What Soclo will never do without asking
Handing routine work to software is only reasonable if you know exactly where its authority stops. This guide sets out the boundaries that do not move, whatever your settings — and the things no legitimate tool, including this one, will ever ask you for.
Money decisions always need you
Five things always require your explicit confirmation, regardless of how much you have automated elsewhere:
- Bank details
- Prices
- Campaign budgets
- Refunds
- Payment settings
This is a fixed boundary rather than a default you can turn off. Automation covers routine production work — drafting, adapting, scheduling — and stops at anything that moves money or changes what a customer pays. If you ever see one of these change without having confirmed it, treat that as a fault and report it.
Your passwords are not part of the deal
Soclo never asks for your social media passwords and never stores them. Connecting an account sends you to that platform's own sign-in and permission screen; you approve a specific list of permissions there, and the platform issues Soclo a token that stands in for that approval. The token is limited to what you approved, it expires, and you can revoke it yourself.
This is worth internalising as a general rule, not a Soclo fact. No legitimate tool asks for your social media password. Anything that does — however convincing the branding — is trying to take your account.
You can withdraw access without asking us
Because access is a token you granted on the platform, you can withdraw it on the platform. Every major service has a connected-apps or business-integrations screen listing what has access, and removing Soclo there takes effect immediately. You do not need to contact anyone, and nothing you have already published is affected.
That asymmetry is the point of the design: permission you can take back unilaterally is meaningfully different from a password you have handed over.
Publishing happens on your terms
Routine work can be approval-first or hands-free, and that is your choice to make per task, inside permissions and a credit cap that you set. Two things are worth knowing:
- Set the credit cap deliberately. It is the practical limit on how much automated work can cost you, and it is worth choosing rather than accepting.
- A first website launch always requires the owner to tap Publish. Nothing goes public on your domain because a process decided it was ready.
If you would rather review everything, that is a perfectly reasonable way to run it. Approval-first is not a lesser mode.
A password. A verification or two-factor code. Full card details. Identity documents by email. If a message asks for any of these — even one that looks like it came from Soclo — do not reply. Report it instead.
What Soclo will not claim
A boundary of a different kind, but one worth stating. Soclo does not tell you that a particular post caused a particular sale when the evidence cannot establish it. Directly measured facts — link activity, bookings, payment records — are kept separate from interpretation, and a rise that happened during a campaign is reported as a rise that happened during a campaign.
Nobody can honestly guarantee search rankings, advertising performance or revenue, and software that offers to is describing something it does not control. If you want the longer argument, the blog covers what social media measurement can and cannot prove.
Your data and how to leave
You can delete your account and data through a dedicated route on the site rather than by negotiating with anyone, and data-rights questions go to a named privacy address. An easy exit is part of a product being trustworthy — a service that makes leaving difficult is telling you something about how it views the relationship.
| If you need to… | Go to |
|---|---|
| Delete your account and data | Account deletion |
| Ask a data-rights question | [email protected] |
| Report content or a likeness concern | The public report route |
| Understand how data is protected | Security and the Trust Centre |
| Check whether something is actually live | Product updates |
| Raise a complaint | Complaints |
How to tell when something is wrong
Three signals worth acting on immediately: a payment setting, price or bank detail that changed without you confirming it; a message asking for a password, code or card details; or something published from an account when you had that task set to approval-first. None of these should be possible. If you see one, revoke access on the platform, then get in touch with what you saw and roughly when.
Where to go next
Connecting your accounts and publishing covers what a connection grants in practice and why one might stop working. How Soclo credits work explains the credit cap and where spending can and cannot happen.
Common questions
Can Soclo spend my money without asking?
No. Bank details, prices, campaign budgets, refunds and payment settings always require your confirmation. No automation setting changes that — it is a fixed boundary rather than a preference you can switch off.
Will Soclo ever ask for my social media password?
No, and nothing legitimate will. Accounts are connected through each platform’s own sign-in and permission screen, which issues a limited, revocable token. Your password is never seen or stored by Soclo.
Can Soclo publish something without my approval?
Only if you have explicitly allowed that task to run hands-free, and only within the permissions and credit cap you set. You can keep everything approval-first, and the first launch of a website always requires the owner to tap Publish.
How do I revoke Soclo’s access to a platform?
From inside that platform’s own connected-apps or business settings. Because access is a token you granted there, you can withdraw it there at any time without going through Soclo.
What will Soclo support never ask me for?
A password, a verification or two-factor code, full card details, or identity documents by email. If any message asks for those, it is not legitimate — report it rather than replying.
How do I delete my account and data?
There is a dedicated account deletion route on the site, and data-rights questions go to [email protected]. Deletion is a route Soclo is required to provide, not a favour you have to negotiate for.
Still stuck? Tell us the screen or address, what you expected and what happened. Never send a password, verification code or full card details.
Email Soclo support →