Your content. Clear data practices.
This notice describes the Social Desk planning beta operated under the Wolf Tribunal brand.
What is stored and why
Google sign-in provides a verified email and Google account identifier through Wolf Tribunal’s sign-in service. It does not give us access to your Gmail inbox. Optional ChatGPT sign-in provides a Site-scoped account identifier, verified email and optional display name. Social Desk stores the identifier and email when you start making workspace changes, to associate your records and support requests with your account.
Secure session cookies last up to 30 days; temporary sign-in requests expire after ten minutes. If you explicitly connect your Google and ChatGPT sign-ins, we store their association with one workspace. We store the brand details, drafts, captions, dates, media, revisions, reviews, campaign briefs, links, manual performance figures and support messages you choose to save. These records support the planning and review features you request.
Operational monitoring
For write actions, the app stores the operation type, dashboard or ChatGPT source, outcome, duration, time and account identifier. It does not copy the request payload into the operational event log. The owner uses these records to understand failures, capacity and product use. Read-only plugin calls and anonymous visits are not tracked by application analytics. Hosting providers may maintain their own infrastructure logs.
The owner dashboard can view account emails, aggregate workspace counts, delivery exception titles and errors, and submitted support messages. The application does not offer the owner a general browser for customers’ captions or private media.
Who processes the data
Google authenticates your Google account. Hosting, optional ChatGPT sign-in and connected conversations use OpenAI services; database and object storage use Cloudflare through the hosting service. The guided planner only shares your brand brief with ChatGPT when you copy and paste its prompt. When you use the connected ChatGPT plugin, requested workspace content is returned to your conversation. If social publishing is activated later, the approved caption and public media references are sent to the selected provider. Provider access tokens remain runtime secrets and are not returned by workspace or admin tools.
No third-party advertising pixels, marketing email service, payment checkout or public link-page analytics are enabled in this release.
Retention and controls
Your content is retained until you delete individual records or your workspace. Deleting a post removes its saved revisions, notes and metrics, while its activity entry remains until workspace deletion. Support requests remain until workspace deletion. Operational write events older than 30 days are removed when a subsequent write is recorded; they may remain longer during inactivity.
Action receipts used to prevent duplicate writes remain until workspace deletion. Your JSON export contains workspace records and authenticated file download paths, rather than copies of uploaded media. Deletion removes media from active object storage and clears your application records. Hosting-provider logs or recovery copies follow those providers’ retention processes; this interface does not control them.
Contact and choices
Use Support & data to submit a privacy request, export records or delete your workspace. You may stop using the plugin by disconnecting it in ChatGPT. Disconnecting the plugin does not itself delete stored workspace content. Do not upload confidential regulated records or other people’s sensitive information to this social content pilot.