I. Introduction and Controller
This Privacy Policy describes how personal data is processed in connection with the services provided on www.socialcloud.live (the “Site” and the “Services”).
The controller of your personal data is Social Cloud LLC, 100 N Howard St, Suite 7892, Spokane, Washington 99201, United States (“Social Cloud”, “we”, “us”). For customers served through the European Union, Social Cloud LLC acts through its Bulgarian branch, 25 „Nestor Abadzhiev“ St., Plovdiv 4000, Bulgaria, which provides invoicing and data residency within the European Union.
For any question, request or complaint regarding this Policy or your personal data, you may contact us at legal@socialcloud.live.
We process personal data only as described in this Policy and in accordance with the data protection law applicable to you, including the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Bulgarian Personal Data Protection Act for customers in the European Union, and applicable United States law for customers in the United States.
We may revise this Policy from time to time. Any changes will be published here and, where required, brought to your attention. Your continued use of the Services after a change takes effect constitutes acceptance of the revised Policy.
Social Cloud does not knowingly collect personal data from any person who lacks the legal capacity to enter into a binding contract with us. You are responsible for the information and content you submit through the Services.
II. Information We Collect
2.1 Information you provide to us directly
We indicate in each form whether the provision of data is mandatory or voluntary; mandatory data are those without which the respective Service cannot be provided. We collect:
- Account information provided on registration: first and last name, email address and password. We also record the fact of registration and your acceptance of the Terms (date, time and IP address).
- Data you store in your account and profile, such as files, text and other content you choose to upload. You decide what to store. You must not store or transmit through the Services special categories of personal data (Article 9 GDPR) — such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or data concerning health, sex life or sexual orientation — or national identification numbers, passport or ID card numbers.
- Communications between you and Social Cloud relating to the Services.
- Content of non-public messages you send to other users through the Services.
- Other data you voluntarily provide, for example preferences and settings.
2.2 Information we receive from your use of the Services
- Log data. Our servers automatically record log information needed to operate and secure the Services and to detect technical faults and abuse, including your request, the date and time of access, IP address, browser and device information and approximate location.
- Cookies. We use only cookies that are strictly necessary for the Services to function, including cookies set by our payment provider for secure payment processing and fraud prevention. These store settings and identifiers required by the Services and do not reveal your identity. You can delete or block cookies through your browser settings. We do not use cookies for advertising.
III. Purposes and Legal Bases of Processing
We process the personal data described above for the following purposes and on the following legal bases under Article 6(1) GDPR:
- to conclude and perform the contract for the provision of the Services, including account management, billing and support — performance of a contract (Article 6(1)(b));
- to comply with our legal obligations, including accounting, tax and record-keeping requirements — legal obligation (Article 6(1)(c));
- to operate, secure and improve the Services, prevent fraud and abuse, and establish, exercise or defend legal claims — our legitimate interests (Article 6(1)(f));
- where we rely on your consent, for the specific purpose stated when it is requested — consent (Article 6(1)(a)).
We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal requirements. Account data is deleted on closure of the account, except information whose retention is required by law or necessary to resolve disputes, which is kept for one (1) year after closure or for the period required by law.
IV. Use of Your Information
We use the information we collect to provide and support the Services, namely to: give you access to your account after you sign in; retain your settings; provide, maintain, test and improve the Services; monitor aggregate usage metrics; diagnose and fix technical problems; and prevent spam, fraud and abuse.
We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on you.
V. How Your Information Is Stored
We treat your personal data as confidential and have implemented appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, loss or destruction, including encryption of communications in transit (HTTPS/TLS).
Access to personal data is restricted to our personnel, contractors and service providers who need it to operate, develop or improve the Services, and who are bound by confidentiality obligations.
We monitor our systems for vulnerabilities and attacks. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
VI. Data Residency and Location of Processing
Your personal data is stored and processed in the region in which your account is provisioned. Data for customers provisioned in the European Union is held within the European Union by the Bulgarian branch; data for customers provisioned in the United States is held in the United States by Social Cloud LLC.
Each customer is a separate tenant, and tenant data is kept within its provisioned region. We do not transfer your personal data across regions, and we do not transfer personal data of European Union customers outside the European Union, save where you expressly instruct us to do so or where a transfer is required by a legal obligation to which we are subject.
VII. Sharing and Disclosure of Your Information
Content that you choose to make public through the Services becomes available to the public. If you remove such content, copies may persist in caches or archives, or where other users have saved it.
We do not sell your personal data. We share personal data only in the following cases:
- with service providers who process data on our behalf, under a written data processing agreement and only to the extent necessary to provide the Services;
- where required to comply with a legal obligation, court order or lawful request by a competent authority, and only to the extent so required;
- to establish, exercise or defend legal claims, prevent fraud or abuse, or protect the rights, safety or property of any person;
- in connection with a merger, acquisition or sale of assets, in which case this Policy will continue to apply to the transferred data;
- with your consent.
VIII. Your Rights
Where the GDPR applies to the processing of your personal data, you have the right to: access your data; rectify inaccurate data; erase your data; restrict processing; object to processing based on our legitimate interests; data portability; and, where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at legal@socialcloud.live. Account holders can also access, correct and delete much of their data directly in their account settings. Some Services may become unavailable if you withdraw consent or object to or restrict processing necessary to provide them.
You have the right to lodge a complaint with a supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, kzld@cpdp.bg, www.cpdp.bg. You may also lodge a complaint with the supervisory authority of your habitual residence.
IX. Links to Other Sites
The Services may contain links to third-party websites or services that we do not own or control. A link does not constitute endorsement. Those sites have their own privacy practices, for which we are not responsible. We encourage you to review their privacy documentation before providing them with personal data.
X. United States — California Privacy Rights
This Section applies to residents of California and supplements the rest of this Policy. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), you have the right to: know the personal information we collect about you and how we use and disclose it; correct inaccurate personal information; delete your personal information; opt out of the sale or sharing of your personal information; limit the use of sensitive personal information; and not be discriminated against for exercising these rights.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To exercise your rights, contact us at legal@socialcloud.live and indicate that your request relates to California privacy rights.
We do not knowingly process personal information of individuals under 18 years of age. Where a parent or guardian informs us that such data has been collected, we will take reasonable steps to delete it.
XI. Contact Us
For any question, request or complaint regarding this Policy or your personal data, contact us at legal@socialcloud.live.