Document content
Privacy Policy
The document is organized into clearer reading blocks so you can scan key clauses faster and with less effort.
Overview
Social Hub ("we", "our", or "us") is committed to handling data responsibly. This Privacy Policy explains the categories of personal and business information we collect, how we use it, when we share it, how long we keep it, and the choices available to you.
Section
1. Scope of This Policy
This policy applies to data processed through our website, dashboards, connected integrations, customer support channels, AI features, analytics tools, reporting workflows, and related services.
Depending on your subscription and enabled modules, the service may involve social media analytics, restaurant and menu intelligence, market monitoring, messaging features, AI analysis, and other business workflows.
Section
2. Information We Collect
We may collect and process the following categories of information:
Account, identity, and workspace information
- name, email address, phone number, company name, role, and team membership
- login details, authentication events, password reset activity, and security-related records
- subscription, wallet, invoice, and transaction information
Service operation and usage information
- browser, device, IP address, approximate location, session activity, logs, and diagnostics
- feature usage, clicks, searches, saved settings, and error data
- support messages, contact submissions, and onboarding communications
Customer content and business data you provide
- files, links, prompts, notes, exports, campaign inputs, and messages you submit through the service
- restaurant, menu, pricing, brand, customer, or competitor data you choose to track or upload
- AI chat inputs, instructions, and generated outputs associated with your workspace
Connected account and platform data
When you connect supported third-party accounts, we may collect the data needed for those features. This may include:
- account identifiers, usernames, page or business profile details, and access credentials or tokens
- social posts, engagement metrics, comments, messages, publishing status, and related analytics
- communication records and campaign data for supported messaging channels such as WhatsApp Business
Public market and third-party source data
When you ask us to track public sources, we may collect publicly available business and market information such as:
- public social posts, promotions, captions, engagement metrics, and profile details
- menu items, prices, discounts, restaurant information, and review content
- publicly visible competitor and market intelligence from supported platforms and sources
The exact data categories depend on the modules you use and the permissions or instructions you provide.
Section
3. Purposes of Processing
We use the information we collect to:
- provide, operate, maintain, and improve the platform
- authenticate users, manage subscriptions, and secure accounts
- display analytics, dashboards, insights, alerts, recommendations, and reports
- enable connected account features such as publishing, moderation, messaging, and campaign workflows
- process restaurant, pricing, review, and competitor intelligence workflows
- power AI-assisted features, chat tools, summaries, and decision-support outputs
- respond to support requests, send service notices, and communicate about material changes
- detect abuse, enforce our terms, investigate incidents, and comply with applicable laws
We do not sell your personal information to third parties. We do not use connected account data for unrelated advertising.
Section
4. Connected Accounts, Public Sources, and Service Providers
The service may work with official APIs, connected business accounts, public websites, public social platforms, infrastructure providers, payment tools, or AI service providers.
Examples may include:
- Meta / Instagram for analytics, inbox, comments, publishing, and business account features
- WhatsApp Business or similar messaging providers for campaign and communication features
- public social, review, menu, map, and market sources for competitive intelligence and monitoring
- hosting, storage, queueing, observability, email, and security vendors
- AI providers used to generate summaries, classifications, recommendations, or chat responses
We only request or process the access reasonably needed for the feature you enable. Third-party platforms may apply their own terms, privacy policies, retention rules, and technical limitations.
Where Meta / Instagram features are enabled, our use of that data is limited to the permissions granted, the features you enable, and the applicable platform rules and policies.
Section
5. Kuwait-Law Data Handling Principles
We seek to handle data in a manner consistent with applicable laws of the State of Kuwait for electronic transactions and digital records.
In particular, we aim to:
- collect and use personal data for specified service-related purposes
- rely on your instructions, consent, account actions, or other lawful grounds relevant to the service
- take reasonable steps to keep data accurate, relevant, and protected against unauthorized access, loss, misuse, alteration, or unlawful disclosure
- honor lawful requests to access, review, correct, update, or delete data where applicable and subject to verification, retention obligations, and technical constraints
This section is intended to align generally with the privacy and data protection provisions in Chapter Seven of Kuwait Law No. 20 of 2014 regarding Electronic Transactions, together with other applicable legal requirements.
Section
6. Disclosure and Sharing
We do not sell or rent your personal information. We may share data with the following categories of recipients where necessary:
- within your workspace or organization — with authorized admins, teammates, or operators using the same account environment
- platform and integration partners — where needed to authenticate, sync, publish, message, or retrieve data for a feature you enabled
- service providers — infrastructure, communications, analytics, AI, security, hosting, storage, and support providers acting under contractual or operational controls
- professional advisers or transaction counterparties — if reasonably necessary for audits, disputes, restructuring, or enforcement
- legal authorities — if required by law, legal process, regulatory obligation, or to protect rights, safety, or security
Section
7. Security Measures
We implement administrative, technical, and organizational measures designed to protect data, including where appropriate:
- access controls and role-based permissions
- HTTPS encryption for data in transit
- secure handling of credentials, tokens, and sensitive operational secrets
- logging, monitoring, and security review practices intended to reduce misuse and unauthorized access
Section
8. Retention of Data
We retain data only for as long as reasonably needed for service delivery, security, support, legal compliance, dispute handling, backup cycles, and legitimate operational needs.
Examples:
- account and billing records may be retained while your subscription is active and for a reasonable period afterward
- logs and security records may be retained for fraud prevention, troubleshooting, and compliance
- connected account tokens may be deleted shortly after disconnection or revocation, subject to queueing and backup delays
- public-source data, analytics outputs, and AI-generated summaries may remain in your workspace until deleted, overwritten, or expired under our retention practices
If you disconnect a Meta / Instagram account or revoke access through Meta, stored tokens related to that connection are targeted for deletion within 24 hours, subject to normal processing and backup cycles.
Section
9. Your Rights and Available Choices
Subject to applicable law and practical limitations, you may request that we:
- provide information about the personal data we hold about you
- correct or update inaccurate account information
- delete certain personal data or close your account
- disconnect third-party integrations you enabled
- stop non-essential communications
For Meta / Instagram-connected data, you may also:
- disconnect the account from within the platform
- revoke app access through Meta's app settings
- submit a Meta-related deletion request through our data deletion page
We may ask you to verify identity and authority before acting on requests. Some data may be retained where required for security, billing, fraud prevention, dispute handling, or legal compliance.
Section
10. International Transfers and Processing
Depending on the infrastructure and service providers used to operate the platform, your data may be processed or stored outside Kuwait. When this occurs, we take reasonable steps to ensure the processing remains subject to appropriate safeguards and operational protections suitable for the service.
Section
11. Updates to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by a prominent notice in the platform.
Section
12. Contact Information
For privacy questions, data requests, or to exercise your rights, please contact us at:
Email: intel@majestic-kw.com Website: https://social-hub.net