Privacy Policy

1. Who controls your data

The controller is SOCIOS A.I USA LLC, with its registered office at 7550 Futures Drive, Suite 204, Orlando, FL 32819, United States.

Contact channel for any privacy matter: socio@sociosai.com.

When you use the platform to process data about your own customers and followers, you act as the controller of that data and we act as processor, following your instructions.

2. Data we collect

We collect only what is needed to run the platform, charge for the service and meet legal obligations.

• Account data: name, email, phone, language, time zone and, for companies, legal name and tax identification.
• Billing data: plan, invoice history and the transaction identifiers issued by the payment processor. We do not store full card numbers.
• Connected account data: public identifiers, username, profile picture, authorised pages and profiles, plus the access tokens issued by each platform.
• Content you submit: text, images, video, schedules, internal comments and media library files.
• Usage data: access logs, IP address, session identifier, browser, pages visited and actions taken in the dashboard.
• Support data: messages, attachments and ticket history.

3. Why we use data and on what legal basis

Each processing activity has a specific purpose and a matching legal basis among those recognised by applicable data protection law.

• Performance of the contract: creating and maintaining your account, publishing to connected accounts, processing payments and providing support.
• Legal or regulatory obligation: tax documents, retention of access logs for the period required by applicable law and responses to competent authorities.
• Legitimate interest: platform security, fraud and abuse prevention, aggregate product metrics and usability improvements.
• Consent: non-essential cookies, marketing communications and optional AI features that send content to external providers. Consent can be withdrawn at any time.

4. Artificial intelligence features

When you use an AI feature, the prompt content and the material you selected are sent to the configured model provider to generate the requested output.

We do not use your content to train our own models. Our providers are contractually barred from using it for training, and the list is published on the Subprocessors page.

Do not include sensitive personal data, credentials or trade secrets in prompts.

5. Data received from connected platforms

When you connect an account we receive only the data you authorise in the permission flow, and we use it solely to deliver the features you contracted.

Prisma's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data obtained through Meta APIs is handled in accordance with the Meta Platform Terms and Developer Policies. We do not use it for advertising, external profiling or resale.

You can revoke access at any time by disconnecting the account in the dashboard or in the social network's own settings.

6. Who we share data with

We do not sell personal data. We share only what is necessary and always under a data protection agreement.

• Infrastructure, email, storage and payment processors, listed on the Subprocessors page.
• Social media platforms, when you request a publication or a query.
• Public authorities, when there is a substantiated legal request.
• Third parties in a corporate transaction, with prior notice and the same safeguards maintained.

7. International transfers

Our infrastructure and some AI providers may operate in a country other than yours. In those cases we apply appropriate contractual safeguards, including the European Commission's Standard Contractual Clauses where the GDPR applies.

8. How long we keep data

We keep data for as long as the purposes above and legal deadlines require.

• Account data and content: while the account is active and for up to 30 days after closure, to allow recovery.
• Access logs: 6 months, or the longer period required by applicable law.
• Tax and billing documents: for the period required by applicable tax law.
• Connected account tokens: revoked immediately on disconnection.

9. Your rights

As a data subject you have the rights below, recognised by the GDPR and equivalent laws. Write to socio@sociosai.com and we will respond within 15 days.

• Confirmation that processing exists, and access to the data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymisation, blocking or deletion of unnecessary or non-compliant data.
• Portability of your data to another provider.
• Deletion of data processed on the basis of consent.
• Information about data sharing and about your option to refuse consent.
• Withdrawal of consent and objection to processing based on legitimate interest.

10. Security

We apply technical and organisational measures proportionate to the risk: encryption in transit (TLS), encryption of credentials and tokens at rest, two-factor authentication, role-based access control, data isolation between workspaces, audit logging and regular backups.

In the event of a security incident involving relevant risk, we will notify you and the competent authority within the deadlines required by applicable law.

11. Children and teenagers

The platform is not intended for people under 18 and we do not knowingly collect data about children or teenagers. Where identified, such data will be deleted.

12. Cookies

We use essential cookies for authentication and security, and optional analytics cookies. Details and controls are on the Cookie Policy page.

13. Updates to this policy

We may update this Policy. Material changes are announced by email or through a dashboard notice before they take effect. The last update date is shown at the top of this page.