Privacy Policy

01About this policy

This Privacy Policy explains how SocialCall handles personal information through socialcall.io and SocialCall applications and services that link to this policy. It applies to restaurant and brand representatives, creators, customers, and visitors. Contact the operator of SocialCall at michael@michaelgeddis.com with questions or requests.

SocialCall is currently an early-stage platform. Some integrations, payments, and booking capabilities may not be enabled. The descriptions below apply when you use the relevant available feature; a demo record or disconnected integration does not mean we have collected data from that provider.

A restaurant, brand, or connected provider may separately collect and use information under its own privacy notice. This policy describes SocialCall’s handling of information, not the independent practices of those organizations.

02Information we collect

• Account and profile information: your name, email address, sign-in identity, profile handle, biography, area, and other details you provide. Supabase Auth verifies email-and-password sign-in. Credentials are transmitted for authentication; we do not store plaintext passwords in SocialCall’s application database.
• Workspace and collaboration information: restaurant and business details, locations, member roles, briefs, agreements, messages, submissions, approvals, and related activity records.
• Content: the photos, videos, captions, links, and other materials you upload, submit, or publish, together with technical metadata needed to process and display them.
• Transaction and performance records: offer claims, redemptions, reservation details, attribution events, sales, refunds, and earnings information when those features are used. If live payments are enabled, the payment provider handles payment credentials; SocialCall may receive transaction identifiers, status, amounts, and limited payment or payout account information.
• Connected account data: information returned by a social, advertising, or booking provider within the permissions you authorize. See “Connected social accounts” below.
• Technical information: request and security logs, IP address, browser or device information, session identifiers, timestamps, error information, and interactions needed to operate and protect the Service or measure content and offer activity.
• Support information: the information you send when contacting us, reporting a problem, or making a privacy request.

We collect information directly from you, from authorized workspace members and collaboration participants, from your use of the Service, and from providers you connect. Only provide another person’s information when you have an appropriate reason and permission to do so.

03How we use information

We use information to authenticate accounts; apply workspace permissions; operate profiles, discovery, collaborations, content, offers, and available transactions; show performance and attribution; respond to support requests; maintain records; prevent abuse; diagnose reliability issues; and meet legal obligations.

We use connected provider data for the features and purposes you authorize, such as displaying your connected profile and videos or reporting their performance. We do not use the fact that you connected an account as permission to publish content, spend advertising money, or contact your followers.

Where a legal basis is required, we rely as applicable on performing an agreement with you, your consent, compliance with law, or legitimate interests in operating and securing the Service, subject to your rights. If processing depends on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

04Connected social accounts

A supported social connection uses the provider’s authorization process. SocialCall does not ask for your TikTok or Instagram password. Depending on the provider and approved permissions, we may receive an account identifier, display name, avatar, profile link, authorized video or post information, engagement statistics, and the access credentials needed to maintain the connection.

For TikTok, the precise access depends on the scopes shown on TikTok’s authorization screen and approved for SocialCall. Login Kit or profile access does not by itself grant advertising or publishing permissions. Advertising connections and creator content rights require their own authorization when those features are enabled.

Connection credentials are kept on the server and are not exposed in public profiles or shared with collaboration partners. Information displayed inside a restaurant workspace can be accessible to members with the corresponding permissions. Connecting a personal creator account does not automatically make it available to every restaurant on SocialCall.

You can disconnect an available integration in SocialCall’s connection settings or revoke access through the provider. Disconnecting stops future access through that connection once revocation is processed. It does not delete content you separately uploaded or business records that must be retained. To request deletion of imported social data, contact michael@michaelgeddis.com and identify the connected account without sending a password or access token.

05When information is shared

• With people you work with: authorized workspace members and collaboration participants receive the information needed for the work or transaction, according to their access permissions.
• When you publish: content and profile information you choose to make public can be seen by other users or visitors. Public material may be copied or shared by others.
• With service providers: we use Supabase for authentication, database, and media storage, and Vercel for web hosting and application execution. Other providers receive information when you use an enabled connection or payment feature. Providers may process information as needed to supply their services and under their applicable terms.
• For safety or legal reasons: when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or investigate abuse.
• For a business transition: information may transfer as part of a merger, acquisition, or asset transfer, subject to applicable law and appropriate notice and protections.

We do not sell personal information or share it for cross-context behavioral advertising. Using SocialCall’s content or campaign tools does not authorize us to sell your personal data. We do not provide connected account credentials to other users.

06Cookies and device storage

The web app uses essential session cookies and similar storage to keep you signed in and protect account actions. Browser storage may hold preferences such as your display theme and local drafts or pending work. Native apps may use device storage, including secure storage for session credentials.

The current app does not use third-party advertising cookies. If we introduce optional tracking that requires consent, we will provide the required notice and controls before using it. Third-party pages you visit while connecting an account or making a payment follow their own cookie policies.

You can clear or restrict cookies and local storage in your browser or device settings. Doing so may sign you out, remove local drafts or preferences, or prevent a feature from working.

07Retention and deletion

We retain information for as long as reasonably needed to provide the Service, maintain authorized collaboration and transaction records, meet legal obligations, resolve disputes, and prevent fraud. The appropriate period depends on the type of information, account status, and the reason it is retained.

You may request account closure and deletion. Closure or removal from a workspace does not necessarily erase every related record immediately: completed agreements, financial records, security evidence, backups, and information another party is entitled to retain may remain for the applicable purpose. We restrict retained information to those purposes and delete or de-identify it when it is no longer needed.

Deleting a post from SocialCall cannot remove copies independently saved or published by another person. Deletion from SocialCall also does not automatically delete information held by a connected provider; use that provider’s controls or contact them separately.

08Your choices and privacy requests

You can update available profile fields, manage permitted workspace access, choose whether to publish content, and disconnect supported social accounts through the relevant settings. For access, correction, a copy of your information, deletion, account closure, or a concern about processing, email michael@michaelgeddis.com.

Depending on your location and applicable law, you may also have rights to object to or restrict processing, withdraw consent, obtain portable information, appeal a decision about a request, or complain to a data protection authority. We will assess and respond to requests within the applicable legal requirements and explain any exception that prevents us from fully fulfilling a request. We will not discriminate against you for exercising a privacy right.

We may need to verify your identity or an authorized agent’s authority before disclosing or changing information. Send only the information needed to identify the account and request; do not email passwords, payment-card numbers, or access tokens. If an organization controls the relevant workspace records, we may coordinate with its authorized administrator while respecting your rights.

09Security and international processing

We use technical and organizational measures designed to protect information, including encrypted connections, server-side authorization, restricted database access, and private media storage. No service can guarantee absolute security. Notify us promptly if you believe your account or information has been compromised.

SocialCall and its service providers may process information in the United States and other countries where they operate. The protections and laws in those countries may differ from those where you live. Where required, appropriate legal safeguards must apply to international transfers.

10Children

SocialCall is intended for people aged 18 and over and is not directed to children. If you believe a child has provided personal information to SocialCall, contact us so we can investigate and take appropriate action, including removing information where required.

11Updates and contact

We may update this policy as the Service or our practices change. The effective date identifies the current version. We will give appropriate notice of material changes and obtain consent when required before using information for a new purpose that requires it.

For privacy questions, deletion requests, or connected-account data requests, contact SocialCall at michael@michaelgeddis.com.