Information we collect
Account & profile data
When you sign up we collect your name, work email, phone number, country, timezone, password (hashed via bcrypt), and any profile photo you upload.
Workspace & operational data
To deliver the Service we process: workspace name, connected WhatsApp numbers, broadcast templates, flow definitions, contact lists, team-member emails and roles, billing details, and audit-log events.
Customer message data
SocialGeniex stores the messages, attachments, and metadata that flow through your workspace. You are the data controller for this content; we act as a processor under our DPA.
Usage & telemetry
Anonymous usage events (page views, feature clicks, performance metrics) and standard server logs (IP address, browser type, request time) are captured for security and product improvement.
How we use your information
We use the data we collect to:
- Provide, maintain, and improve the Service
- Process payments, send invoices, and manage your subscription
- Respond to support requests and security incidents
- Detect, prevent, and address abuse, fraud, and security threats
- Send transactional emails (receipts, security alerts, product updates you opted into)
- Comply with legal obligations including tax, accounting, and law-enforcement requests
We never sell your data or your customers' data.
Sharing of information
We share data only in these limited circumstances:
- Sub-processors — AWS (hosting), Paddle (payments), SendGrid (email), Anthropic + OpenAI (AI features, redacted of PII). Full list at legal/subprocessors.
- Meta WhatsApp Cloud API — to dispatch messages on your behalf.
- Legal requirements — subpoenas, court orders, or to protect rights, safety, and integrity.
- Business transfers — in the event of a merger, acquisition, or sale of assets, with prior notice.
Cookies & tracking
We use first-party cookies for session management, security, and analytics. We do not use cross-site advertising cookies. Detailed list in our Cookie Policy.
Data retention
We retain personal data for as long as your account is active. After account termination:
- Customer data: exportable for 30 days, then deleted within 90 days
- Audit logs: 7 years for Scale plans (regulatory) or 12 months (other plans)
- Invoices & billing records: 10 years (tax law requirement)
- Backups: encrypted, fully purged within 90 days
Data security
We protect your data with:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Mandatory 2FA for all staff with production access
Your rights
Depending on your jurisdiction (GDPR, CCPA, and other applicable data protection laws) you may have rights to:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate information
- Erasure — request deletion ("right to be forgotten")
- Portability — export data in a machine-readable format
- Objection — opt out of certain processing
- Withdraw consent — for any consent-based processing
Email socialgeniex.official@gmail.com to exercise any right. We respond inside 30 days.
International transfers
Customer data is hosted in the region you select (EU, US, or India on Scale plans). Where data crosses borders we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and supplementary measures for adequate protection.
Children's privacy
SocialGeniex is a business tool not intended for users under 18. We do not knowingly collect data from children. If you believe we have, email socialgeniex.official@gmail.com.
Changes to this policy
Material changes to this Privacy Policy will be notified by email at least 30 days before they take effect. The "Updated" date at the top reflects the latest revision.
Contact us
Contact: socialgeniex.official@gmail.com
SocialGeniex · Sole proprietorship, Pakistan · Owner: Mubeen Khan
Mailing address: D-23, SB-2, Gulshan-e-Ameen Plaza, Federal B Area, Block 21, Karachi 75950, Pakistan