Skip to main content
Zoisial

Zoisial · Legal

Privacy Policy

Last updated: 3 October 2026

This Privacy Policy explains how Ornigami LLC ("Zoisial," "we," "our," or "us") collects, uses, stores, and shares information when you use our AI-assisted social-content creation service and connected publishing features (collectively, the "Services"). It also explains the choices and rights available to you.

1. Information We Collect

We collect information you provide, information created when you use the Services, and information received from connected providers when you authorize an integration.

Supported-pilot inquiries

If you send an inquiry, we store your email, optional business website, content problem, receipt date, review status and separate optional marketing choice in a private operator queue. We use them to review and reply to your request. An inquiry does not open an account or start a subscription. When you have opted in to analytics, the inquiry may include a coarse source category; otherwise it remains unattributed. We do not send these contact details or form answers to PostHog. To withdraw a marketing choice or request deletion of inquiry details, contact the privacy email below.

Account information

When you create an account, we receive your name, email address, and Clerk account identifier. We use this information to authenticate you, maintain your account, and communicate about the Services.

Brand and customer content

We process the brand profiles, audience descriptions, tone and voice examples, briefs, prompts, uploaded photographs, captions, hashtags, layouts, generated slides, exports, and scheduling information that you choose to provide or create. Customer media is stored in private object storage and is available through authenticated Zoisial routes.

AI-assisted processing

When you request an AI feature, selected inputs are sent to the provider needed for that feature. OpenAI supports photograph tagging, focal-point detection, moderation, and requested image editing. Google's Gemini image model supports image generation from prompts derived from your brand, audience, and voice inputs. Provider and model identifiers may be recorded in generation telemetry.

Connected social accounts

If you connect Instagram or TikTok, we receive the account details and permissions you authorize, including account identifiers, usernames, profile images, encrypted access or refresh tokens, publishing status, post links, and—where enabled—platform performance metrics such as reach, likes, comments, or follower counts. New TikTok connections use Zoisial's own TikTok application, so TikTok account data and tokens are held by Zoisial rather than by a bridge provider. Automatic publishing to the TikTok feed is available only where TikTok has enabled it for Zoisial's application; where it is not, Zoisial delivers the post to your TikTok Inbox and you complete publication in the TikTok app. If Zoisial's own TikTok application becomes unavailable, Zoisial may use the temporary Zernio bridge as a fallback. Instagram publishing uses the Zernio bridge while the native Meta application is pending. When the bridge is used, Zernio may receive the account identifier, authorization-related data, content and captions, public media URLs, publishing settings, and delivery results needed to connect and publish at your direction. Zernio's own terms and privacy policy apply to its processing.

Billing and operational information

Stripe provides subscription and billing information when you use paid features. We also process service telemetry such as generation events, errors, security events, and feature usage. Sentry receives a pseudonymous Clerk user identifier with personally identifiable information disabled by default. When PostHog is configured and you opt in to analytics, it receives pseudonymous website events and limited browser, operating-system, and coarse device-category metadata, including selected pageviews, approved campaign values, selected marketing call-to-action clicks, successful new inquiry receipts and a coarse source category. It assigns an analytics identifier and session identifier, stored in browser local storage while you remain opted in; opting out removes PostHog's analytics persistence. PostHog may process the connection IP for GeoIP enrichment and bot detection before discarding it rather than storing it with events under the project's enabled client-IP discard setting. The integration does not attach Zoisial account identifiers, form fields, or generated content as event properties.

2. How We Use Your Information

We use the information we collect to:

  • Provide, personalize, maintain, and secure the Services.
  • Create and improve briefs, copy, images, carousels, exports, and scheduled content you request.
  • Publish content to connected Instagram or TikTok accounts at your direction and report publishing results.
  • Authenticate accounts, process subscriptions through Stripe, provide support, and send service or security notices.
  • Monitor reliability, prevent abuse, investigate incidents, and improve product performance.
  • Send occasional product news or tips by email, but only if you have opted in. This is off by default, separate from the service notices above, and you can turn it off at any time from your profile or the unsubscribe link in the email.

3. How We Share Your Information

We do not sell or rent your personal information. We share information only when it is needed to provide the Services, when you direct us to do so, or when required to comply with law.

AI, hosting, and service providers

We use providers including OpenAI, Google, Vercel, Neon, Cloudflare R2, Clerk, Stripe, Resend, Upstash, Sentry, PostHog (only when you opt in to website analytics), and—when the bridge is enabled for Instagram or TikTok fallback—Zernio. Each provider receives only the information needed for its role. See the Sub-processors Inventory for the current provider list and purposes.

Connected social platforms

When you connect an account and ask Zoisial to publish or retrieve platform information, we send the relevant content, metadata, account authorization, or status request to Instagram or TikTok. When the temporary Zernio bridge is used for Instagram or TikTok fallback, the relevant publishing data also passes through Zernio before delivery to the destination platform. Those providers process information under their own terms and privacy policies. Zernio Terms: https://zernio.com/tos. Zernio Privacy Policy: https://zernio.com/privacy-policy.

Legal and safety reasons

We may disclose information if reasonably necessary to comply with law or legal process, protect the rights or safety of users and the public, investigate fraud or security issues, or enforce our agreements.

4. Data Security

We use technical and organizational safeguards designed to protect information, including encrypted connected-account tokens, encryption in transit, private object storage, authenticated service routes, access controls, and security monitoring. No method of transmission or storage is completely secure, so we cannot promise absolute security.

5. Data Retention and Deletion

We keep information only for as long as it is needed for the purposes described in this policy, unless a longer period is required by law or needed to establish, exercise, or defend legal claims.

  • Uploaded or generated assets are generally deleted 90 days after creation unless a project using them has been touched within that period.
  • Rendered images and video are cleared 90 days after the related post was last touched, while the post, caption, and layout can remain available.
  • After subscription cancellation, reusable library media is deleted 30 days later.
  • Connected-account tokens held by Zoisial are kept while the account remains connected and are deleted when you disconnect it or delete your Zoisial account. For Zernio-backed Instagram channels or TikTok fallback channels, Zoisial requests remote account disconnection and profile cleanup during offboarding; Zernio's vendor-specific retention and deletion terms remain subject to the pending provider review.
  • Billing, tax, security, legal, and dispute records may be retained for the period required by applicable law. Operational telemetry is kept only as long as needed for reliability, security, and audit purposes.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You can export your account data and delete your account and associated stored media from the dashboard. You can disconnect a social account at any time, which stops new access to that account and triggers deletion of the stored tokens. Marketing email is opt-in, off by default, and separate from the account, billing, and content notices we send to operate the Services; you can turn it on or off from your profile at any time, and every marketing email includes a one-click unsubscribe link. To ask a privacy question or exercise a right, contact info@zoisial.com.

7. Connected Platform Details

Zoisial's connected-platform features are currently designed for Instagram and TikTok. You remain responsible for complying with each platform's terms, community guidelines, developer policies, and content rules. You can revoke Zoisial's authorization from the connected platform's settings as well as from Zoisial. Platform availability, permissions, rate limits, and retention rules may change independently of Zoisial.

8. International Data Transfers

Some providers that support the Services may process information outside the European Economic Area, including in the United States. PostHog analytics is configured for its US Cloud service, so consented website analytics may be processed in the United States. The applicable transfer mechanism for PostHog and other providers must be confirmed and is listed as pending in the Sub-processors Inventory. Where required, we will use contractual or other safeguards recognized by data-protection law for international transfers.

9. Children's Privacy

The Services are not directed to children who are not legally able to use an online service under the laws that apply to them. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information to us, contact us so we can review and delete it where required.

10. Changes to This Privacy Policy

We may update this Privacy Policy when the Services, providers, or legal requirements change. We will update the last-updated date above and, when a change is material, provide notice through the Services or by email where appropriate. Your continued use of the Services after the stated update date means the updated policy applies to your use.

11. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights, contact info@zoisial.com. You may also write to Ornigami LLC at 1209 Mountain Road Pl Ne, Ste N, Albuquerque, NM 87110, US. We aim to respond to privacy requests within the period required by applicable law.

Questions about our legal policies? Contact information is available in our Privacy Policy.

Back to home