Privacy Policy
1. Who we are
SocialNow AI (“SocialNow”, “we”, “us”) provides a digital marketing automation platform at socialnowai.com and in the SocialNow Android app (together, the “Service”). The Service helps businesses plan campaigns, create and publish social media posts, reply to comments and messages, and manage the leads that result.
This policy explains what personal data we handle, why, and the choices you have. It applies to visitors of our website, people who create an account (“you”), and, where we process it for our customers, people who interact with our customers’ social media accounts. Questions: [email protected].
2. Summary
- We collect what we need to run the Service: your Google sign-in details, your business information, the social accounts you connect, and the content and leads the Service manages.
- We do not sell personal data, we do not show ads, and we do not use your content or your customers’ data to train AI models.
- We use no advertising or analytics cookies.
- We never see your social media passwords or your card, UPI or bank details.
- You can export your leads, disconnect accounts at any time and ask us to delete your data.
3. Information we collect
Account information. You sign in with Google. Google shares your name, email address, account ID, profile picture and whether your email is verified. We never receive your Google password.
Business information. Details you add to your business profile: business name, products and services, prices and offers, target customers, contact details, website, logo, brand colours and style. When you ask us to import your website, we read its public pages to fill this profile. When you upload a brochure, menu or price list, we read it for the same purpose.
Voice input. If you describe your business by voice, your device or browser’s speech service converts it to text and we receive only the text. The Android app asks for microphone permission only for this, and only when you tap the microphone.
Connected social media accounts. When you connect Instagram, Facebook, WhatsApp, X (Twitter), YouTube, Reddit, LinkedIn, Pinterest or TikTok, you sign in on that platform’s official page and approve the permissions shown. Depending on the platform and permissions, we receive: account ID, username, name and profile picture; follower, following and post counts; your posts with their likes, comments, reach and engagement figures; comments on your posts, including the commenter’s public username and comment text; and messages sent or received through automations you turn on.
Content. Campaign plans, posts, captions, hashtags, images and posters you create or upload, your media library, publishing schedules, auto-reply rules and tracked links.
Leads. When people respond to your campaigns, the Service records the username, the name and phone number or email they choose to share, the keyword and campaign they responded to, and the status and notes you add. See section 7.
Payments. Subscriptions are processed by Razorpay. We receive the plan, amount, status and transaction references. We never receive or store card, UPI or bank account details.
Tracked link clicks. When someone opens a SocialNow short link, we record the time, the website that referred them (domain only) and a one-way code calculated from their IP address and browser details with a salt that changes daily. This counts unique visitors without storing the IP address.
Technical information. Like most online services, our servers log IP addresses, browser type, pages requested, timestamps and errors, to keep the Service secure and fix problems.
Homepage voice assistant. If you choose to talk to the voice assistant on our homepage, your voice and the conversation are processed by the assistant’s provider to answer you.
Support. Messages you send us and our replies.
4. How we use information
- To provide the Service: build your business profile, plan campaigns, write and design posts, publish them, reply to comments and messages, capture leads and show analytics.
- To keep accounts and the Service secure, prevent abuse and enforce our Terms of Service.
- To process subscriptions and credits.
- To answer support requests and send service messages, such as failed-post alerts or billing notices.
- To understand and improve how the Service works, using aggregated information that does not identify you.
- To meet legal obligations.
Where laws such as the GDPR apply, our legal bases are: performing our contract with you; our legitimate interests in running, securing and improving the Service; your consent where we ask for it; and legal obligations. Under India’s Digital Personal Data Protection Act, 2023, we process personal data for the purposes you consent to when using the Service and for legitimate uses the Act permits.
5. AI processing
To write captions, plan campaigns, read websites and documents, and design images, we send the relevant business information, instructions and images to AI models through OpenRouter, including models from Anthropic, Google and OpenAI. These providers process the data to return results under their own terms and privacy policies. We do not use your content, or the personal data of your customers, to train AI models. You review AI-generated content before it is published.
7. Your customers’ data (leads)
When you use the Service to reply to people and collect their contact details, you decide why and how that data is used, and we process it on your behalf. You are responsible for having a lawful basis to contact these people and for telling them how you use their information. The Service only messages people who interacted with your account, such as by commenting your keyword, and you can pause any automation at any time.
If you are one of our customers’ leads and want your details removed, please contact the business you interacted with. You can also write to us at [email protected] and we will pass your request on or help directly.
8. Where information is stored
Our application servers and database are hosted by Contabo in France (European Union). Images and media are stored with Cloudflare. Some service providers, such as AI providers, may process data in other countries, including the United States. When data is transferred internationally, we rely on our providers’ contractual and security commitments to protect it.
9. How long we keep information
- Account, business, content and lead data: while your account is active.
- After you ask us to delete your account: deleted from our active systems within 30 days; copies in backups are removed as those backups expire.
- Tracked link click records: as long as the link exists in your account.
- Server logs: kept for a short period for security and troubleshooting.
- Payment records: as long as tax and accounting laws require.
10. Your rights and choices
Depending on where you live, you can ask to:
- access the personal data we hold about you, or get a copy;
- correct inaccurate data (most of it you can edit yourself in the app);
- delete your data and account;
- withdraw consent or object to certain processing;
- nominate someone to exercise your rights on your behalf, where the DPDP Act allows.
You can export your leads as a CSV file, disconnect any social account in the app’s Connections page, and revoke our access in each platform’s own settings. To delete your account, follow our Data Deletion instructions. Email [email protected] for any other request; we reply within 30 days. If you are not satisfied, you may complain to your data protection authority, such as the Data Protection Board of India or your local EU/UK supervisory authority.
12. Security
We use HTTPS everywhere, keep each business’s data in a separate database area, connect social accounts only through official permission-based logins, and limit access to production systems. No system is perfectly secure; if we learn of a breach that affects your personal data, we will notify you and the relevant authorities as the law requires.
13. Google, YouTube and Meta data
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. If you connect a YouTube channel, you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke our access at any time in your Google account security settings.
We use data from Meta platforms (Instagram, Facebook, WhatsApp) only to provide the features you turn on, in line with Meta’s Platform Terms. You can remove our access in your Facebook or Instagram settings under Apps and Websites, and request deletion as described on our Data Deletion page.
14. Children
The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy as the Service changes. We will change the date at the top, and for significant changes we will tell you by email or in the app before they take effect.
16. Contact and grievances
For privacy questions, requests or grievances, including under India’s DPDP Act, contact our grievance team:
- Email: [email protected]
- Phone: +91 82863 06019
- Address: 811, C-Wing, Kailash Business Park, Hiranandani, Powai Road, Mumbai, Maharashtra 400079, India