Privacy Policy

Last updated 5 November 2026

This policy explains how Decision Management Ltd (company number 17167995, 126 Wellesley Road, London, W4 3AP) handles personal data in Sowloud. We are the data controller. Contact us at giulia@decision-entertainment.com.

What we collect

• Your sign-in details: your email address, used to send sign-in codes.
• Workspace data: campaigns, account details (handle, niche, tone of voice), schedules, captions and approval history that you enter.
• Content you upload: videos, images and audio you add to the content library.
• Connected platform data: when you connect a TikTok, Instagram or YouTube account, we receive the information that platform shares under the permissions you approve. For TikTok this is your open ID, display name, username and avatar, plus access and refresh tokens, and the IDs and status of posts published through Sowloud. We do not receive your platform password.
• Technical data: basic logs (such as IP address and browser type) kept by our hosting providers for security.

How we use it

• To sign you in and run your workspace.
• To publish the posts you approve to the accounts you connected, at the times you schedule, and to show their status.
• To suggest captions and hashtags, if you choose to use that feature.
• To keep Sowloud secure and fix problems.

Our legal basis is performing our agreement with you and our legitimate interest in running a secure service. We do not sell personal data, use it for advertising, or use platform data for anything other than the features above.

Who we share it with

We use these service providers, who process data on our behalf under contract:

• Supabase: database, sign-in and file storage, hosted in London (UK).
• Vercel: application hosting.
• Anthropic: generates caption suggestions from the campaign brief, account tone and clip tags, only when you use that feature.
• TikTok, Meta and Google (YouTube): receive the content and captions you approve, when we publish them to your connected accounts.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations.

How long we keep it

We keep workspace data and content for as long as your workspace is active. Platform tokens are deleted as soon as you disconnect an account. When a workspace is closed we delete its data within 30 days, except where we must keep it by law.

Security

Data is encrypted in transit. Platform access tokens can only be read by our servers, never by the app in your browser, and each workspace can only see its own data.

Your rights

Under UK data protection law you can ask to access, correct, delete, restrict or move your personal data, and object to how we use it. Email us to make a request. You can disconnect a platform account at any time; for TikTok you can also remove access in TikTok's Settings → Security → Manage app permissions. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Sowloud is for professional use and is not intended for anyone under 18.

Changes

We may update this policy. We will post the new version here and update the date above.