1. Information We Collect
We collect information necessary to operate, improve, and secure the Socio platform. The categories of information collected include:
- Account & Profile Information: Full name, professional email address, company name, login credentials, and account settings when you register for Socio.
- Business & CRM Data: Contact records, phone numbers, custom tags, deal stages, pipeline values, internal notes, and custom attributes configured within your workspace.
- WhatsApp & Meta Integration Data: WhatsApp Business Account (WABA) IDs, phone number IDs, message template statuses, webhook events, and transmission receipts provided through official Meta APIs.
- Messages and Media Metadata: Text content of incoming and outgoing chats, timestamps, message delivery statuses (sent, delivered, read), sender identifiers, and uploaded attachments (PDFs, images, voice notes) processed through your workflows.
- Device and Technical Data: IP addresses, browser types, operating system details, device identifiers, session access logs, and diagnostic performance metrics.
- Cookies and Local Storage: Essential authentication tokens and user preference cookies stored locally to maintain secure browser sessions.
2. How We Use Information
Socio utilizes collected data exclusively for authorized business purposes:
- To provide, maintain, and deliver our shared inbox, lead pipeline management, and workflow automation services.
- To execute AI-assisted qualification, contextual replies, and auto-scheduling triggered by your workspace configurations.
- To authenticate user sessions, manage role-based access permissions, and prevent unauthorized system intrusion.
- To transmit outbound broadcast campaigns and message templates requested by authorized workspace team members.
- To generate workspace performance metrics, response time analytics, and conversion reports for account administrators.
- To provide customer support, troubleshoot technical incidents, and fulfill billing obligations.
3. AI Processing & Third-Party AI Providers
Socio provides artificial intelligence features to assist with lead qualification, conversation summarization, and suggested replies.
- Zero Unauthorized Training: Socio does not use your proprietary customer data, private chat records, or confidential CRM fields to train public or foundational third-party AI models without explicit written authorization.
- Enterprise LLM Partners: AI requests are processed through enterprise API tiers with strict zero-data-retention compliance.
- Human In The Loop: AI outputs are advisory. Business users maintain full authority to review, edit, approve, or disable automated responses at any time.
4. WhatsApp & Meta Platform Integrations
Socio interfaces with the official WhatsApp Business Cloud API provided by Meta Platforms, Inc. By connecting your WhatsApp Business account to Socio:
- Message transmission and delivery occur over Meta's official network infrastructure subject to Meta's Business and Developer Terms.
- Socio is an independent software application and is not owned, operated, or endorsed by Meta Platforms, Inc.
- You are responsible for ensuring that all messaging templates and promotional broadcasts adhere strictly to Meta's WhatsApp Commerce and Messaging Policies.
5. CRM and Automation Data Processing
When incoming customer inquiries trigger automated workflow nodes (such as routing rules, webhook notifications, or calendar bookings), Socio processes the message payload in accordance with the rules defined by your workspace administrators. Automated actions are logged within your workspace audit trail.
6. Analytics & Diagnostic Telemetry
We collect aggregated diagnostic data (such as API latency, system errors, and uptime statistics) to ensure high platform reliability. Telemetry data is anonymized and stripped of individual message payloads whenever used for infrastructure monitoring.
7. Data Sharing & Third-Party Service Providers
We do not sell, rent, or trade your personal or CRM data to advertisers or third-party brokers. We share data strictly with trusted service providers who assist us in operating our platform:
- Cloud Hosting & Database Providers: Enterprise data centers operating with ISO 27001 and SOC 2 certifications.
- Messaging Delivery Infrastructure: Official Meta Cloud API infrastructure for WhatsApp message transmission.
- Billing & Payment Processors: PCI-DSS compliant payment gateways for subscription processing.
8. Data Retention & Storage Schedules
We retain account data and customer CRM logs for the duration of your active subscription. Inactive account records and message logs may be retained for up to 90 days following account termination to allow for potential data exports or lawful regulatory requirements, after which records are queued for permanent deletion.
9. Data Deletion & Purge Requests
Workspace administrators may request complete data purging at any time by contacting our privacy team at omprxz@gmail.com. Upon receipt of a verified deletion request, all CRM contacts, message logs, custom tags, and associated database records will be permanently deleted from active production databases within 30 days.
10. Security & Encryption Standards
Socio implements robust technical and organizational security measures:
- Encryption in Transit: All web traffic and API communications are encrypted using modern Transport Layer Security (TLS 1.3).
- Encryption at Rest: Database records, media files, and authentication secrets are encrypted using AES-256 standard encryption.
- Access Controls: Multi-factor authentication support, role-based access control (RBAC), and continuous access auditing.
11. International Data Transfers
Socio utilizes distributed cloud infrastructure. By using the platform, you acknowledge that data may be transferred to and processed in secure data centers globally, with standard contractual clauses and robust privacy protections in place.
12. User Privacy Rights (GDPR, CCPA/CPRA, Global)
Depending on your geographic location, you may have legal rights regarding your personal data:
- Right to Access: Request a comprehensive export of personal data held in your account.
- Right to Rectification: Correct inaccurate or incomplete profile records.
- Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal information.
- Right to Restrict or Object: Restrict certain types of processing.
To exercise any of these rights, email your request to omprxz@gmail.com.
13. Business Customer Responsibilities (Data Controller Role)
In the context of data privacy legislation (including GDPR), our business customers act as the Data Controller for their end-customer information and WhatsApp conversations, while Socio acts as the Data Processor. Business customers are solely responsible for obtaining necessary consent from their end-users before initiating WhatsApp communications.
14. Children's Privacy
Socio is a business-to-business (B2B) SaaS platform intended strictly for professional use by individuals aged 18 and older. We do not knowingly collect personal information from minors.
15. Payment Information & Billing Processors
Subscription payments are processed through secure, PCI-DSS compliant third-party payment gateways. Socio does not store full credit card numbers or banking passwords on its servers.
16. Legal & Regulatory Disclosures
We may disclose personal information only if required to do so by applicable law, enforceable governmental subpoena, court order, or to protect the vital security and legal rights of Socio and its users.
17. Business Transfers & Corporate Transactions
In the event of a merger, acquisition, reorganization, or asset sale involving Socio, user data may be transferred to the acquiring entity subject to the commitments made in this Privacy Policy.
18. Policy Updates & Notifications
We may update this Privacy Policy periodically to reflect changes in our technology, legal obligations, or service offerings. Material modifications will be highlighted by updating the "Last Updated" date at the top of this document.
19. Contact Information
For any questions, concerns, or data requests regarding this Privacy Policy, please contact our dedicated Privacy Officer: