Who owns social media content created for your small business?

Why is ownership the wrong first question?

Ownership sounds binary, but a social post is usually a bundle. The business may own the raw product photograph, a freelancer may initially own original layout or copy, a stock service may license an image for defined uses, a customer may have supplied a review or portrait, and the platform may receive a license under its own terms. Possessing the exported JPEG, paying the monthly invoice, and controlling the account are different facts.

Start by writing the business outcome the content must survive: ordinary organic publication, paid promotion, resizing, translation, seasonal reuse, website use, print use, transfer to a replacement provider, or archival proof. Then test whether each required right, file, permission, and account role exists. This prevents a vague ownership promise from hiding a practical inability to edit last month’s campaign or remove a former provider.

What are the five layers in the rights map?

Layer one is source authority: who supplied each photo, logo, testimonial, fact, font, track, clip, template, or dataset, and what uses were approved. Layer two is creative rights: who is the author of the original caption, design, photograph, or video and whether ownership was retained, assigned, or licensed. Layer three is deliverable custody: which exported sizes, captions, accessibility text, editable files, raw footage, fonts, and linked assets the business will actually receive.

Layer four is platform control: who owns the Page, profile, Business Manager, ad account, scheduler, recovery method, and connected application. Layer five is operating history: briefs, source links, approvals, version decisions, publication identifiers, live URLs, campaign tags, corrections, analytics definitions, and customer handoffs. Give every layer a green, amber, or red decision. Green means the necessary authority and handoff are documented; amber means a limitation is understood and accepted; red means publication or provider expansion pauses until the gap is resolved.

Who is the author when an employee, freelancer, or agency creates the work?

Under U.S. copyright law, protected work generally begins with its author. The Copyright Office explains that qualifying employee work prepared within the scope of employment can be work made for hire. A commissioned work by an independent contractor is not automatically work made for hire merely because the buyer paid for it; the statutory category and signed written agreement matter. The analysis can be fact-specific, so do not turn a label in a proposal into a legal conclusion.

Ask the provider to identify the intended basis for every important original deliverable: business authorship through qualifying employment, a signed assignment, or a license. If the business expects ownership, the written agreement should identify what is transferred, by whom, when the transfer takes effect, and what pre-existing provider material remains outside it. If a license is the better fit, describe the uses instead of relying on words such as full rights or unlimited content that do not define the actual permission.

How is a license different from owning the creative?

A license can be entirely adequate when it matches the operating need. Write down whether the business may publish on named or future channels, reproduce, crop, caption, translate, adapt, combine, archive, run paid media, use the work after cancellation, and authorize a replacement provider to make changes. Also state duration, territory, exclusivity, attribution, sublicensing, revocation, and any use-based fee or restriction that matters.

The Copyright Office distinguishes copyright from ownership of the physical or digital copy that contains the work, and it explains that transfers of copyright ownership generally require a signed writing. That is why receiving a drive folder is not the same as receiving copyright, while owning copyright does not guarantee that the business received organized editable files. Test the legal-right column and the practical-delivery column separately.

Which source inputs can limit later reuse?

Create an asset register before production. For business-created inputs, record the photographer or author, employment or assignment basis, date, and approved uses. For customer photos, reviews, and testimonials, record the source, exact permission, permitted edits, placements, duration, withdrawal path, and material connection. For stock assets, fonts, music, templates, and software-generated elements, retain the applicable license, plan tier, download or project record, attribution rule, and any restriction on client transfer, paid media, templates, merchandise, or standalone redistribution.

Permission and advertising truth are separate gates. FTC endorsement guidance requires honest endorsements and appropriate disclosure of material connections; obtaining permission to feature a customer’s words does not make an altered or unsupported claim truthful. Preserve the original statement and approval context, review the complete advertisement, and avoid editing a customer contribution into a stronger result promise. If an input’s provenance or allowed use cannot be shown, replace it or pause the derivative rather than hoping the final layout cures the gap.

Who should control the social accounts and connected tools?

Account control is not copyright ownership. Keep the business as the owner or primary owner of its profiles, use named role-based access instead of shared passwords, and grant the provider only the permissions needed for the agreed work. Meta documents Page access and task access that can be edited or removed. Google says Business Profile clients must retain ownership or co-ownership and requires third parties to provide a quick route to end service and regain exclusive control.

Inventory every connected surface: profile, Page, Business Manager, ad account, pixel or tag, scheduler, link-in-bio service, media library, review tool, analytics property, cloud folder, design workspace, and recovery email or phone. Record who can add users, publish, reply, spend, export, revoke tokens, and recover the account. A provider can own its production system without owning the business’s public identity; the contract should explain how approved deliverables and records leave that system.

How do you score a proposal before signing?

Use a 100-point acceptance gate with five 20-point layers. Award up to five points in each layer for clear scope, verifiable authority, usable delivery, and tested exit. Source authority earns points for provenance, permissions, license records, and a pause rule. Creative rights earns points for named authorship, assignment or license terms, pre-existing-material boundaries, and continuing use after cancellation. Deliverable custody earns points for finished formats, editable or raw-file terms, organized captions and accessibility text, and delivery timing.

Platform control earns points for business ownership, least-privilege roles, connected-tool inventory, and tested removal. Operating history earns points for source-linked briefs, versioned approvals, publication and campaign records, and an exportable correction and analytics history. Treat any missing business account ownership, unidentified high-value asset source, or no post-cancellation publication right as a pause condition regardless of the total. A score of 85 or more supports a narrow pilot; 70 to 84 needs written repair; below 70 is not ready for live account or reusable asset access.

What does the rights map look like for one real campaign?

Consider a hypothetical local bakery buying twelve monthly posts. The owner supplies product photos and a logo; a customer authorizes reuse of a review; the provider writes captions and creates layouts with a licensed font; a short video uses music available only through a platform library. The contract assigns the provider’s original captions and layouts after payment, licenses the provider’s reusable production system rather than transferring it, and promises exported post sizes plus an editable package using assets the business may continue to use.

The asset register keeps the owner-photo record, customer permission, font license evidence, and platform-music limitation beside each derivative. The music version is approved only for the eligible platform; the website version uses a separately cleared track. The bakery remains owner of its accounts, the provider receives content task access, and every post record includes source files, final copy, accessibility text, CTA, approval, scheduled profile, live link, and campaign tag. At exit, the bakery can republish the cleared exports and hand the organized package to a new provider without receiving the old provider’s entire internal template library.

What should the offboarding test prove before broad access?

Run the exit before the relationship becomes hard to unwind. Ask for one sample export containing the brief, source register, final asset, caption, accessibility text, rights note, approval, schedule, live identifier, and result definition. Open the editable file in the named software, verify that included fonts and linked assets remain usable, and identify anything that will flatten, expire, watermark, or disappear when a provider subscription ends.

Then test control. Confirm the business can add and remove a provider role, revoke a connected application, change recovery settings, preserve scheduled work, download native analytics where available, and route open customer conversations. Name the final service date, delivery deadline, retention and deletion rule, continuing license or assignment, unfinished-work treatment, and responsibility for removing access. A clean exit test is buying evidence, not pessimism: it proves that the operating model preserves business continuity.

What should the business decide next?

Choose the narrowest arrangement that satisfies the five layers. Continue when the provider can show source authority, a usable rights model, practical file delivery, business-owned accounts, and exportable operating history. Repair the agreement when the intended result is clear but one license, editable-file term, or handoff deadline is missing. Pause when the business cannot identify who may authorize the work, would surrender a core account, or would lose the ability to use paid-for content immediately after cancellation.

Have qualified counsel review important ownership, assignment, licensing, privacy, publicity, employment, and jurisdiction questions. The operational work still belongs to the buyer: collect the real inputs, list intended uses, test the files, retain account control, and verify the exit. Compare providers on the evidence they can deliver across those layers, not on a one-line promise that the client owns everything.