Social Thirst AI

Privacy Policy

This Privacy Policy explains how Social Thirst AI B.V. ("SocialThirst," "we," "us," or "our"), a company registered in the Netherlands, collects, uses, and protects personal data when you use the Social Thirst AI website and application (the "Service").

We are the data controller for the personal data described in this policy. For data you connect from third-party platforms to use within the Service, we act as a processor on your behalf as described below.

1. Data We Collect

Account data. When you register, we collect your name, email address, password (stored in hashed form), and company or organization details.

Usage data. We collect information about how you interact with the Service, such as log data, device and browser information, IP address, and feature usage, to operate and improve the Service.

Third-party platform data. When you connect a TikTok or Instagram account, we collect and process data from that platform that you have authorized, as described in Section 2.

2. TikTok and Instagram Data

When you connect a TikTok or Instagram account through the platform's official authorization flow (OAuth), you grant Social Thirst AI permission to access specific data ("scopes"). We only access the scopes you approve.

What we access from TikTok. Depending on the permissions you grant, this may include your basic profile information (such as open ID, display name, and avatar), account statistics (such as follower count, following count, likes, and video count), and metadata for your public videos (such as titles, view counts, likes, comments, and shares).

How we use it. We use this data solely to provide the Service to you - to generate analytics, performance alerts, and content recommendations within your account. We do not sell this data, use it for advertising, or share it with third parties except as described in Section 4.

Storage and retention. Access tokens and connected-platform data are stored securely on our servers. We retain this data only as long as your account is connected and active, or as needed to provide the Service.

Revoking access. You can disconnect a platform at any time within the Service, or revoke Social Thirst's access directly in the platform's own settings - for TikTok, through the app management settings in your TikTok account. When you revoke access, we stop collecting new data from that platform and delete or anonymize the associated data in accordance with our retention practices.

Our use of TikTok data complies with the TikTok Developer Terms and TikTok's policies. Our use of Instagram data complies with Meta's Platform Terms and policies.

3. Legal Bases for Processing (GDPR)

Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on the following legal bases:

  • Performance of a contract - to provide the Service you have signed up for, including processing connected-platform data at your instruction.
  • Legitimate interests - to operate, secure, and improve the Service, where these interests are not overridden by your rights.
  • Consent - where you have given consent, for example by connecting a third-party account and authorizing specific scopes. You may withdraw consent at any time.
  • Legal obligation - where we are required to process data to comply with applicable law.

4. How We Share Data

We do not sell personal data. We share data only with:

  • Service providers (sub-processors) who help us operate the Service - for example, hosting, payment processing, and AI model providers - under contracts that require them to protect your data and process it only on our instructions.
  • Legal and safety - where required by law, regulation, legal process, or to protect the rights, safety, and property of Social Thirst AI, our users, or others.
  • Business transfers - in connection with a merger, acquisition, or sale of assets, subject to the protections in this policy.

AI-assisted features may send your content or connected-platform data to AI model providers to generate insights and recommendations. These providers process the data only to return results and do not use it to train their models, in accordance with our agreements with them.

5. International Transfers

We are based in the Netherlands and process data primarily within the European Economic Area (EEA). Where data is transferred outside the EEA - for example to a service provider - we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. We retain certain data longer where required for legal, accounting, or fraud-prevention purposes. When data is no longer needed, we delete or anonymize it.

7. Your Rights

Under the GDPR, you have the right to access, correct, delete, or restrict the processing of your personal data; to object to processing; to data portability; and to withdraw consent where processing is based on consent. To exercise these rights, contact us at info@socialthirst.ai.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

8. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. This includes server-side storage of access tokens, encryption in transit, and access controls.

9. Children

The Service is intended for businesses and users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, for example by email or through the Service.

11. Contact

For any questions about this Privacy Policy or to exercise your data rights, contact us at: info@socialthirst.ai