Privacy Policy

Who we are: Socira AI is developed and operated by Thetechhacker Global Solutions, Thetechhacker Global Solutions, India. This Privacy Policy explains how Thetechhacker Global Solutions ("we", "us", "our") collects, uses, shares, and protects personal data when you use Socira AI (the "Service"). We are the data controller for personal data of account holders and, where noted, a data processor acting on your instructions for the data of your social media audiences.

1. What We Collect

Account & billing data

Name, email, hashed password, organization name, role, billing address, invoices and payment references. Card, UPI and wallet details are entered on our payment providers' pages (Stripe, Razorpay or PayPal) and never touch our servers.

Connected-account data

You connect social networks only through each network's official sign-in (OAuth); we never receive your social media passwords. We receive access tokens (stored encrypted) and the data the network provides for the permissions you approve (profile handle, display name, page IDs, follower counts, posts, comments, messages, insights). We store only what is necessary to operate the features you use. Network-by-network details, including our Google API Services Limited Use commitment, are on our Platform data page.

Content you upload

Draft posts, images, videos, audio, replies, saved queries, boards, and reports.

Usage & device data

IP address, browser and device type, pages visited, features used, timestamps, crash reports, and diagnostic logs. See our Cookie Policy for cookies and similar technologies.

Support & communications

Emails, chat messages, and any information you provide when contacting us.

2. How We Use It

• Provide the Service. Authenticate you, sync your connected accounts, publish scheduled posts, run analytics and listening features, and process payments.
• Improve the Service. Understand usage, fix bugs, and develop new features. We aggregate or anonymize data where possible.
• Security. Detect and prevent fraud, abuse, and unauthorized access; keep audit logs.
• Communicate. Send transactional messages (invoices, security alerts, product changes) and, only with your consent, marketing.
• Comply with law. Meet tax, accounting, and other legal obligations, and respond to lawful requests.

AI features

If your workspace owner connects an OpenAI or Anthropic account, text you submit to AI features is sent to that provider under your workspace's own agreement with it. We do not use your content or data received from social networks to train AI models.

3. Legal Bases (GDPR/UK GDPR)

We process personal data on the following bases: contract (to provide the Service you signed up for), legitimate interests (to secure, improve, and market the Service in a proportionate way), consent (for optional cookies and marketing emails), and legal obligation (tax, accounting, lawful requests).

4. Sharing

We do not sell personal data. We share data with:

• Sub-processors that host, run, or support the Service — see Sub-processors.
• Social networks — only what is needed to perform the actions you request (e.g., publishing a post, reading comments).
• Professional advisors — lawyers, accountants, auditors, under confidentiality.
• Authorities — when required by law, or to protect the rights, safety, or property of Thetechhacker Global Solutions, users, or the public.
• Business transfers — in a merger, acquisition, or asset sale, subject to equivalent protections.

5. International Transfers

We operate from India and may transfer data to sub-processors in other countries. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.

6. Retention

We keep account data while your account is active and delete it within 30 days of closure, except records we are legally required to keep (such as invoices, kept for 8 years). The full schedule is on our Data retention page, and you can ask us to delete your data at any time (how).

7. Security

We use bcrypt for password hashing, TLS in transit, AES-256-GCM encryption for tokens and keys at rest, a strict Content Security Policy, rate limiting, CSRF and account-lockout protection, optional two-factor sign-in, automatic session expiry, and role-based access. Details are in our Security Overview. No system is perfectly secure — you must also keep your credentials safe.

8. Your Rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, to receive it in a portable format, and to withdraw consent. To exercise any right, email thetechhackerlabs@gmail.com. See our GDPR & Your Rights page for details, including your right to lodge a complaint with a supervisory authority. Residents of India should see our DPDP notice (including our Grievance Officer), and residents of US states our US privacy notice.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have, please contact us so we can delete it.

10. Marketing

We send transactional emails necessary to operate the Service (invoices, security alerts, service changes). We only send marketing emails if you opt in, and you can unsubscribe from every marketing email.

11. Automated Decisions

Our sentiment scoring, comment quality grading, and social listening features rank content using automated models. These do not have legal or similarly significant effects on you. Human review is always available on request.

12. Changes to This Policy

We may update this Policy. If we make material changes, we will notify you in-app or by email at least 15 days before they take effect.

13. Contact the Data Protection Officer

Thetechhacker Global Solutions — Data Protection Officer
Thetechhacker Global Solutions, India
Email: thetechhackerlabs@gmail.com