Sociala

Sociala Privacy Policy

Effective Date: July 16, 2026

1. Introduction and Scope

Welcome to Sociala.

This Privacy Policy explains how Sociala Inc. ("Sociala," "we," "us," or "our") collects, uses, shares, stores, protects, retains, and deletes personal data when people interact with Sociala, whether or not they create a Sociala account.

This Privacy Policy applies to Sociala-owned or controlled websites, landing pages, domains, mobile applications, social features, creator tools, payment features, paid content, subscriptions, donations, Smartlists, Paid Messages, Consultations, Sociala Widget pages, and related services (collectively, the "Platform"). It also applies to pre-launch and non-account interactions, including:

This Privacy Policy applies to creators, experts, consultants, coaches, educators, professionals, fans, subscribers, visitors, waitlist participants, quiz participants, account holders, parents or guardians, and other individuals whose personal data Sociala processes.

This Privacy Policy should be read together with the Terms of Use, Sociala Widget Waitlist Terms, Creator Terms, Consultation Policy, Community Guidelines, Acceptable Use Policy, Payment Systems Policy, Fees and Commissions Policy, Refund Policy, Child Safety / CSAE Standards, Account Deletion and Data Retention Policy, Age Assurance and Parental Consent Policy, App Store Compliance Addendum, Cookie Policy, and any other terms or notices that apply to a particular feature or interaction.

A person does not need to create a Sociala account for this Privacy Policy to apply.

1.1. Data Controller

Sociala is operated by:

Sociala Inc.

1201 North Market Street, Suite 111-N52

Wilmington, Delaware 19801

United States

For purposes of applicable privacy and data protection laws, including the EU General Data Protection Regulation ("GDPR"), UK GDPR, and applicable U.S. state privacy laws, Sociala Inc. generally acts as the controller or business responsible for personal data processed through the Platform, waitlist, quiz, preview, outreach, onboarding, and related Sociala activities.

Third-party providers, such as Stripe, Apple, Google, WhatsApp, Telegram, identity-verification providers, banks, app stores, and certain integration providers, may independently determine how they process information under their own terms and privacy notices.

1.2. Key Privacy Commitments

Sociala seeks to follow these principles:

We explain the categories of personal data we collect and why we use them.

We seek to collect only information reasonably necessary for identified purposes.

We do not sell personal data.

We do not share personal data for third-party cross-context behavioral advertising as defined by applicable California law.

We do not use app-store age signals, declared age-range data, or parental-consent signals for advertising, marketing, behavioral targeting, unrelated profiling, or unrelated commercial purposes.

We provide mechanisms to request access, correction, deletion, or other privacy rights, subject to applicable law.

We maintain suppression and opt-out records to honor requests not to receive further marketing.

We do not intentionally use sensitive traits inferred from public professional profiles to target business outreach or determine promotional eligibility.

We maintain a zero-tolerance policy for child sexual abuse and exploitation and related child-safety violations.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data.

1.3. Legal Bases for Processing

Where applicable law requires a legal basis, Sociala processes personal data on one or more of the following bases:

Performance of a contract or steps requested before entering a contract. We may process information to create and maintain accounts, provide Platform features, administer subscriptions and payments, provide creator tools, facilitate Consultations, respond to a request for a Widget preview, provide onboarding, or take steps requested by a person before they begin using Sociala.

Legitimate interests. We may process information where reasonably necessary to operate, secure, improve, debug, analyze, and protect Sociala; prevent fraud, spam, abuse, chargebacks, impersonation, security incidents, and policy violations; support users; administer pre-launch programs and waitlists; identify potential professional users; review publicly available professional information; prepare personalized Widget previews; conduct proportionate business outreach where permitted by law; respond to requests; provide onboarding and support; collect product feedback; maintain suppression lists; and protect Sociala, users, creators, service providers, payment processors, app stores, and the public.

Consent. We rely on consent where required, including for certain marketing communications, non-essential cookies or similar technologies, communications through WhatsApp, Telegram, SMS, telephone, or another selected channel where consent is required, optional surveys, optional app permissions, certain recordings, parental or guardian consent, and other processing that requires consent.

Compliance with legal obligations. We process information to comply with privacy, child-safety, consumer-protection, tax, accounting, payment, sanctions, fraud-prevention, app-store, regulatory, reporting, recordkeeping, court-order, and law-enforcement obligations.

Vital interests or public interest. In limited cases, we may process information to protect a person's safety or where processing is required or authorized in the public interest.

The legal basis used may depend on the person's location, communication channel, source of the information, relationship with Sociala, and nature of the communication. Sociala will not rely on legitimate interests where applicable law requires consent.

2. Information We Collect

We collect information that people provide directly, information generated through Platform activity, information collected automatically, and information obtained from third parties or publicly available sources.

Not every category applies to every person, feature, device, country, or interaction.

2.1. Account and Profile Information

Depending on how you interact with Sociala, we may collect:

2.2. Authentication and Login Information

You may sign up or log in using Google, Apple, Facebook, or another supported provider. In that case, we may receive profile, account, and authentication information made available by that provider, subject to your settings and the provider's rules.

We may use authentication tokens, OAuth identifiers, session tokens, cookies, browser information, device information, and related session data to authenticate you, maintain your session, prevent fraud, and support features such as "Keep me Logged In."

We do not post to third-party accounts without permission.

Sociala may use a six-digit or other one-time verification code to confirm email control, join a waitlist, create an account, sign in, book a call, or access related functionality. To reduce account-enumeration and security risk, verification screens and messages may use neutral language and may not disclose whether an account already exists for the submitted email address.

2.3. Sociala Widget Waitlist, Quiz, Preview, and Early-Access Information

When you join a waitlist, request a verification code, complete a quiz or questionnaire, request or receive a personalized Widget preview, participate in early access, or communicate about Sociala Widget, we may collect:

2.4. Publicly Available Professional Information and Business Outreach Data

Sociala may identify potential professional users through publicly accessible professional or business sources and may prepare a personalized preliminary Widget preview before the person creates an account or completes a Sociala form.

We may collect or review publicly available professional information, including:

We may obtain this information from:

Where required by law, Sociala will provide privacy information in or through the first communication, or within another legally permitted period, including information about the source or categories of sources, purposes of processing, and the right to object.

The fact that information is publicly available does not mean Sociala will use it for every purpose. We use such information only for purposes described in this Privacy Policy and subject to applicable law.

2.5. Communication Information

When you communicate with Sociala, we may process:

For business outreach, we may also process the sending domain or email account, representative name, campaign or sequence identifier, message variant, linked preview URL, delivery provider, and records showing when Sociala provided privacy information or an opt-out method.

2.6. Payment, Purchase, Subscription, Donation, and Payout Information

When you make a purchase, subscribe, donate, use paid features, buy content, send a Paid Message, book a Consultation, use a Smartlist, deposit funds, or receive a payout, payment processing may be handled by Stripe, Apple, Google, Apple In-App Purchase, Google Play Billing, Apple Pay, Google Pay, banks, card networks, or other providers.

Sociala does not store full payment-card numbers. We may receive limited payment, billing, transaction, and commercial information, including:

If you are eligible for payouts, Stripe or another provider may request legal name, address, date of birth, citizenship or residence information, tax identification number, bank information, telephone number, government-identification information, facial images, selfies, or other information required by payment, identity-verification, sanctions, tax, or know-your-customer rules. Sociala may receive verification results, risk indicators, or limited verification information from such providers.

2.7. User Content and Creator Content

We collect and process content you create, upload, publish, send, comment on, repost, curate, list, sell, purchase, report, moderate, or otherwise make available through Sociala, including:

Content may be public, private, paid, restricted, or visible only to selected people depending on settings, feature design, payment status, age category, parental-consent status, and moderation decisions.

2.8. Messaging, Paid Messages, Forums, Channels, Broadcasts, and In-Platform Communications

If you use comments, Channels, forums, messaging, Broadcast features, Paid Messages, or other communication features, we may process:

Sociala may review or process communications where reasonably necessary for safety, reporting, fraud prevention, child safety, moderation, legal compliance, dispute resolution, payment disputes, chargebacks, and enforcement.

2.9. Consultations, Calls, Meetings, and Recordings

If you participate in a Consultation, video meeting, coaching session, advisory call, AI demo call, or other real-time feature, Sociala may process:

Sociala’s current Consultation rules may provide for automatic audio and/or video recording of Platform Consultations and may make recording a mandatory condition of participation. This may include paid calls, free calls, and AI demo calls where available. Before joining, participants are expected to receive the applicable notice and separately accept the call rules and recording terms. A person who does not consent to required recording must not participate in the call.

Recording is intended to begin only after the applicable participation and consent conditions are satisfied. Sociala may display an indicator that recording is active.

Consultation information and recordings may be used for service operation, attendance and completion determinations, dispute resolution, fraud prevention, trust and safety, moderation, technical diagnostics, quality assurance, accessibility, summaries, support, legal compliance, chargeback investigations, complaint handling, and policy enforcement.

Users should not assume that a Consultation is protected by legal privilege, medical confidentiality, therapist-patient confidentiality, fiduciary confidentiality, or similar regulated protections unless such protection is independently established outside Sociala.

2.10. Age Assurance, Parental Consent, and App-Store Signals

Where required or permitted by law, app-store rules, operating-system tools, parental-control tools, or distribution requirements, Sociala may receive or process age-related and parental-consent information from Apple, Google, app stores, operating systems, parents, guardians, or legally permitted providers ("Age Assurance Signals").

Age Assurance Signals may include:

Sociala uses Age Assurance Signals only for age-appropriate access, age restrictions, parental-consent workflows, legal and app-store compliance, safety defaults, fraud prevention, abuse prevention, and related trust-and-safety purposes.

Sociala does not use Age Assurance Signals for advertising, marketing, behavioral targeting, unrelated profiling, growth analytics, or unrelated commercial purposes.

2.11. Safety, Moderation, Child Safety, Fraud, and Enforcement Information

We may process information for safety, child safety, moderation, fraud prevention, abuse prevention, platform integrity, and enforcement, including:

Sociala has zero tolerance for child sexual abuse and exploitation, grooming, sexualization of minors, and Child Sexual Abuse Material, including AI-generated, computer-generated, edited, or manipulated content involving or appearing to involve minors.

2.12. Automatically Collected Technical, Device, and Usage Information

When you interact with Sociala websites, apps, Widget pages, forms, landing pages, or communications, we may automatically collect:

We do not collect precise geolocation unless a feature specifically requests it and the required permission is granted.

2.13. Cookies and Similar Technologies

We may use cookies, local storage, pixels, SDKs, tags, and similar technologies for:

Where required by law, non-essential cookies and similar technologies are used only after the required consent is obtained.

Sociala does not use cookies to sell personal data or share personal data for third-party cross-context behavioral advertising.

2.14. Surveys, Events, Feedback, Research, and Support

We may collect information provided through voluntary surveys, interviews, feedback sessions, user-research activities, events, RSVP forms, QR-code interactions, blog comments, support requests, accessibility requests, dispute submissions, moderation appeals, privacy requests, and deletion requests.

This may include contact information, professional information, demographic information voluntarily provided, event information, feedback content, recordings where consented, and other information you choose to provide.

2.15. Social Media, Embedded Features, and Third-Party Links

Sociala may include social-media widgets, embedded tools, external links, payment tools, video tools, or other third-party features. These providers may collect information under their own privacy policies, including IP address, device information, account identifiers, or interaction information.

Sociala does not control third-party websites, apps, or privacy practices.

2.16. Sensitive Personal Data

Depending on the feature, Sociala or its service providers may process information considered sensitive under applicable law, such as account credentials, payment-related information, tax or KYC information, government-identification information, contents of communications, age-related information, precise location if a feature is enabled, or safety and child-protection information.

Do not submit health information, religious beliefs, political opinions, sexual-orientation information, union membership, genetic information, or other sensitive information through a waitlist, quiz, or Widget preview unless Sociala specifically requests it for a lawful and clearly disclosed purpose.

Sociala does not intentionally infer sensitive personal traits from public professional profiles for business outreach, promotional targeting, or Founding Year eligibility.

3. How We Use Information

3.1. Platform Operation and Account Administration

We use information to create, authenticate, maintain, secure, and administer accounts; provide Platform functionality; operate Channels and Smartlists; provide paid and free content; facilitate subscriptions, donations, Paid Messages, Consultations, referrals, affiliate features, creator tools, and public Widget modules; operate separate Widget, module, offer, and call URLs; maintain settings; personalize the in-Platform experience based on user choices; and provide support.

3.2. Sociala Widget Waitlist, Quiz, Eligibility, and Early Access

We use waitlist, quiz, and related information to:

3.3. Personalized Widget Previews and Artificial Intelligence

We use submitted and publicly available professional information to:

Sociala may use software, automation, and artificial intelligence tools to organize, summarize, categorize, generate, or format a personalized preliminary Widget preview.

AI-generated or automatically prepared previews may contain errors, inferences, omissions, or outdated information. A preview is illustrative and should be reviewed by the person before activation or publication.

Sociala does not use a preview to make a solely automated decision that produces legal or similarly significant effects concerning the person.

If Sociala later uses personal data to train or materially improve an AI model for a purpose beyond providing, securing, or improving the requested feature, Sociala will provide additional notice and obtain consent where required by law.

3.4. Widget Setup, Onboarding, Support, and Feedback

We use information to:

3.5. Communications

We use contact information to communicate about:

Service-related, transactional, security, legal, compliance, and account messages are not marketing communications.

3.6. Marketing, Promotions, and Business Outreach

Where permitted by law and consistent with user choices, we may use contact, professional, account, and limited activity information to send:

Sociala may conduct proportionate business outreach to potential professional users using professional contact information obtained from public sources or lawful service providers where permitted by applicable law.

An initial outreach message does not create a Sociala account or agreement. Where required by law, the message or linked privacy notice will identify Sociala, explain the source or category of source, provide access to this Privacy Policy, and provide a clear method to object or opt out.

Where information was not obtained directly from the person, Sociala may provide information about the source, categories of information, purposes, legal basis, privacy rights, and right to object through the first communication, a linked notice, or another legally permitted method.

A person may object to or opt out of direct marketing at any time.

3.7. Payments, Payouts, Purchases, and Commercial Features

We use information to process payments, subscriptions, renewals, donations, purchases, cancellations, refunds, credits, balances, deposits, withdrawals, payouts, referral and affiliate commissions, taxes, accounting, reconciliation, billing retries, chargebacks, disputes, fraud reviews, and purchase approvals.

3.8. Consultations and Real-Time Features

We use Consultation-related information to facilitate, schedule, administer, secure, support, record where enabled, review, moderate, and troubleshoot Consultations; manage attendance, no-shows, cancellations, refunds, disputes, chargebacks, feedback, complaints, and enforcement; and maintain necessary records.

3.9. Safety, Security, Moderation, Child Safety, and Enforcement

We use information to detect, prevent, investigate, and respond to fraud, spam, scams, harassment, impersonation, unauthorized access, policy violations, illegal activity, payment disputes, chargeback abuse, CSAM, CSAE, grooming, child-safety concerns, security incidents, and other misuse.

3.10. Analytics, Performance, Research, and Service Improvement

We use information to improve Sociala, develop features, diagnose errors, understand usage patterns, evaluate waitlist and onboarding flows, improve accessibility, measure performance, maintain technical integrity, improve safety tools, and conduct internal analytics and research.

Where reasonably possible, we use aggregated or de-identified information for analytics and research.

3.11. Legal and Compliance

We use information to comply with laws, legal process, tax and accounting rules, sanctions requirements, privacy obligations, child-safety obligations, app-store rules, payment-provider requirements, consumer-protection rules, court orders, subpoenas, and lawful government requests.

4. How We Share Information

We may disclose personal data in the circumstances described below. We do not disclose every category to every recipient.

4.1. Creators and Other Users

When a user interacts with a creator or another user, certain information may be made available to the relevant participant depending on the feature, including:

For Widget bookings, chats, communities, donations, and other creator interactions, the relevant creator may receive information reasonably necessary to provide the selected interaction, such as the visitor’s name, contact details, booking information, transaction status, message, or attendance status, depending on the feature and disclosures shown to the visitor.

Creators and other users are responsible for complying with applicable privacy laws when independently processing personal data made available to them.

4.2. Service Providers

We may share information with providers that perform services for Sociala, including:

Providers are authorized to process personal data only as reasonably necessary to provide services to Sociala or as otherwise permitted by law and are subject to contractual or legal safeguards where appropriate.

4.3. Payment, Payout, App-Store, and Billing Providers

We may disclose information to Stripe, Apple, Google, banks, card networks, payment processors, payout providers, and app stores to process transactions, subscriptions, refunds, disputes, chargebacks, payouts, tax reporting, sanctions checks, identity verification, fraud reviews, and purchase approvals.

These providers may act as independent controllers for some processing under their own terms and privacy policies.

4.4. Communication and Outreach Providers

We may use providers to send or manage email, SMS, WhatsApp, Telegram, telephone, and other communications; verify contact information; manage replies and unsubscribes; maintain suppression lists; and measure delivery or interaction where permitted.

These providers may receive contact information, message content, campaign information, delivery status, and opt-out information necessary to perform the service.

4.5. Preview, Automation, and AI Providers

We may use providers to organize public professional information, generate or format preliminary personalized Widget previews, summarize information, produce draft copy, detect errors, and support onboarding.

We seek to limit the information provided to what is reasonably necessary for the relevant task and apply contractual or technical controls where appropriate.

4.6. App Stores, Operating Systems, and Parental-Control Providers

Where required or permitted, Sociala may exchange limited information with Apple, Google, app stores, operating systems, or parental-control tools to support age assurance, parental consent, purchase approval, significant-change approval, app ratings, subscription management, refunds, safety, and compliance.

4.7. Parents or Guardians

Where required or permitted by law, app-store rules, or safety obligations, we may share limited information with a parent or guardian to request or manage consent, explain a significant change, restrict or restore access, respond to child-safety concerns, or process a deletion or restriction request.

4.8. Legal, Safety, Child-Safety, and Enforcement Needs

We may disclose information where reasonably necessary to:

4.9. Business Transfers

If Sociala is involved in a merger, acquisition, restructuring, financing, sale of assets, bankruptcy, or similar transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate safeguards.

4.10. Third-Party Apps and Integrations

If a user connects a third-party calendar, video service, payment service, authentication provider, social account, or other integration, information may be shared according to the permissions and functionality selected by the user and the third party's terms.

4.11. At Your Direction or With Consent

We may disclose information where you direct us to do so, request a feature that requires disclosure, or provide consent.

4.12. Aggregated or De-Identified Information

We may use and disclose aggregated or de-identified information that cannot reasonably be used to identify a person. We do not attempt to re-identify data that has been de-identified, except where permitted to test or validate de-identification methods.

4.13. No Sale or Cross-Context Behavioral Advertising

Sociala does not sell personal data and does not share personal data for third-party cross-context behavioral advertising as defined by applicable California law.

Sociala does not use Age Assurance Signals for advertising, marketing, profiling, behavioral targeting, or unrelated analytics.

5. Public Information and Personalized Previews

The Sociala Widget is designed as a public link-in-bio page. Once published, a Widget and certain module, offer, post, community, chat, donation, or call pages may have separate public URLs. Information selected for publication may be viewed by anyone, shared outside Sociala, embedded or linked from external platforms, and indexed by search engines unless Sociala provides and the creator uses a more restrictive setting.

Public information may include:

A personalized preliminary preview prepared before account activation may be unlisted or not actively promoted, but it is not necessarily confidential or private. Unless the preview is expressly protected by authentication or a password, anyone who has or discovers the preview URL may be able to access it. Recipients should not include or submit sensitive information in a preview and should not share the preview URL with people who should not see it.

Sociala may disable, correct, or remove a preview and will consider verified requests to remove or correct preview information. A request may be submitted to corp@sociala.com.

Sociala will not use a personalized preview identifying a person as a public advertisement, testimonial, endorsement, case study, or portfolio example without separate permission, except where otherwise permitted by law.

People should carefully consider what they publish. Sociala may not be able to remove copies that other people have saved, copied, screenshotted, reposted, indexed, cached, or shared outside the Platform.

6. Cookies, Pixels, Analytics, and Tracking Choices

Sociala may use necessary cookies and similar technologies for authentication, security, fraud prevention, preferences, and basic functionality.

Where permitted or consented, Sociala may use analytics and performance technologies to understand how websites, apps, forms, landing pages, Widget pages, and communications are used.

Email technologies may indicate whether a message was delivered, bounced, opened, or whether a link was clicked. Sociala will use such technologies only where permitted by applicable law and will provide required choices or consent mechanisms.

Users may manage cookies through browser settings, device settings, app settings, operating-system controls, or Sociala cookie tools where available. Disabling necessary technologies may affect functionality or security.

Where legally required, Sociala honors applicable browser-based opt-out preference signals, such as Global Privacy Control, for processing subject to such signals. Because Sociala does not sell personal data or share it for cross-context behavioral advertising, such signals may not materially change Sociala's practices, but they will be processed where required.

7. Communications, Marketing, and Opt-Outs

7.1. Service-Related Communications

Sociala may send communications reasonably necessary to:

These messages are not treated as optional marketing merely because they mention the feature or request to which they relate.

7.2. Email Marketing and Business Outreach

Where permitted by law, Sociala may send commercial email to existing users, people who requested information, people who consented, and potential professional users identified through lawful business outreach.

Commercial email will include an appropriate way to opt out. Sociala may maintain limited suppression information to ensure the recipient is not added back to the relevant marketing campaign.

7.3. Telephone, SMS, WhatsApp, Telegram, and Other Messaging Channels

Where a person voluntarily provides or selects a telephone number, WhatsApp number, Telegram username, or another messaging contact, and the relevant notice permits the communication, Sociala may use the selected channel to:

Providing a telephone number or messenger identifier does not automatically authorize unrelated or recurring promotional communications.

Where required by law, Sociala will obtain separate consent before sending marketing through SMS, WhatsApp, Telegram, telephone, or another messaging channel.

7.4. Communication Providers and Representatives

Messages may be sent by Sociala employees, contractors, or authorized service providers acting on Sociala's behalf.

Sociala may use dedicated outreach domains, email accounts, telephone numbers, or messaging accounts. Such operational accounts do not change that Sociala is the relevant company for the outreach, and the communication or linked notice will identify Sociala and provide required sender, address, privacy, and opt-out information where applicable.

7.5. Opt-Out, Objection, and Suppression

A person may opt out of marketing by:

Consent or permission for one channel does not automatically authorize marketing through another channel.

A direct-marketing objection applies to Sociala and not only to the individual employee, email address, telephone number, or outreach account that sent the message.

Sociala may retain limited information on a suppression list to honor the request and prevent future marketing contact.

Opting out of marketing does not prevent Sociala from sending communications reasonably necessary for an active account, transaction, security matter, legal requirement, or service specifically requested by the person.

8. Data Retention

Sociala retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, accounting, tax, payment, safety, fraud-prevention, dispute-resolution, app-store, and recordkeeping requirements.

Retention depends on the type of information, the relationship with Sociala, sensitivity, legal obligations, risk of harm, whether a dispute exists, and whether the information can be deleted or de-identified.

8.1. Waitlist, Quiz, Preview, Onboarding, and Feedback Data

Unless a longer period is required or permitted for a specific reason:

8.2. Business Outreach Data

Information relating to a potential professional user who does not respond, engage, join a waitlist, or request a preview may generally be retained for up to 12 months after the last outreach communication, unless a shorter period is required by law or a longer period is reasonably necessary for suppression, security, dispute resolution, or legal compliance.

8.3. Marketing Consent and Suppression Records

Consent, notice, preference, and opt-out records may be retained for as long as reasonably necessary to demonstrate compliance.

Limited suppression records, such as an email address, telephone number, hashed identifier, date of opt-out, and scope of the request, may be retained for as long as reasonably necessary to avoid contacting the person again for the relevant marketing purpose.

8.4. Account and Platform Data

Account and Platform data may be retained while an account is active and afterward as reasonably necessary for account closure, transaction integrity, content access, safety, fraud prevention, payment disputes, chargebacks, legal compliance, and enforcement.

8.5. Payment, Tax, and Compliance Data

Transaction, tax, accounting, payout, KYC, sanctions, refund, chargeback, and financial records may be retained for periods required or permitted by applicable law, payment-provider requirements, accounting standards, audit, fraud prevention, or dispute resolution.

8.6. Safety and Child-Safety Data

Safety, moderation, child-safety, abuse-prevention, security, and enforcement records may be retained for extended periods where reasonably necessary to protect users, prevent repeat abuse, comply with law, respond to authorities, preserve evidence, or defend legal claims.

8.7. Consultation Data and Recordings

Consultation records and recordings may be retained for at least twenty-four (24) hours and for longer periods where reasonably necessary for attendance verification, complaints, disputes, refunds, chargebacks, fraud prevention, safety, moderation, legal compliance, technical diagnostics, security, or other documented operational needs. Sociala may provide a more specific notice within the relevant booking or call flow where required.

8.8. Deletion and De-Identification

At the end of the applicable retention period, Sociala may delete, aggregate, or de-identify information, unless continued retention is required or permitted.

9. Security

Sociala uses reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Safeguards may include:

No security system is perfect, and Sociala cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of passwords, devices, email accounts, magic links, verification codes, and authentication methods.

10. International Data Transfers

Sociala is based in the United States. Sociala and its service providers may process personal data in the United States and other countries that may not provide the same level of data protection as the person's home jurisdiction.

Where required, Sociala uses appropriate transfer mechanisms and safeguards, such as Standard Contractual Clauses, the UK International Data Transfer Addendum, data-processing agreements, transfer-impact assessments, adequacy decisions, or other legally recognized mechanisms.

11. Your Rights and Choices

Rights vary depending on location and applicable law.

11.1. Account and Profile Choices

Through settings or by contacting Sociala, users may be able to:

11.2. Waitlist, Quiz, Preview, and Outreach Requests

A person without a Sociala account may request:

Requests may be submitted to corp@sociala.com.

11.3. Account Deletion and Personal Data Deletion

Users may initiate account deletion through in-app settings where available, through https://sociala.com/delete-account, or by contacting corp@sociala.com.

Deleting an account is different from logging out, uninstalling an app, disabling notifications, pausing a subscription, or temporarily deactivating an account.

Sociala may require reasonable identity verification before processing a deletion request.

Upon verified deletion, Sociala will delete or de-identify personal data that is not required or permitted to be retained for tax, accounting, payments, refunds, chargebacks, fraud prevention, security, safety, child safety, moderation, disputes, payouts, legal compliance, or enforcement.

11.4. Marketing Preferences

A person may opt out of marketing email, SMS, WhatsApp, Telegram, or other promotional communications as described in Section 7.

Withdrawal of consent does not affect processing that occurred lawfully before withdrawal.

11.5. Cookies and App Permissions

Users may manage cookies and certain app permissions through Sociala settings, browser settings, device settings, operating-system controls, or cookie-management tools where available.

11.6. Identity Verification

Sociala may request information reasonably necessary to verify identity, authority, account ownership, or the subject of a privacy request. Sociala will use verification information only for verification, security, fraud prevention, and compliance.

11.7. Authorized Agents and Appeals

Where applicable law allows, a person may use an authorized agent to submit a request. Sociala may require proof of authorization and identity verification.

Where required, Sociala will provide a method to appeal a denied privacy request.

12. EEA, UK, and Swiss Privacy Rights

If you are located in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with similar rights, you may have the right to:

The right to object to processing for direct marketing is not subject to a balancing test. If a valid objection applies, Sociala will stop processing the person's personal data for that direct-marketing purpose.

Where Sociala obtained personal data from another source, Sociala will provide required privacy information within the period required by applicable law, generally no later than the first communication when the data is used to communicate with the person, or within another applicable deadline.

13. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents and is intended to provide information required by the California Consumer Privacy Act, as amended ("CCPA/CPRA").

13.1. Categories of Personal Information

Depending on the interaction, Sociala may collect the following categories of personal information:

Identifiers: name, alias, postal address, email address, telephone number, username, online identifier, IP address, account identifiers, social-profile identifiers, and device identifiers.

Customer-record information: contact details, account details, billing details, and other information provided in forms or communications.

Commercial information: purchases, subscriptions, donations, transaction history, bookings, refunds, disputes, chargebacks, balances, payouts, and product interests.

Internet or electronic-network activity: browsing, search, interaction, referral, email-delivery, link-click, device, browser, session, and usage information.

Approximate geolocation: location inferred from IP address and region information.

Audio, electronic, visual, or similar information: profile images, videos, audio, Consultation recordings where enabled, support recordings where lawful, and content submitted to Sociala.

Professional or employment-related information: professional title, business, services, qualifications, audience, public profile information, and creator information.

Education information: information voluntarily included in profiles, public professional pages, or forms.

Inferences: preferences, potential Widget configuration, product interests, or professional use cases inferred from interactions or public professional information.

Sensitive personal information: account credentials, payment or tax information, government-identification information handled for verification, contents of communications where applicable, precise location if a feature expressly enables it, age-related information, and safety or child-protection information.

13.2. Sources

Sources may include:

13.3. Purposes and Disclosures

Sociala collects, uses, and discloses these categories for the business and commercial purposes described in Sections 3 and 4, including Platform operation, waitlist administration, preview preparation, business outreach, onboarding, support, payments, security, safety, fraud prevention, analytics, legal compliance, and marketing where permitted.

13.4. Retention

Sociala retains each category only as long as reasonably necessary for the disclosed purpose, using the periods and criteria described in Section 8.

13.5. California Rights

Subject to exceptions, California residents may have the right to:

Sociala does not sell personal information and does not share personal information for cross-context behavioral advertising.

Sociala does not use or disclose sensitive personal information for purposes that require a right to limit under California law unless Sociala provides the required notice and choice.

14. Other U.S. State Privacy Rights

Residents of certain U.S. states may have rights to access, correct, delete, obtain a portable copy of personal data, opt out of sale, targeted advertising, or certain profiling, and appeal a denied request, subject to applicable exceptions.

Sociala does not sell personal data and does not process personal data for third-party targeted advertising as described in this Privacy Policy.

15. Children, Teenagers, Parents, and Age Assurance

Sociala is not directed to children under 13, and children under 13 are not permitted to create an account or use the Platform.

Sociala does not knowingly collect personal data from children under 13. If Sociala learns that a child under 13 provided personal data, Sociala will take appropriate steps to investigate and delete or restrict the information, subject to lawful retention needs.

Users aged 13 to 17 may access only features permitted by applicable law, app-store rules, age-assurance controls, safety requirements, and parental-consent requirements.

Users under 18 may be restricted from monetization, payouts, Channel administration, referrals, affiliate programs, donations, Paid Messages, paid Consultations, creator tools, adult-to-minor contact, recordings, and other restricted features.

The Sociala Widget waitlist, creator onboarding, Founding Year program, and payment-enabled professional Widget features are intended only for people who are at least 18 or the age of legal majority in their jurisdiction.

Sociala does not knowingly allow minors to join those programs.

16. Automated Processing and Artificial Intelligence

Sociala may use automated systems, machine learning, artificial intelligence, moderation tools, transcription tools, and similar technologies to:

Automated outputs may be inaccurate and may be reviewed, corrected, or overridden by authorized personnel where appropriate.

Sociala does not use personalized Widget previews to make solely automated decisions that produce legal or similarly significant effects concerning an individual.

Where applicable law provides rights related to significant automated decisions, Sociala will provide the required notice, explanation, review, or choice.

17. Third-Party Services

Sociala relies on third-party services for hosting, authentication, analytics, payments, payouts, subscriptions, in-app purchases, app-store distribution, video calls, recordings, transcription, email, messaging, customer support, CRM, outreach, forms, security, fraud prevention, moderation, compliance, identity verification, and other operations.

Third-party services may process personal data under their own terms and privacy policies.

Sociala is not responsible for the privacy practices of third-party websites, apps, platforms, or services that are not controlled by Sociala.

18. App Store Privacy and Data-Safety Disclosures

Sociala may provide disclosures to Apple App Store, Google Play, and other app stores, including privacy labels, Data Safety information, age ratings, in-app product ratings, purchase-data disclosures, child-safety disclosures, and other required information.

Sociala seeks to keep those disclosures consistent with this Privacy Policy and actual Platform behavior, including data processed by SDKs and service providers.

Where a platform-specific or feature-specific disclosure is required for recording, camera, microphone, contacts, location, age assurance, parental consent, or another feature, Sociala may provide that disclosure separately in the relevant flow.

19. Changes to This Privacy Policy

Sociala may update this Privacy Policy from time to time.

The updated policy will state a revised Effective Date. Where required by law, Sociala will provide additional notice of material changes by email, website notice, in-product notice, app-store mechanism, or another appropriate method.

Where a change requires consent, Sociala will request consent before applying the change to processing that legally requires it.

20. Contact and Privacy Requests

Questions, requests, objections, and complaints may be sent to:

Sociala Inc.

1201 North Market Street, Suite 111-N52

Wilmington, Delaware 19801

United States

Email: corp@sociala.com

Phone: +1 (302) 219-1419

To submit a privacy-rights request, email corp@sociala.com with the subject line “Privacy Request.”

To request account, waitlist, quiz, preview, outreach, or personal-data deletion, email corp@sociala.com with the subject line “Request for Data Deletion.”

To object to direct marketing, use the unsubscribe or STOP method in the communication or email corp@sociala.com with the subject line “Do Not Contact.”