GDPR Compliance

If you're in the EU, the UK, or Switzerland, the GDPR (and equivalents) gives you specific rights over your personal data. SocialsBoost honours all of them — and we've built our product so most of them are a single click in your dashboard.

You have the right to:

• Access — get a copy of the personal data we hold about you (Settings → Account → Export data).
• Rectify — correct inaccurate or incomplete information (Settings → Profile).
• Erase — request deletion of your data (Settings → Account → Delete account; full purge within 30 days).
• Restrict — pause processing while a dispute or correction is open.
• Object — say no to processing based on our legitimate interests, including profiling.
• Portability — receive your data in a structured, machine-readable format (we ship JSON).
• Withdraw consent — where processing is based on consent, you can withdraw at any time without affecting earlier processing.
• Complain — lodge a complaint with your local supervisory authority.

• Contract performance — providing the SocialsBoost service you signed up for (publishing posts, fetching analytics, processing billing).
• Legitimate interests — improving the product, preventing fraud, protecting platform integrity. We carry out a legitimate-interests assessment before relying on this basis.
• Legal obligation — keeping financial records, responding to lawful requests.
• Consent — for optional marketing emails and any non-essential cookies (we don't use third-party advertising cookies).

When you use SocialsBoost as an individual user (your own account, your own social channels): we act as the data controller for your account data and as a processor for the personal data of people who interact with your posts (commenters, mentions, etc.).

When your organisation uses SocialsBoost (workspaces, team accounts): your organisation is the controller for content uploaded to the workspace; SocialsBoost is the processor acting under your instructions and a Data Processing Agreement.

We offer a DPA incorporating the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

Email dpa@socialsboost.com and we'll send you the latest counter-signed version within one business day. No legal back-and-forth needed for the standard text.

SocialsBoost is operated from the United States. Where data flows from the EEA, UK, or Switzerland to the US (or any other country without an adequacy decision), we rely on:

• The European Commission's Standard Contractual Clauses (2021 modules).
• The UK International Data Transfer Addendum.
• Transfer impact assessments documented for each high-risk sub-processor.

Customers on the Enterprise plan can request EU-region data residency for primary storage.

We use the following sub-processors to deliver the service. Each is bound by a written agreement and is audited annually.

We'll notify customers in writing at least 30 days before adding or replacing a sub-processor that handles personal data, so you can object before the change takes effect.

You can reach our Data Protection Officer at dpo@socialsboost.com for any GDPR-related question, request, or concern.

Postal address for written DPO requests: SocialsBoost — Attn: DPO, 100 San Francisco St, San Francisco, CA 94105, USA.

Where required by Article 27 GDPR, our appointed EU representative can be contacted at eu-rep@socialsboost.com. We'll forward correspondence to the relevant team and respond within the statutory timeline.

You have the right to lodge a complaint with your local supervisory authority. We'd appreciate the chance to address concerns first — please write to dpo@socialsboost.com.

• Privacy / GDPR: privacy@socialsboost.com
• DPO: dpo@socialsboost.com
• DPA requests: dpa@socialsboost.com