Somera Privacy Policy
Last updated: 2025.09.27
1. Who we are
Somera Sosyal Medya Araştırma Ölçümleme ve Analiz Anonim Şirketi ("Somera", "we", "us") provides tools to connect, moderate, and manage your authorized third party online accounts and to monitor public digital media content in line with each platform's policies.
Contact here
2. How we connect to third party Platforms
When you connect a Platform account, you authorize our app via OAuth or an equivalent authorization flow. Somera requests only the permissions that are necessary to moderate accounts and content that you administer on each Platform. You can revoke Somera's access at any time from the relevant Platform's settings.
3. Categories of data we process
"Account and profile": name, email, organization details.
"Connected accounts": OAuth identifiers, access and refresh tokens, selected scopes, and platform account IDs you authorize. Somera does not collect or store your third party passwords.
"Service data": configuration, logs, usage events, device or browser information.
"Platform": Third party service you connect to Somera.
"Platform Data": Content and metadata retrieved from or sent to a Platform through an authorized integration, including posts, comments, reviews, messages, usernames, ids, timestamps, reaction counts, and your moderation actions.
"Services": Somera websites, applications, APIs, dashboards, and related services.
"Policy": applies to Somera websites, applications, and services. Somera's Privacy Policy forms part of its wider Terms of Service. Both the Terms of Service and Privacy Policy apply to your use of the Services.
Somera does not collect or store your Platform passwords.
4. Purposes and legal bases
We process personal data and Platform Data to: Provide and secure the Services; enable integrations you request; comply with Platform rules; maintain logs and audit trails; improve service quality; and meet legal obligations. Our legal bases include performance of contract, legitimate interests in providing and securing the Services, consent where required, and compliance with law.
5. OAuth and tokens
We use OAuth or the platform's equivalent to connect accounts. We request the minimum necessary scopes and document them. Tokens are encrypted at rest, rotated per platform rules, and deleted when you disconnect or after inactivity. You can revoke access through platform settings at any time.
6. Retention and deletion
A user becomes "inactive" when any of these occurs: 1) no use for more than 3 months; or 2) non payment for 30 days; or 3) Somera terminates for breach; or 4) the customer cancels. Inactive users enter a 30 day grace period. At the end of that period, the user account and associated Platform Data are deleted from Somera systems. Logs retained for security or legal reasons are minimized and are not used to provide the Services.
7. Data location and international transfers
Somera is a Turkish company with servers in Türkiye and in the European Union. When you authorize connections to third party Platforms, data may be transmitted to or from those Platforms' servers, many of which are in the United States or other countries outside Türkiye and the EU. Those transmissions are governed by the Platform's own terms and policies. Somera limits its own processing to what is necessary to provide the Services and uses contractual safeguards and technical measures appropriate to the transfer context. Nothing in this Policy expands Somera's responsibility for independent Platform processing.
8. AI assistance providers
To help analyze non personal content, we may use third party AI services from OpenAI, Google, or Anthropic. We do not share personal information with these providers and we take steps to avoid sending personal data in prompts.
9. Apps and app store reviews
Somera provides web applications including progressive web apps. If you use Somera to draft or post responses to app store reviews, your use remains subject to the relevant store's rules for ratings, reviews, and responses.
10. Sharing of information
We may share information with service providers that host, secure, or support the Services, under contracts that require confidentiality and appropriate security. We may also share information: to comply with law or legal process; to protect our rights, users, or the public; to investigate abuse, fraud, or security incidents; with affiliates under common control; in connection with a corporate transaction such as a merger, acquisition, or sale of assets; to execute your instructions or fulfill your requests; and as necessary to operate and maintain the Services. We do not sell personal data.
11. Cookies and related technologies
We use cookies and similar technologies to provide required functions and to improve the Services. This includes session cookies for authentication and performance cookies to understand usage patterns, including Google Analytics. You can manage cookies in your browser settings. Disabling cookies may limit functionality.
12. Security
We apply administrative, technical, and organizational measures, including encryption at rest for tokens, TLS in transit, least privilege access, monitoring, and incident response procedures.
13. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You may revoke Platform permissions at any time from the relevant Platform. Contact here.
14. Children
Somera is not directed to children. We do not knowingly process data of children under applicable age thresholds.
15. Changes to this Policy
We may update this Policy from time to time. We will post the updated version and change the "Last updated" date. Material changes may be notified through the Services or by email where required.
16. Platform specific disclosures and related links
By connecting a platform to Somera or using any Somera feature that accesses that platform's content or data, you acknowledge and agree that your use is governed by that platform's own terms, policies, and community rules; and you further acknowledge and agree that where Somera uses that platform's APIs or SDKs, your use of Somera in connection with that platform is subject to the platform's applicable API terms, developer policies, and data use rules.
YouTube: Somera uses YouTube API Services. By utilizing those features you agree to the YouTube API Services Terms of Service. We comply with YouTube Developer Policies, YouTube API Services Terms and Google API Services User Data Policy including respecting user privacy, minimum functionality of the embedded player, and audit obligations. Users can revoke access at any time via Google Account permissions.
https://www.google.com/policies/privacy
https://www.youtube.com/t/terms
https://developers.google.com/youtube/terms/api-services-terms-of-service
https://developers.google.com/youtube/terms/developer-policies
https://developers.google.com/terms/api-services-user-data-policy
Meta (Facebook and Instagram): We host a public Data Deletion Instructions page and honor deletion requests. We request and use only the data necessary for the features you enable.
https://www.facebook.com/privacy/policy/
https://developers.facebook.com/terms
https://developers.facebook.com/policy
X: We follow X developer and platform policies and do not use X content to train general purpose AI models.
https://developer.x.com/en/developer-terms/agreement-and-policy
LinkedIn: Our LinkedIn integrations, if enabled, are limited to approved use cases and are subject to access tier restrictions.
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/legal/l/api-terms-of-use
TikTok: We use OAuth 2.0, request the minimum scopes, and follow TikTok Developer Guidelines and rate limits.
https://www.tiktok.com/legal/page/us/privacy-policy/en
https://developers.tiktok.com/doc/our-guidelines-developer-guidelines
https://developers.tiktok.com/doc/app-review-guidelines
Google and Google Business Profile: We follow the Google API Services User Data Policy and request minimum scopes.
https://www.google.com/policies/privacy
https://developers.google.com/terms/api-services-user-data-policy
https://developers.google.com/my-business/content/terms
https://developers.google.com/my-business/content/policies
WhatsApp Business Platform: We process phone numbers and message content to deliver messages on your behalf only with documented opt in. We honor opt out messages and deletion requests and require customers to maintain proof of opt in.
https://www.whatsapp.com/legal/privacy-policy
https://www.whatsapp.com/legal/business-app-privacy-policy
https://www.whatsapp.com/legal/business-terms
https://www.whatsapp.com/legal/business-solution-terms
Telegram: We follow Telegram API and Bot Platform terms.
https://core.telegram.org/api/terms
https://telegram.org/tos/bot-developers
Bluesky: We register per instance as required, follow instance policies, and process only permitted data.
https://bsky.social/about/support/privacy-policy
https://docs.bsky.app/docs/support/developer-guidelines
Mastodon: We register per instance as required, follow instance policies, and process only permitted data.
https://mastodon.social/privacy-policy
https://docs.joinmastodon.org/entities/PrivacyPolicy
https://docs.joinmastodon.org/api
VKontakte: Integrations are via official APIs and subject to VK rules.
Apple App Store: If you respond to reviews using Somera, your use may remain subject to the Apple App Store policies for ratings, reviews, and responses.
https://www.apple.com/legal/privacy/data/en/app-store
https://developer.apple.com/app-store/app-privacy-details
https://developer.apple.com/app-store/review/guidelines
Google Play: If you respond to reviews using Somera, your use may remain subject to the Google Play policies for ratings, reviews, and responses.
https://policies.google.com/privacy
https://support.google.com/googleplay/android-developer/answer/16543315
Huawei App Gallery: If you respond to reviews using Somera, your use may remain subject to the Huawei AppGallery policies for ratings, reviews, and responses.
https://developer.huawei.com/consumer/en/doc/app/AGCPrivacyStatement
https://developer.huawei.com/consumer/en/doc/AppGallery-connect-Guides/agcapi-overview
17. Deletion requests
For data deletion or account removal, check this page. Somera deletes the account and Platform Data at the end of the 30 day grace period after an account becomes inactive as described in section 6.