verified_user Legal & Compliance • SOC-2 Type II & GDPR Verified
update Effective Date: January 15, 2025 Version 3.2

Privacy Policy & Algorithmic Trust

The clear-cut commitments, cryptographic safeguards, and API access protocols that protect creator autonomy and content rights across every connected channel.

folder_zip Request Data Archive
Zero-Telemetry Vault Active
shield

Creator Data Manifesto

At SocialBoostPlus, we respect creator ownership. We never sell your personal data, we never store plain-text social credentials, and we only access public and authorized API platform data necessary to calculate your SocialBoost Score and optimize your reach.

Section 01 ISO/IEC 27001 • SOC-2

1. Overview & Data Philosophy

SocialBoostPlus Inc. (“we,” “our,” or “SocialBoostPlus”) engineers mathematical reach diagnostics for high-velocity creator teams, agencies, and individual digital tastemakers. Unlike conventional platforms, our monetization model relies strictly on direct SaaS software subscription fees—never on audience data syndication, behavioral brokering, or advertising resale.

key_off

Zero Plaintext Tokens

We never prompt for or record your platform account passwords. All integrations use scoped OAuth 2.0.

database_off

Zero Data Brokering

Your analytics, follower retention curves, and financial sponsorships remain 100% private to your tenant workspace.

delete_forever

Instant Purge Guarantee

Revoking permissions or requesting account termination irreversibly scrubs your database cluster within 60 seconds.

Section 02 Telemetry & Scopes

2. Information We Collect

We operate under the fundamental principle of data minimization: we only pull and process data strictly relevant to evaluating pacing velocity, viral signals, and studio optimization.

badge

A. Workspace Account Information

Mandatory

Legal name, administrative contact email, designated currency, and encrypted payment tokens (tokenized directly through Stripe, PCI-DSS Level 1 compliance; no card numbers ever hit SocialBoostPlus servers).

query_stats

B. Connected Channel Metrics (Official Graph APIs)

OAuth Scoped

Follower velocities, aggregate demographic indices (age brackets, geographic country percentages), engagement counts (likes, saves, reshares), and public media publication timestamps. Private direct messages (DMs) are never accessed, queried, or processed.

video_file

C. Studio Drafts, Scripts & Media Uploads

Opt-In Studio

Video hooks, thumbnail variants, and captions staged in the Studio editor. These files are isolated in your isolated private AWS S3 bucket encrypted with per-tenant customer-managed KMS keys.

Section 03 Responsible Machine Intelligence

3. AI Diagnostics & Copilot Usage

Our machine learning models compute real-time prediction curves for video longevity, optimal posting windows, and pacing diagnostics. To preserve complete creator intellectual property:

psychology

Zero Foundation Model Training on Private Works

We maintain zero-retention contracts with foundational LLM providers. Your raw video drafts, unreleased scripts, and proprietary voice-overs are never fed into public generative AI training corpora.

ANONYMIZED_INPUT_VECTOR ISOLATED_INFERENCE_PIPELINE
BERT_TOK
Zero Weight Adaptation lock
Section 04 Official Developer Ecosystems

4. Platform API Disclosures

SocialBoostPlus interfaces strictly via official, publicly registered, and enterprise-audited Developer APIs. We do not participate in web scraping, headless session spoofing, or automated reverse-engineering.

play_circle YouTube API Services
Google Verified

We adhere directly to the Google Privacy Policy and the YouTube Terms of Service. You may review and revoke access at any point via the Google Security Settings portal.

SCOPES: youtube.readonly, yt-analytics.readonly
photo_camera Meta Graph (Instagram)
Meta Verified

Instagram Professional and Facebook Page metrics are pulled strictly via Meta Graph API v21.0. App tokens are validated bi-weekly against the Meta Data Protection Assessment Framework.

SCOPES: instagram_basic, instagram_manage_insights
music_video TikTok Commercial Content
Enterprise Partner

Analytics, commercial sound license verification, and spark ad codes are ingested under the TikTok Developer Terms. User telemetry strictly excludes biometric identification data.

SCOPES: user.info.stats, video.list
share LinkedIn & X APIs
Compliant

Engagement rate telemetry and repost reach distributions operate under respective developer license covenants, maintaining complete adherence to cross-network privacy restrictions.

SCOPES: r_organization_social, tweet.read
Section 05 Sponsorship Controls

5. Marketplace & Brand Privacy

When participating in the optional SocialBoostPlus Creator Marketplace to receive brand sponsorship opportunities, you have absolute granular control over your profile visibility.

Granular Data Visibility Settings (Configurable in Settings)

Audience Demographic Percentages Share anonymized top-tier country splits with verified prospective brand partners
Creator Opt-In
Rate Card & Expected CPM Expectations Only displayed to sponsors after mutual contractual match verification
Strictly Gated
Personal Contact & Legal Entity Information Never visible publicly; masked via internal agency relay alias
100% Private
Section 06 FIPS 140-2 Level 3

6. Data Retention, Security & Encryption

All user data, analytics traces, and algorithmic indices are protected by military-grade multi-layer encryption both in transit and at rest.

sync_alt In Transit Encryption

All network communication enforces TLS 1.3 with forward secrecy, strict HTTP Strict Transport Security (HSTS), and preloaded CAA DNS records preventing intermediate packet interception.

lock_clock At Rest Cryptography

AWS Aurora and S3 assets are encrypted using AES-256 with AWS Key Management Service (AWS KMS). Secrets and tokens reside in envelope-encrypted hardware security modules.

Data Type Default Retention Revocation Effect
Channel Analytics Cache 30 Rolling Days Hard-purged in 24h
Studio Video Staging 14 Days Post-Export Instant S3 Wipe
Platform Access Tokens Duration of Subscription Revoked Immediately
Section 07 CCPA • GDPR • LGPD

7. Your Rights & One-Click Erasure

Regardless of your citizenship or residency, SocialBoostPlus extends global enterprise privacy rights to all account holders:

Right of Data Portability

Download complete machine-readable JSON files containing your historical performance records and score audits.

Right to Immediate Rectification

Correct outdated tax identifiers, company registration entities, and brand profile tags within your account settings.

Right to Object & Restrict

Pause algorithmic optimization processing while maintaining active account archive storage.

Right to Permanent Erasure

Initiate irreversible cryptographic shredding of all server rows, analytics buckets, and backups.

Ready to export or purge your creator data?

Automated self-service requests complete in under 5 minutes without support intervention.

Section 08 Legal Compliance Office

8. Contact Our Data Protection Officer

If you have questions regarding algorithmic models, platform security audits, or GDPR/CCPA regulatory requests, contact our dedicated Data Protection Officer (DPO) and privacy compliance counsel.

admin_panel_settings

Office of the DPO

SocialBoostPlus Inc. Legal & Trust Division
support_agent Direct Inquiry SLA: Under 24 Business Hours
Corporate Headquarters

SocialBoostPlus Legal & Compliance
555 Mission Street, Suite 2400
San Francisco, CA 94105
United States of America

gavel Supervisory Authority: California Privacy Protection Agency (CPPA)