Terms of Service

These Terms of Service ("Terms") govern access to and use of Crystal Spotlight Social (https://social.cspt.io), an internal social media management platform operated by Crystal Spotlight ("we", "us", or "our"). By signing in to or using Crystal Spotlight Social, you agree to these Terms. If you do not agree, you must not use the platform.

Crystal Spotlight Social is not a public consumer service. It is provided exclusively to authorised Crystal Spotlight personnel and others explicitly granted access to manage social media on behalf of artist and client workspaces under contract with Crystal Spotlight.

Access is by invitation only. Accounts are created and administered by Crystal Spotlight. You must provide accurate account information, keep your credentials confidential, and enable multi-factor authentication when required.

You are responsible for all activity under your account. Notify us immediately at rob@crystalspotlight.com if you suspect unauthorised access.

Crystal Spotlight Social allows authorised users to schedule and publish content, manage media, view analytics, monitor inbox activity, and collaborate on social posts across connected third-party platforms. Features may change as platforms update their APIs or as we improve the product.

Core capabilities include, without limitation:

• Unified composer with per-platform caption and media overrides
• Calendar and draft management per artist/client workspace
• Automated publishing via scheduled jobs
• Analytics sync from connected platform APIs
• Webhook-driven unified inbox for comments, mentions, and messages where supported
• Media library stored in Cloudflare R2
• Shareable approval preview links for client review
• App-wide known-accounts database for mention autocomplete

Crystal Spotlight Social connects to third-party social networks through their official APIs and OAuth authorisation flows. When you connect an account, you authorise Crystal Spotlight to act on that account through Crystal Spotlight Social within the scopes granted during connection.

Supported platform integrations include:

• Meta (Instagram, Facebook Pages, Facebook Groups, and Threads) via the Meta Graph API
• X (Twitter) via the X API v2
• LinkedIn (personal profiles and company pages) via the LinkedIn Marketing API
• TikTok via the TikTok Content Posting API (subject to TikTok developer approval)

Your use of Crystal Spotlight Social in connection with any third-party platform is also subject to that platform's own terms, developer policies, community guidelines, and rate limits. You must comply with those requirements. We are not responsible for changes, outages, suspensions, or enforcement actions taken by third-party platforms.

OAuth access tokens and refresh tokens obtained during account connection are stored encrypted in our database and used solely to perform actions you initiate in the platform (publishing, analytics retrieval, inbox sync, token refresh, and related operations). Platform application credentials (client IDs and secrets) are configured by administrators within Crystal Spotlight Social and stored encrypted at rest.

When local known-account data does not match a mention query, Crystal Spotlight Social may query the SocialCrawl API ( socialcrawl.dev) to suggest public profile handles for autocomplete in the composer. Search queries and platform identifiers are sent to SocialCrawl. When you select a SocialCrawl result, the display name and handle may be saved to the app-wide known accounts database for future autocomplete.

SocialCrawl is a third-party service. Its availability, accuracy, and data practices are outside our control. Use of mention suggestions remains your responsibility—you must verify handles before publishing.

Crystal Spotlight Social can generate time-limited public URLs that display a post preview for client review and approval. These links do not require login. Visitors can view the preview and edit captions without entering a name. When confirming approval, they enter their name; that name is stored on the post, recorded in activity logs, and may trigger an in-app notification to your team.

Approval links expire after fourteen (14) days unless revoked earlier. You are responsible for sharing links only with intended recipients and for revoking links when no longer needed.

You agree not to:

• Use the platform for any unlawful purpose or in violation of third-party platform rules
• Attempt to access workspaces, accounts, or data you are not authorised to use
• Reverse engineer, scrape, or overload the service or connected APIs beyond intended use
• Upload malicious content or material you do not have rights to publish
• Share login credentials or bypass authentication controls
• Misrepresent client approval or publish content without appropriate authorisation

You and your clients retain ownership of content uploaded to or published through Crystal Spotlight Social. You grant Crystal Spotlight a limited licence to host, process, transmit, and display that content solely to provide the service—including storage on Cloudflare R2, transmission to third-party publishing APIs, and rendering in previews and approval links.

Crystal Spotlight Social software, branding, and documentation are owned by Crystal Spotlight or its licensors. These Terms do not grant you any rights to our intellectual property except the limited right to use the platform as authorised.

We aim to keep Crystal Spotlight Social available and reliable but do not guarantee uninterrupted access. Scheduled publishing depends on Vercel Cron, third-party API availability, and valid OAuth tokens. Publish failures may trigger email alerts via Postmark to configured administrators.

We may modify, suspend, or discontinue features with reasonable notice where practicable. We may update these Terms from time to time; continued use after changes constitutes acceptance.

Crystal Spotlight Social is provided "as is" and "as available" for internal business use. To the fullest extent permitted by law, we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement. We do not warrant that publishing, analytics, or inbox features will be error-free or that third-party platforms will accept all content.

To the fullest extent permitted by law, Crystal Spotlight shall not be liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, data, goodwill, or platform account standing arising from your use of Crystal Spotlight Social or third-party platform actions. Our aggregate liability for any claim relating to the service shall not exceed the amount paid by you to use the service in the twelve months preceding the claim (which, for authorised internal users, may be zero).

We may suspend or terminate your access at any time for breach of these Terms, security concerns, or end of employment/contract. You may cease using the platform at any time. Provisions that by nature should survive termination (including liability limitations and intellectual property) will survive.

These Terms are governed by the laws of England and Wales. Courts in England and Wales shall have exclusive jurisdiction, subject to any mandatory rights you may have under applicable law.

For questions about these Terms, contact rob@crystalspotlight.com.