Data Security
Legal Entity: SOFRIQ TECHNOLOGIES (SMC-PRIVATE) LIMITED
Last updated: October 2, 2026
We make every effort to protect your information using appropriate security safeguards. You can help keep your account and data secure by keeping your password private, not sharing sensitive information or private access links, and protecting the devices you use to access Sofriq.
Account and Session Security
Passwords for Sofriq accounts are completely hashed rather than stored as readable text. Even SOFRIQ Engineers cannot see your passwords. Authenticated requests are checked by the application. Sofriq uses HTTPS which encrypts data in transit. It means that your data is encrypted while being transmitted over the internet.
Publish
Sofriq does not ask for or store your Pinterest, Facebook, or Instagram password. When you authorize a connection, the platform provides access tokens that let Sofriq perform the actions you approved. Stored social access tokens are encrypted and decrypted on the server only when needed to make an authorized request. Tokens awaiting account selection are also encrypted and expire after a limited period.
Keep your Sofriq login secure, connect only accounts you control, and disconnect accounts you no longer want to use. You can also review or revoke Sofriq's permissions in the relevant social platform's settings.
Convert
Convert checks that stored source files belong to your account before processing them. URL imports are fetched and validated by the server, and conversion runs server-side. Converted files are stored privately for download; the signed download links are time-limited. Keep source URLs and download links private, and only submit images you have permission to use.
Media Library
Media records are associated with the account that uploaded them, and new media is private by default. Sofriq uses signed, time-limited URLs for uploads and downloads rather than making the storage bucket public. Keep these links private while they are valid.
Transport and Temporary Access
Production traffic is redirected to HTTPS. Some file transfers use time-limited signed URLs so a file can be uploaded or downloaded without making the storage bucket public. Treat any signed URL as private while it remains valid.
Service Providers
Sofriq relies on service providers for database, file storage, image processing, analytics, and payments. Information handled by those providers is also subject to their security practices and terms. Sofriq does not claim that any safeguard eliminates every risk of unauthorized access, loss, or misuse.
Security Questions or Concerns
If you believe your Sofriq account or connected channel has been accessed without permission, contact support@sofriq.com. Include enough information for us to identify the account, but do not email passwords or access tokens.