1. Introduction
Dvg Social ("Platform", "we", "us") is a SaaS platform that helps brands generate and schedule social media content with AI assistance. This Privacy Policy explains how we collect, process, and protect the data of people who use our platform ("User"). Where applicable, the Platform complies with Turkey's Law on the Protection of Personal Data (KVKK, Law No. 6698). If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) also applies to the processing of your personal data, and the rights described in Section 8 apply to you in addition to your GDPR rights.
2. Data We Collect
The following data may be processed while you use the Platform:
- Account information: First and last name, email address, hashed password.
- Social media connection: When you connect your Instagram Business account, we store the access token obtained through the Instagram API, together with your Instagram account ID and username. This data is used solely to publish content on your behalf and to display your account's performance statistics.
- Content data: Post copy, images, and videos you create or upload to the Platform.
- Usage data: Session logs, IP address, browser information, and in-product actions.
- Product and brand information: Brand, product, and target-audience details you provide, plus public aggregate statistics of competitor Instagram profiles you choose to track.
3. Purpose of Processing
- Operating the Platform's core features (content generation, post scheduling, publishing)
- User authentication and account security
- Publishing content to your Instagram account and displaying performance statistics (only with your explicit consent)
- Improving Platform performance and fixing issues
- Complying with legal obligations
4. Third-Party Services
The Platform relies on the following third-party services:
- Meta / Instagram: We use the Instagram Graph API (a Meta Business Tool) to publish content and display account statistics. Meta's Privacy Policy applies.
- Google: We use Google OAuth for authentication. Google's Privacy Policy applies.
- AI providers: We use large language model and media generation APIs to produce text, image, and video content. Content sent to these providers is subject to their respective privacy policies.
- Competitor analysis infrastructure: We use third-party data collection services to gather publicly available aggregate statistics for the competitor Instagram profiles you specify. This is limited strictly to publicly available data.
- Infrastructure: Platform data is stored on secure server infrastructure.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties, except where required by law, a court order, or a request from an authorized public authority. Data may be transferred to the infrastructure providers we use to operate the Platform, strictly for the purpose of providing the service and under confidentiality agreements.
6. Data Retention
Account data is retained for as long as your account is active, and for 30 days after account deletion. Your Instagram access token is retained until you disconnect your account; it is deleted immediately from our systems when you disconnect or when the token expires.
7. Requesting Data Deletion
We provide two clear, easily accessible ways to request deletion of your data:
- Social media connection: In-app, go to Settings > Account and click "Disconnect" to immediately and permanently delete your Instagram access token and connected account information.
- Your full account and personal data: Send a deletion request to info@dvgsocial.com. Once your identity is verified, your account and all associated personal data are permanently deleted from our systems within 30 days. You will receive an email confirming that your request has been processed.
8. Your Rights
Under Article 11 of KVKK (and, where applicable, the GDPR), you have the right to:
- Learn whether your personal data is being processed
- Request information about how it is processed
- Request correction or deletion of your data
- Request restriction of processing
- Object to the outcome of automated processing
To exercise these rights, contact us at info@dvgsocial.com.
9. Cookies
The Platform uses strictly necessary cookies for session management. We do not use third-party analytics or marketing cookies.
10. Security
Data is transmitted over encrypted TLS/HTTPS connections. Passwords are stored using a one-way hashing algorithm. Access tokens are stored in encrypted database fields. We apply technical and administrative safeguards against unauthorized access.
11. Policy Updates
This policy may be updated from time to time. Material changes will be communicated to your registered email address. The current version is always available on this page.