Privacy Notice

This notice explains how SocialApp ("we", "us"), the provider of IQ Crawl, handles personal data. SocialApp is the data controller for personal data processed through IQ Crawl: we decide what data is collected and why. Our payment provider, Paddle, acts as Merchant of Record and is a separate controller for payment and tax data it collects at checkout.

1. Personal data we collect

• Account data — name, email address, hashed login credentials, and authentication identifiers where you sign in with Google.
• Profile and branding data — company name and any logo you upload for white-labelled reports.
• Content you submit — business descriptions, website URLs, competitor names, and other inputs used to generate reports.
• Subscription and entitlement data — plan, subscription status, billing period dates, and credit usage. We store payment provider identifiers, not card numbers.
• Support communications — messages you send us and our replies.
• Technical and usage data — IP address, device and browser information, log and error data, and records of actions taken in the app.

2. Why we use it and our legal bases

• Creating and administering your account, providing the Service, and generating reports — performance of our contract with you.
• Processing subscriptions, credits, and entitlements — performance of contract and compliance with legal obligations (accounting and tax records).
• Security, fraud prevention, abuse detection, and enforcement of our Terms — legitimate interests in protecting the Service and its users.
• Diagnostics, reliability, and product improvement — legitimate interests in maintaining and improving the Service.
• Customer support — performance of contract and legitimate interests.
• Marketing emails, where offered — your consent, which you can withdraw at any time.

3. Who we share data with

• Service providers and subprocessors — hosting, database, authentication, storage, email delivery, error monitoring, and AI model providers used to generate reports. They act on our instructions.
• Merchant of Record — Paddle, for the sale of our product, checkout, subscription management, payments, invoicing, and tax compliance.
• Professional advisers — legal, accounting, and audit advisers where necessary.
• Authorities — where required by law or to protect legal rights.

We do not sell or rent your personal data, and we do not share your project content with other customers.

4. International transfers

Some of our providers process data outside your country, which may include transfers outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account, project, and report data for as long as your account is active. If you stop using the Service or your account is closed, we delete or anonymise that data once it is no longer needed, typically within 12 months, except where a longer period is required for legal, tax, accounting, or dispute-resolution purposes. Log and diagnostic data is kept for a shorter period.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored data, row-level access controls that scope your data to your account, least-privilege access for internal systems, and time-limited signed links for shared report files.

7. Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time. We respond to requests within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

8. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, secure your session, and remember interface preferences such as your dashboard view. Checkout pages may set cookies operated by Paddle to complete a purchase and prevent fraud. We do not use advertising cookies. You can clear or block cookies in your browser settings, but essential cookies are required for sign-in to work.

9. Contact

To exercise your rights or ask about this notice, contact SocialApp through the support channel in your account. For payment, invoice, or refund data handled by our Merchant of Record, contact Paddle at paddle.net.