This policy describes the information we process when you use Oobital, why we process it, and the choices available to you. It is written to be clear, not to obscure.
Last updated: October 2026
Oobital is social media management software. It connects to the social platforms you authorize, stores and processes the media you upload, drafts content with an AI drafting layer, and reports performance back to you in one place.
This policy explains what information that involves, why we process it, and the choices available to you. It is written to be read rather than skipped.
Account information: the name, email address, and credentials you provide when you create an account or sign in. We never receive or store your social platform password.
Organization information: workspace name, team membership, roles, and billing details. Payment card details are handled by our payment processor and are not retained by Oobital.
Content and media: the posts you compose, schedule, and publish, along with the images, videos, and other files you upload to your media library. We retain these for as long as your account is active so the product can keep working.
Connected platform data: the access tokens you grant, the platform identifiers of the accounts you connect, and the post and engagement data those platforms return to us, for example impressions, reach, follower counts, and click-through metrics.
Usage and device information: pages visited, features used, IP address, browser and operating system, and diagnostic events used to keep the service secure and reliable.
To operate the service: publishing on your behalf, scheduling posts, generating media variants, and returning analytics from the platforms you connect.
To draft content with AI: to process the conversations and drafts you submit, generate platform-ready output, and return it to you.
To secure your account, detect abuse, and enforce these terms.
To improve the product using aggregated and anonymised patterns. We do not train shared models on your private workspace content, and we do not sell your content to anyone.
To send service messages about your account, billing, or changes that affect the product. Marketing email is separate and optional.
When you connect one of the ten supported platforms (Instagram, X, LinkedIn, Facebook, YouTube, TikTok, Pinterest, Threads, Bluesky, and Snapchat), you authorize Oobital to act on that account within the permissions you grant. Those permissions typically include publishing content and reading performance data.
We use that access only to provide the service to you. We do not sell your connected accounts, transfer them to another customer, or use them to serve any third party.
You can revoke access at any time from your account settings or from the platform itself. Revocation takes effect immediately and stops all future publishing. Data already collected is handled according to the retention section below.
The AI drafting layer sends the content you submit to our AI processing infrastructure in order to generate drafts. Treat submitted material as confidential and do not paste content you are not permitted to share with a third-party processor.
You retain ownership of your prompts, source conversations, and the drafts produced from them. Generated output is provided for you to review and edit; you decide whether and what to publish.
Automated generation can be inaccurate. You are responsible for reviewing drafts before publication, and you are responsible for complying with any disclosure or advertising rules that apply to AI-assisted content on the platforms you post to.
Necessary cookies keep the site and the application working, including your session and your security. These cannot be disabled.
Analytics and marketing technologies are optional and are only activated with your consent. You can change your choices at any time through the cookie controls provided on the site.
We share information with service providers who process it on our behalf under written data-protection terms: infrastructure, payments, email delivery, and error monitoring.
We disclose information where required by law or valid legal process, and we will notify you unless prohibited from doing so.
We do not sell your personal information, and we do not share it for third-party advertising purposes.
We keep your information for as long as your account is active so the service continues to work.
On request for account deletion, media files, drafts, and scheduled posts are permanently erased from primary storage within 30 days, and from backups within 90 days.
Anonymised, aggregated usage data may be retained for analytics and product improvement purposes.
Data held by connected social platforms remains subject to that platform's own retention practices.
Access tokens for connected platforms are encrypted at rest and are never exposed to your browser or to our staff outside the operations required to provide the service.
Media is encrypted in transit. Account credentials are hashed rather than stored in plaintext.
No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your information, we will notify you and the relevant regulator within the timeframe required by applicable law.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent.
Most of these you can exercise directly in account settings. For anything else, contact us and we will respond within the timeframe required by applicable law, and in any event within 30 days.
If you are in the EU or UK you may also lodge a complaint with your local supervisory authority.
Our service providers operate globally, so information may be processed outside your country of residence. Where that happens we rely on an adequacy decision or standard contractual clauses, and we apply a minimum necessary standard in every region.
We may update this policy as the product evolves. When we make a material change we will update the date above and, where appropriate, give you notice through the product or by email before it takes effect.
For any privacy question, or to exercise a right, contact us at privacy@oobital.com.
Questions about this document? Contact us.