Privacy notice

Who we are

Smada Socials is a private, invite-only app for a small circle. It turns news into social posts and short videos for you to post yourself; it never posts anything for you. The admin runs it. Questions go to the admin who invited you.

What we keep

• Your account: email address, name, time zone, language and settings, and your role.
• Signing in: when you signed in, your IP address and browser, and your Google account ID if you use Google.
• What you make: feeds, interests, brands, writing samples, stories, drafts and their versions, the links you posted to, and videos.
• People in your content: character photos, descriptions and the consent you recorded for real people, and an admin's check of each real person (approved or not, and why).
• Your voice: your ElevenLabs voice IDs, settings and pronunciations, and recordings you upload. Your cloned voice itself stays in your own ElevenLabs account.
• API keys you add: encrypted, and never shown again except their last four characters.
• Costs: what each call cost and on whose key, so spending caps work.

Who else gets it, and why

Some of it goes to these services, several of them overseas, only to do the job described:

• Anthropic (Claude), USA. The stories you pick and their article text, your take, your brand's writing voice and sample posts, and your edits. To score stories and write posts, carousels, scripts and style suggestions.
• OpenAI, USA. Image prompts and reference images, including character photos and brand assets you allow in scenes. To make post images, backgrounds and video keyframes.
• ElevenLabs, USA. Script lines, your voice's ID and settings, and recordings you upload for voice swaps. This uses your own ElevenLabs account. To speak your scripts in your cloned voice, with word timings for captions.
• Higgsfield and fal, USA. Approved keyframes, character images and each scene's audio, through short-lived links. To animate scenes into video clips.
• Resend, USA. Your email address and the emails we send you. To send invites, sign-in links and your daily digest.
• Vercel and Neon. Everything above, stored: Vercel runs the app and keeps your files, Neon keeps the database. To run the app.

We don't sell it or share it with anyone else. In the app, other members can't see your data, and the admin sees your usage and costs but not your content, with one exception: before a character you mark as a real person is used, an admin sees its name, role, description, photos, Higgsfield Soul ID (if you saved one), the brand it's in and the consent you recorded, to check them (see Other people in your content).

How long we keep it

• Your content stays until you delete it, or your account is deleted.
• Sign-in links expire after 15 minutes. Downloads of your data are deleted after 7 days.
• Encrypted backups keep deleted data for up to 30 days, then it's gone.

Getting a copy, fixing it or deleting it

• Get a copy of everything: Settings > Download my data.
• Fix or delete anything you made from its own page, and remove your keys in Settings > API keys.
• Have your whole account and everything in it deleted: ask the admin who invited you. Delete your cloned voice in your ElevenLabs account yourself, as we can't reach it.

Other people in your content

Only use photos and voices of people who have agreed. A character marked as a real person needs their consent recorded first, and characters of public figures can't be made. Check stories that name people or make allegations before you post them.

To protect the people in your content, an admin checks each character you mark as a real person before their likeness is sent to any image or video model: they see its name, role, description and photos, its Higgsfield Soul ID if you saved one, the brand it's in, what you confirmed each photo shows, and the consent you recorded, and approve it or say why not. The admins are emailed when one is waiting for them, with your name and email and the character's and brand's names. Changing the photos or details asks again. You're told what they decide. The admin can switch this check off for everyone; while it's off, new and changed characters aren't shown to an admin, and you're told when one that was waiting can be used.

If something goes wrong

If your information is lost, or seen by someone who shouldn't see it, we'll stop it spreading, work out within 30 days what happened and who is affected, and tell you (and the Office of the Australian Information Commissioner where the law requires it) what happened and what to do next.