SocialGuard Security — Privacy Policy

Last updated: 2026-04-24

What we collect

When you install SocialGuard Security from the Hootsuite App Directory and open it from the Compose or Publisher view, we receive your Hootsuite member identifier and a signed authentication token via Hootsuite’s SSO. Before any data is read, you are presented with an explicit consent screen listing every endpoint we will call. Only after you click I authorize SocialGuard to scan my account do we request a Hootsuite member_app OAuth access token scoped to your member account and call the following APIs to compute your personal security posture:

• GET /me — your name, email, account creation date.
• GET /me/organizations — the organizations you belong to (names only).
• GET /me/socialProfiles — every social profile reachable from your Hootsuite account (your own and any shared by your organizations).
• GET /messages?state=SCHEDULED — your posts awaiting publish.

How we use it

Data is used solely to render your personal security dashboard inside Hootsuite: an exposure score, a list of your connected accounts, your platform diversity count, and a review of your upcoming scheduled posts. We never post, edit, delete, or modify anything. We do not sell or share your data with third parties.

How we store it

Snapshots are stored in our managed Postgres database (Neon) with encryption at rest. You can request deletion at any time by emailing the address below. Uninstalling the app from Hootsuite triggers automatic deletion within 30 days.

SocialGuard for Teams (Org App tier)

If you request our Teams tier, we contact you to set up a separate Hootsuite Organization App linked to your organization via Hootsuite’s developer support process. That tier operates under its own privacy terms which we provide during onboarding. Installing the free SocialGuard Security app does not enroll you in the Teams tier.

Contact

privacy@socialguard.security