Social Studio Privacy Policy

Last updated: 25 May 2026

Twinlix Social Studio is a product of Axisway LTD ("we", "us", "our"), a company registered in Scotland under company number SC761921, with its registered office at 3F1 Third floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP. This policy explains what personal data we collect when you use

Twinlix Social Studio (the "Service"), why we collect it, how we use it, and your rights under the GDPR and UK GDPR.

1. Data we collect

Account information. Email address, full name, and a hashed password when you sign up. Optionally a profile picture you upload yourself.

Brand and content data. Brand names, logos, brand style guides, content calendars, captions, and generated images you create or upload to the Service.

Connected social media accounts. When you connect a Facebook Page, Instagram Business account, LinkedIn profile, X account, or Threads account, we receive from the platform:

- Account name, handle, profile picture

- Long-lived OAuth access token (stored encrypted)

- Page/account ID

We never receive or store your social media password. We can only perform the actions you explicitly grant during the OAuth flow.

Platform Data from Meta (Facebook Pages, Instagram Business accounts): page name, page ID, posts you publish through Twinlix, public engagement metrics (impressions, reach, likes, comments, shares, saves), follower count and demographics aggregates.

Usage data. Pages you visit inside the app, actions you take (post created, scheduled, published), error logs, IP address, browser user-agent. Used solely to debug, secure, and improve the Service. Never sold.

2. How we use your data

- To operate the Service: publish posts, fetch analytics, generate AI content, send transactional emails (e.g. password reset).

- To provide customer support when you contact us.

- To bill you (handled by our payment processor — we never see card numbers).

- To prevent abuse, fraud, and security incidents.

- To improve the Service via aggregated, anonymized analytics.

We do NOT use Platform Data from Meta for advertising, training AI models, or sale to third parties.

3. Third-party processors

We share the minimum data necessary with:

- Postiz (self-hosted on our infrastructure) — handles OAuth and publishing to social networks.

- Anthropic (Claude API) — generates captions and content calendars from prompts. Anthropic's policy: https://anthropic.com/privacy

- Google (Gemini API) — generates images. Policy: https://policies.google.com/privacy

- Stripe — payment processing. Policy: https://stripe.com/privacy

- Hetzner Cloud (Germany) — hosting our servers. Policy: https://hetzner.com/legal/privacy-policy

All processors are GDPR-compliant and bound by data processing agreements.

4. Where we store your data

All servers are in the European Union (Germany). Data does not leave the EU except when sent to API providers listed above, all of which have GDPR Standard Contractual Clauses in place.

5. How long we keep your data

- Account data: while your account is active, deleted within 30 days after you close the account.

- Published posts and analytics: kept while your account is active to provide historical context; can be exported or deleted on request.

- Server logs: 30 days, then purged.

- Billing records: 7 years (UK tax law requirement).

You have the right to:

- Access the personal data we hold about you.

- Correct inaccurate data.

- Delete your account and all associated data (right to be forgotten).

- Export your data in a machine-readable format (JSON).

- Restrict processing of your data.

- Object to processing.

- Withdraw consent at any time.

- Lodge a complaint with your local data protection authority.

In the UK that's the ICO: https://ico.org.uk

To exercise any of these rights, email privacy@twinlix.com . We respond within 30 days.

7. Cookies

We use only essential cookies for authentication (twinlix_session) and language preference (twinlix.ui_lang). No analytics, advertising, or third-party tracking cookies are set.

8. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

9. Changes to this policy

If we change this policy materially, we will email you at least 30 days before the change takes effect.

10. Contact

Data Protection: privacy@twinlix.com

General: support@twinlix.com

Postal: Axisway LTD, 3F1 Third floor, 3 Hill Street, New Town, Edinburgh, EH2 3JP, United Kingdom

Social Studio Privacy Policy