data, and we do not use it for any unrelated purpose. You can disconnect any account or delete your data at any time.