Privacy Policy

What Sosho does

Sosho is an AI social-media manager for local shops and businesses. Store owners chat with Sosho over WhatsApp, Telegram or the web dashboard, send product photos and short instructions, and Sosho writes captions, creates branded artwork and — with your approval — or under an automatic-publishing option you explicitly enable — publishes posts to your connected Facebook Page.

Information we collect

• Account details — the name, email address, phone / WhatsApp number, business name, shop address and franchise or brand you give us when you sign up.
• Content you share — product photos and images, product and pricing information, captions, and the messages you exchange with Sosho.
• Facebook Page connection — when you connect your Facebook Page we store the Page and app-scoped user identifiers, granted permissions, access tasks and an encrypted access token that lets us provide the features you enable. We never receive or store your Facebook password.
• Facebook content and insights — Page-authored posts, reactions, comments and share counts, follower totals, media views, unique media views and engagement metrics used to show performance and improve recommendations.
• Instagram connection and publishing — when you connect a professional Instagram account, we store its identifier and username, linked Page identifier, app-scoped user identifier, granted permissions, encrypted access token, and records of posts you instruct us to publish. These records include post identifiers, links and publication status. This connection does not give Sosho access to Instagram direct messages.
• Usage and technical data — logs of messages processed, posts generated and published, and standard technical information such as timestamps and error logs needed to run and secure the service.

How we use your information

• To provide the service — routing your WhatsApp, Telegram and web messages to your store, generating captions and images, publishing posts under your approval settings, and displaying Page and post performance.
• To communicate with you — sending service messages, drafts for your approval and results updates, primarily over WhatsApp.
• To keep Sosho reliable and secure — diagnosing errors, preventing abuse and protecting accounts.

We do not sell your personal information.

Automatic Facebook publishing is off by default. If you enable it, you can disable it or disconnect Facebook at any time in Settings. Instagram feed publishing requires a separate connection and a per-post instruction. Connecting Instagram does not enable automatic Instagram publishing.

Legal bases (UK / EU)

Where UK GDPR or EU GDPR applies, we process your information to perform our contract with you (providing the service), to pursue our legitimate interests in operating and securing Sosho, and, where required, with your consent — for example, your consent to message you on WhatsApp and to post to your Page on your behalf.

Service providers and subprocessors

We share information with a small number of trusted providers, only as needed to run the service:

• Twilio — delivers WhatsApp messages between you and Sosho.
• Meta Platforms, Inc. — receives the posts we publish to your connected Facebook Page or Instagram account under your instructions.
• AI model providers — process text and images to generate your captions and artwork.
• Hetzner Online GmbH — provides our servers and data hosting in the EU.

Each provider is given only the information needed for its task and is required to protect it.

Data retention

We keep your account information and content for as long as your account is active. Chat history and generated posts are retained so Sosho can stay consistent with your brand. When you close your account or ask us to delete your data, we remove it within 30 days, except where we must keep limited records to meet a legal obligation.

Your rights

Depending on where you live, you have rights over your personal information — including the right to access, correct, export or delete it, and to object to or restrict certain processing. Under UK and EU GDPR you may also complain to your data protection authority (in the UK, the Information Commissioner’s Office). To exercise any of these rights, email us at support@gososho.co.ukand we’ll respond within the time the law allows.

International transfers

Sosho is operated from the United Kingdom and hosts data in the EU. Some providers may process data outside the UK / EU; where they do, we rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy from time to time. When we make material changes we’ll update the effective date above and, where appropriate, let you know through the service.

Contact

Questions about privacy or your data? Email support@gososho.co.uk.