Privacy Policy
Last updated: 21 September 2026
1. Who we are
Social Tapir (socialtapir.com) is operated by MAGNUS DIGITAL SDN BHD (Registration No. 1242851-T), a company registered in Malaysia with its registered address at 2-9, Tiara Mutiara 2, Jalan Puchong, Off Old Klang Road, 58200 Kuala Lumpur, Malaysia (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, and protect personal data when you use Social Tapir, in accordance with Malaysia's Personal Data Protection Act 2010 (“PDPA”).
2. Information we collect
- Account information: your name, email address, and profile photo, collected when you sign up or sign in (including via Google sign-in) through Firebase Authentication.
- Business information: your company name, industry, brand details, audience profile, marketing objectives, and any other information you provide while setting up or using your account.
- Content and uploads: brand assets, knowledge-base documents, and other files you upload, plus the content plans, captions, and images generated within the platform.
- Connected social accounts: when you connect a Facebook, Instagram, Threads, TikTok, or LinkedIn account for publishing, we receive and store the access tokens and account identifiers needed to publish content and read performance analytics on your behalf. For Threads this includes the views, likes, replies, reposts, and quotes of the posts we published for you, and your follower count; we use these only to show you how your content performed and to suggest what to post next. We never receive your social media password.
- Payment information: subscription and billing details are handled directly by our payment processor, Stripe. We do not store your full card number.
- Usage data: log data, device and browser information, and how you interact with the platform, used to maintain and improve the Service.
3. How we use your information
- Provide, operate, and maintain the Service, including generating AI-powered strategies, content plans, captions, and images for your business.
- Publish content to your connected social media accounts at your direction.
- Process subscription payments and manage your account (via Stripe).
- Communicate with you about your account, service updates, and support requests.
- Monitor, secure, and improve the Service, including diagnosing technical issues.
4. Who we share it with
We share personal data only as needed to operate the Service:
- Google Cloud / Firebase — hosting, authentication, database, file storage, and background processing.
- Stripe — payment processing and subscription billing.
- Meta Platforms (Facebook, Instagram, and Threads), TikTok, and LinkedIn — to publish content and retrieve analytics for the accounts you connect.
- Third-party AI providers, including Google (Gemini), Anthropic (Claude), and OpenAI — to generate marketing strategies, captions, and images on your behalf. These providers process the business and brand information you supply solely to fulfil your generation requests.
We do not sell your personal data.
5. Data retention
We retain your data for as long as your account is active. If you permanently delete your account (Settings → Danger Zone), your company's data — including content, media, brand and audience profiles, and credit history — is permanently deleted from our systems, typically within a few minutes. Your subscription is cancelled immediately as part of that process. We retain a minimal internal audit record of account and billing actions (not your business content) for security and compliance purposes.
6. Your rights
Under the PDPA, you have the right to access, correct, and request deletion of your personal data, and to withdraw consent to our processing of it (which may limit or end your ability to use the Service). To exercise any of these rights, contact us at hello@socialtapir.com. You can also delete your own account and all associated data at any time from Settings → Danger Zone.
7. Data deletion
You can request deletion of your data in either of the following ways:
- Self-service: sign in, go to Settings → Danger Zone, and choose Delete this account. This permanently deletes your company's data — content, media, brand and audience profiles, connected social accounts, and credit history — from our systems, typically within a few minutes, and cancels any active subscription immediately.
- By request: email hello@socialtapir.com from the address on your account asking us to delete your data, and we will process the request and confirm once it's complete.
If you disconnect a Facebook, Instagram, Threads, TikTok, or LinkedIn account from Social Tapir (Social Accounts page) or remove Social Tapir's access from that platform's own settings, we delete the stored access token for that connection immediately — this does not delete your Social Tapir account or its other data, which follows the process above.
8. Data security
We use industry-standard technical and organizational measures — including encryption in transit, access controls, and Google Cloud's infrastructure security — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International data transfer
Our infrastructure (Firebase/Google Cloud) and some third-party processors may store or process data outside Malaysia. Where this occurs, we rely on our processors' own compliance measures and contractual safeguards to protect your data.
10. Children's privacy
The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page.
12. Contact us
Questions about this Privacy Policy or your personal data can be sent to hello@socialtapir.com, or by mail to MAGNUS DIGITAL SDN BHD, 2-9, Tiara Mutiara 2, Jalan Puchong, Off Old Klang Road, 58200 Kuala Lumpur, Malaysia.