Privacy Policy

1. Information we collect

1.1 Information you give us directly

• Contact details: your name, email address, and business name, when you request a Gap Snapshot, create an account, or contact us.
• Business information: the website, Instagram, Facebook, LinkedIn, or Google Business Profile link(s) you submit, along with any competitor name you tell us about, and any edits you make to your business profile inside the app (address, service area, languages, sector, differentiators, pricing, etc.).
• Account credentials: we use passwordless magic-link sign-in, so we don't store a password. We do store the email address tied to your account and session tokens needed to authenticate you.
• Payment information: subscription payments are processed by Stripe. We do not collect or store your card number or other payment credentials — Stripe handles this, and we retain only a reference to your Stripe customer and subscription ID.
• Connected social accounts: if you choose to connect Instagram, Facebook, LinkedIn, or Google Business Profile for publishing, we receive the account access tokens and related profile information those platforms provide through their authorization flow.
• Correspondence: anything you send us by email or through the app, including replies to our automated emails.

1.2 Information we collect automatically

• Usage data: pages viewed, features used, timestamps, and general interaction data within the app.
• Device and log data: IP address, browser type, operating system, and similar technical information.
• Cookies and similar technologies: used for authentication, session management, and basic analytics (see Section 7).

1.3 Information we collect from public sources

To build your Gap Snapshot and ongoing gap analysis, we scrape and analyze publicly available information about your business and your competitors from:

• Your website
• Public social media profiles (Instagram, Facebook, LinkedIn)
• Your Google Business Profile, including publicly posted reviews

We use third-party scraping and search providers (currently Firecrawl, Apify, and Brave Search) to gather this public data. We do not access private accounts, private messages, or any data behind a login unless you've explicitly connected that account to us.

2. How we use your information

We use the information above to:

• Generate your free Gap Snapshot and, for subscribers, your ongoing gap analysis, business profile, customer avatars, and content plan
• Generate and, where authorized, publish AI-drafted social media posts and images to your connected accounts
• Operate, maintain, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (confirmations, snapshot delivery, billing notices, weekly performance readouts, product updates)
• Respond to your replies and support requests
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations

We do not sell your personal information.

3. AI-generated content

SocioMotion uses large language models and image-generation models to draft social media copy and imagery based on your business information. Generated images carry provenance/content-credential metadata (e.g., C2PA) and, where a platform supports it, we set the platform's AI-content disclosure flag (such as Meta's "Made with AI" label) automatically at publish time, in line with our obligations under applicable law, including the EU AI Act.

You are responsible for reviewing AI-generated content before it publishes (or, if you've enabled autopilot for a given content type, for the settings you've chosen). We do not knowingly fabricate claims, credentials, or offers your business hasn't made; you can flag or edit any output at any time.

4. How we share information

We share information only as needed to run the Service:

• Service providers: Stripe (payments), Resend (email delivery), Firecrawl, Apify, and Brave Search (public data collection), our AI model providers (content generation), and cloud hosting/infrastructure providers. Each processes data on our behalf under contractual confidentiality and data-protection terms.
• Connected platforms: if you connect Instagram, Facebook, LinkedIn, or Google Business Profile for publishing, we share the content you approve with that platform via its API.
• Legal and safety: if required by law, subpoena, or legal process, or to protect the rights, property, or safety of SocioMotion, our users, or others.
• Business transfers: if SocioMotion is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; we'll notify you before your information becomes subject to a different privacy policy.

We never sell personal information to third parties, and we never share your data with advertisers for their own marketing purposes.

5. Data retention

• Free users: your business profile, gap analysis, avatars, and voice data are retained for as long as your account exists, so you can return via magic link without starting over.
• Paid subscribers: the same applies after cancellation — your diagnosis data is retained (not deleted) and the account simply reverts to free-tier access.
• Leads (Gap Snapshot requesters who don't create an account): we retain contact and snapshot data for a reasonable period to deliver the snapshot and follow-up sequence, after which it may be deleted or anonymized if there's no further engagement.

You can request deletion of your account and associated data at any time (Section 8).

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

Our own jurisdiction

Capitaine Sam is registered in the Collectivity of Saint-Martin (French side). Saint-Martin is an outermost region of the European Union, so the GDPR applies directly to how we handle your data, overseen by the CNIL (France's data protection authority) as our lead supervisory authority.

For EU/EEA and UK residents

We process your data under the legal bases of contract performance, legitimate interest, consent, and legal obligation, as applicable, in line with the GDPR/UK GDPR. Where your data is transferred to service providers located outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

For California residents

You have rights under the CCPA/CPRA, including the right to know what personal information we collect and to request deletion. We do not sell or "share" personal information as those terms are defined under California law.

To exercise any of these rights, contact us at privacy@sociomotion.com. We'll respond within the timeframe required by applicable law.

7. Cookies

We use cookies and similar technologies for:

• Essential functions: keeping you signed in, remembering your session
• Analytics: understanding how the Service is used, so we can improve it

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working.

8. Account deletion

You can request account deletion by emailing privacy@sociomotion.com or using the delete-account option in Account Settings. Deleting your account removes your profile, gap analysis, avatars, and content history from our active systems, subject to any data we're required to retain for legal, tax, or fraud-prevention purposes. Data export tools are planned for a future release; until then, contact us directly for a copy of your data.

9. Children's privacy

The Service is intended for business owners and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

10. Security

We use industry-standard measures (encryption in transit, access controls, passwordless authentication) to protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date, and for material changes, we'll make a reasonable effort to notify you directly (e.g., by email).

12. Contact us

Questions about this Privacy Policy or your data:

Capitaine Sam Saint-Martin (French collectivity) privacy@sociomotion.com