Privacy Policy
Effective date: July 26, 2026
Template notice. This is a drafting template matched to how SociallyBid operates. It is not legal advice and has not been reviewed by counsel. Complete every
[BRACKET], confirm the specific processors and data flows against your live configuration, and have a qualified privacy attorney review it — especially if you have users in the EU/UK (GDPR), California (CCPA/CPRA), or other regulated regions.
[LEGAL ENTITY NAME] ("SociallyBid", "we", "us") operates the SociallyBid marketplace. This Privacy Policy explains what personal data we collect, how we use and share it, and the rights you have. It applies to the SociallyBid websites and services (the "Platform").
1. Data controller
The controller of your personal data is [LEGAL ENTITY NAME], [MAILING ADDRESS]. For privacy questions, contact [PRIVACY CONTACT EMAIL].
2. Personal data we collect
You provide to us:
- Account data — email address, handle, password (stored only as a secure hash), and the role(s) you select (business/creator).
- Profile data — the profile details you publish, including business/creator descriptions, website, audience information, and links you choose to add.
- Connected social accounts — where you connect or report social accounts, the platform, account identifier/handle, and public metrics (for example, follower counts). We record how each was verified.
- Deal and transaction data — postings, offers, deals, messages with counterparties, deliverables, and proof of work (such as published URLs).
- Support and contact data — messages you send us through the contact form or by email.
Collected automatically:
- Usage and device data — log data, IP address, browser/device information, pages viewed, and actions taken, used for security, rate-limiting, and to operate the service. See our Cookie Policy.
From third parties:
- Payment/payout status — from our payment processor (Stripe), we receive limited status and reference information about funding, payouts, and connected accounts. We do not collect or store your full card numbers or bank credentials; those are handled by Stripe.
We do not intentionally collect special categories of data (such as health or biometric data). Please do not submit them.
3. How we use personal data
We use personal data to:
- create and manage your account and verify identity;
- operate the marketplace — matching, postings, offers, deals, messaging, and escrow coordination;
- process payments, payouts, fees, refunds, and disputes through our payment processor;
- send transactional and service communications (for example, deal, escrow, message, and verification emails);
- provide, secure, debug, and improve the Platform, including fraud prevention and rate-limiting;
- comply with legal obligations and enforce our Terms.
4. Legal bases (EEA/UK users)
Where GDPR/UK GDPR applies, we rely on: performance of a contract (to provide the Platform and process Deals); legitimate interests (to secure, operate, and improve the service and prevent fraud); consent (where required, for example certain cookies or marketing); and legal obligation (to comply with law).
5. How we share personal data
- With counterparties. Your profile, postings, offers, and messages are shared with the Users you transact or communicate with, as necessary to operate a Deal.
- Service providers (processors) who act on our behalf under contract, including:
- Stripe — payments, escrow funding, payouts, and related fraud/identity checks.
- [Email delivery provider — e.g. Mailgun] — sending transactional email.
- Database/hosting providers — [e.g. Neon, [HOSTING PROVIDER]] — storing and serving the application.
- AI providers — [e.g. Anthropic] — where AI-assisted features process content. On the SociallyBid website itself, AI ranking is not performed; AI-assisted generation runs in the separate A1Ai desktop workspace under the operator’s own API key. Confirm your live configuration and update this line accordingly.
- Legal and safety. We may disclose data to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of SociallyBid, our Users, or the public.
- Business transfers. In a merger, acquisition, financing, or sale of assets, data may be transferred as part of that transaction.
We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law. If this changes, we will update this Policy and provide any required opt-out.
6. International transfers
We and our service providers may process data in countries other than yours. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers. [Confirm mechanisms with counsel based on where your providers and users are located.]
7. Data retention
We retain personal data for as long as your account is active and as needed to provide the Platform, then for the period required to comply with legal, tax, accounting, dispute-resolution, and fraud-prevention obligations. Transaction and financial records may be retained longer where law requires. We delete or de-identify data when it is no longer needed.
8. Security
We use technical and organizational measures to protect personal data, including hashed passwords, hashed API tokens, encrypted transport, access controls, and rate-limiting. No system is perfectly secure; we cannot guarantee absolute security. Notify us promptly at [SECURITY CONTACT EMAIL] if you believe your account or data has been compromised.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. California residents may request disclosure of the categories/specific pieces of personal information collected, request deletion, and correct inaccurate information, and are entitled to non-discrimination for exercising these rights.
To exercise a right, contact [PRIVACY CONTACT EMAIL]. We will verify your request and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data-protection authority.
10. Children
The Platform is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
11. Third-party links
The Platform may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies.
12. Changes to this Policy
We may update this Policy. Material changes will be posted here with a new effective date and, where required, notified to you.
13. Contact
Privacy questions or requests: [PRIVACY CONTACT EMAIL] · [LEGAL ENTITY NAME], [MAILING ADDRESS]. [If you have an EU/UK representative or DPO, list them here.]
Questions about this document? See our contact page.