Privacy Policy

Last updated: 2026/09/17

1. Data Controller

The data controller for this Service is:

  • Company Name: SocialForge AI Pte. Ltd.
  • Registered Address: 1 Raffles Place, #20-01, Singapore 048583
  • Privacy Contact Email: privacy@socialforge.ai
  • Data Protection Officer: Not applicable at this time

2. Personal Information We Collect

2.1 Information You Provide

  • Account Information: Email address, display name, and password (encrypted storage)
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment processor (see Section 5)
  • Communication Records: Emails, support tickets, and feedback you send to customer support
  • Social Media Data: Access tokens and profile information when you connect social media accounts

2.2 Information We Collect Automatically

  • Device & Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request timestamps, error logs, performance data

2.3 Third-Party Login

When you sign in with Google, we obtain authorized basic profile information.

3. How We Use Your Personal Information

Purpose Legal Basis
Providing and maintaining ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be traced to specific individuals.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes

You can adjust preferences through your browser settings or our Cookie Preference Center.

5. Information Sharing and Disclosure

We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share information in the following circumstances:

  • Service Providers: Cloud computing, payment processing, customer support, analytics, etc., bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
  • Legal and Regulatory Requirements: In compliance with laws, court orders, or legitimate government requests
  • Business Transactions: In cases of merger, acquisition, etc., with advance notice and continued protection obligations
  • With Your Consent: For other purposes with your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS/HTTPS
  • Storage Security: Sensitive data such as passwords is encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits: Periodic vulnerability scanning

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery per GDPR requirements. Please keep your account credentials safe and do not share them with others.

7. Personal Information Retention Period

Data Type Retention Period Disposal
Account informationDuring validity; 90 days after account deletionDelete or anonymize
Transaction recordsAs required by law (typically 7 years)Delete or archive
Customer support records3 yearsSecure deletion
Security audit logs12 monthsSecure deletion

8. Your Data Rights

To exercise the following rights, contact us at privacy@socialforge.ai. We will process requests within 30 calendar days.

Right Description
Right to be informedKnow what data we collect and how we use it
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion of data under specific conditions
Right to restrict processingPause data processing under specific conditions
Right to data portabilityObtain your data in machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for consent-based processing

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to our Service via email or in-app notifications. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in Account Settings, or contacting us. Opting out does not affect service-related notifications (such as billing and security alerts).

10. International Data Transfers

Our servers and partners may be located in Singapore and the United States. When transferring data across borders, we protect data security through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Transfers only to recipients providing equivalent protection levels

11. Children's Privacy

This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors under this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for the data practices of third parties and recommend that you review their policies before using them.

13. Policy Changes

Material changes will be notified at least 15 days in advance via platform announcement or your registered email, and the "Last Updated" date at the top of this page will be revised. Continued use after the effective date constitutes acceptance of the revised Policy.

14. Contact Us