Privacy policy

The operator identified in our Legal notice (“we”, “us”, or “our”) controls personal information used for account administration, billing, support, security, and legal compliance. This policy covers our website and service and should be read with the Terms of service.

We process workspace content on the customer’s instructions under section 12 of the terms. Customers are responsible for the lawful collection and use of their contacts, messages, and other content, including required notices, permissions, and client authorizations.

• Account information: names, email addresses, profile images, authentication identifiers, organization and workspace details, memberships, roles, and settings.
• Billing information: subscription details, billing contacts, invoices, payment status, and transaction identifiers. Stripe collects payment details; we do not store full card numbers or card security codes.
• Instagram information: authorized account identifiers, profiles, media, comments, messages, engagement and insights, and access credentials.
• Workspace content: contacts, collected fields, tags, funnel configurations, replies, uploaded resources, attachments, and delivery, link-visit, usage, and reporting records.
• Support information: correspondence, contact details, feedback, and attachments.
• Technical information: IP addresses, device and browser details, request and authentication events, error reports, and performance and operational records.

Information is received from you, authorized users, connected Meta APIs and webhooks, identity and payment providers, and interactions with the website and service. Instagram data depends on the permissions granted and Meta’s API availability. Information necessary for account access, authentication, or payment must be provided to use the corresponding functions; other profile and submitted content is optional.

If you choose to sign in with Google, we receive your Google account identifier, email address, name, and profile picture, where available, through WorkOS, our authentication provider. Google sign-in provides basic identity information; it does not grant Social Funnels access to your Gmail messages, Google Drive files, Google Calendar, or other Google account content.

We process personal information to:

• Provide accounts, authentication, authorized workspace access, Instagram connections, automation, messaging, contact management, resource delivery, reporting, and billing. For contracting individuals, the basis is performance of the contract; administration of business contacts is based on our legitimate interests.
• Provide support, send essential communications, diagnose and improve the service, and prevent fraud, abuse, and unauthorized access, based on contract performance and our legitimate interests in operating and protecting the service.
• Maintain required records and respond to lawful requests under legal obligations, and establish, exercise, or defend claims based on our legitimate interests.

Where consent is required, it is obtained separately and may be withdrawn. Workspace content is processed on documented customer instructions. Meta platform data is used for the authorized service functions in accordance with applicable platform restrictions.

Google sign-in information is used to create and authenticate your Social Funnels account, maintain your profile and sessions, and protect account access. We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine-learning models.

Connections use Meta’s official APIs and authorization process. Credentials are encrypted and used by authorized server operations. An authorization may cover multiple accounts selected by the customer. Revoking authorization stops API access but does not delete stored workspace content. Removal options are set out in the data deletion instructions.

Meta’s processing is governed by its privacy policy and platform terms. Deletion from Social Funnels does not delete original content held by Instagram.

We disclose information necessary for the relevant service to the following providers:

• Cloudflare: application hosting, security, database connectivity, background processing, and file storage and delivery.
• PlanetScale: application database storage, including account, workspace, content, billing, and integration records.
• WorkOS: identity, authentication, memberships, invitations, sessions, and related account communications, including processing Google sign-in information.
• Stripe: payments, subscriptions, invoices, payment methods, and fraud prevention. Stripe also acts as a controller for certain payment and regulatory processing.
• Sentry: filtered application errors and sampled performance diagnostics.
• Resend: support and legal email, including correspondence, sender and recipient details, attachments, and delivery data.

Information is also disclosed to Meta to perform authorized Instagram actions, to organization members according to their permissions, and to recipients of content and delivery links shared through the service. Customers control their authorized users and sharing decisions.

Google sign-in information is processed by WorkOS and stored in our identity and application systems as needed for authentication and account administration, using the hosting and database providers listed above. Your name, profile picture, and account identity may be visible to other members of your organizations and workspaces. Google user data is not shared for third-party advertising or unrelated marketing. Google’s own processing is described in its privacy policy.

We may disclose information to advisers, authorities, or other parties where necessary for legal compliance, security, enforcement, or claims, and in connection with a merger, acquisition, reorganization, or transfer of the business, subject to applicable law.

Personal information may be processed in the European Economic Area and other countries, including the United States. Where required, transfers are covered by an adequacy decision, standard contractual clauses, or another lawful safeguard. Information about applicable safeguards and copies of relevant transfer terms may be requested using the contact below, subject to lawful redactions.

Cookies and browser storage support authentication, security, and preferences. Disabling necessary storage may prevent service functions from working. We use filtered error and sampled performance diagnostics. We do not use advertising pixels or session replay. Optional technologies requiring consent are used only with that consent. Hosted identity and payment pages follow the relevant providers’ notices.

• Account and organization information, including Google sign-in identifiers and profile information, is retained for the service relationship and applicable administrative, legal, and security purposes.
• Saved message history has a rolling 12-month retention period; message attachments follow their message lifecycle. Detailed analytics and Instagram observations have a rolling 24-month period. Aggregate totals and limited deduplication records may be kept longer.
• Contacts, tags, configurations, resources, and related content remain until the applicable deletion or expiry cleanup. Detailed delivery and processing diagnostics are normally retained for 30 days; temporary exports and abandoned uploads expire automatically.
• Trial or subscription expiry starts a 30-day read-only and export period before product-data deletion, unless access is restored. Explicit deletion may remove content earlier. Remaining add-on time does not extend retention.
• Billing, accounting, security, dispute, and support records are retained for applicable legal requirements and as necessary for their stated purposes. Backups and providers’ independent records follow their applicable retention schedules.

Deletion is subject to scheduled processing, legal retention, and applicable statutory retrieval rights. Deleting a personal account does not delete shared organization data. See the data deletion instructions for each action.

To delete Google sign-in information held for your Social Funnels account, delete your personal account or request deletion at hello@socialfunnels.io, subject to the retention exceptions above. You can also revoke Social Funnels access through your Google Account’s third-party connections settings. Revoking access stops future authorized access through that connection but does not itself delete information already stored by Social Funnels or delete your Google account.

We apply technical and organizational measures appropriate to the processing risks, including access controls, secure transport, encrypted integration credentials, private storage, and diagnostic filtering. Absolute security is not guaranteed. You are responsible for protecting your credentials and authorized access.

Subject to applicable law, you may request access, correction, erasure, restriction, or portability, object to processing based on legitimate interests, and withdraw consent without affecting prior lawful processing. We do not make solely automated decisions about account holders that produce legal or similarly significant effects.

Submit requests through available settings or to hello@socialfunnels.io. We may verify identity and authority and apply statutory exceptions, including permitted refusals or fees for manifestly unfounded or excessive requests. Requests are handled within statutory periods. Requests concerning customer-controlled workspace content are handled under the customer data processing terms. You may complain to the CNPD or another competent supervisory authority.

Account holders must be at least 18 years old.

Information you export or share with external applications or AI assistants is subject to their terms and privacy practices. You are responsible for the data and permissions you provide to them.

We may amend this policy and will provide notice or obtain consent where required by law. The date above identifies the current version. Privacy enquiries should be sent to hello@socialfunnels.io.