Privacy Policy

1. Information We Collect

When you create an account or connect your social platforms, we collect the following types of information:

• Personal Information: Your name, email address, and login metadata when you sign up or authenticate using third-party accounts.
• Social Metadata: Data available from connected platforms (for example: follower lists, professional titles, bio, or connection networks).
• Usage Data: Analytics on how you interact with the Service, including device type, IP address, browser information, and activity logs.
• Cookies & Local Storage: We use cookies to remember preferences and improve performance.

2. How We Use Your Data

We use your information to:

• Provide, maintain, and improve our AI-powered social search experience.
• Personalize your dashboard and results.
• Let members of your organization search the networks shared with it and request introductions (see "Organizations and Shared Networks" below).
• Communicate updates, feature releases, or account information.
• Monitor and prevent unauthorized access or misuse of the Service.

We do not sell, rent, or trade your personal data to third parties.

3. Data Access & Control

You can review or delete your data anytime by emailing us at team@socialsweep.ai.

If you disconnect a social account, SocialSweep stops collecting data from that source and deletes previously indexed data within a reasonable timeframe.

4. Data Security

SocialSweep classifies user data into two tiers: Public Data (publicly available profile information) and Confidential/PII Data (name, email address collected via Google OAuth). All Confidential Data is encrypted at rest using AES-256 on GCP Cloud SQL and in transit via TLS. Access is restricted to authorized services only.

Authentication is handled using industry-standard protocols developed by Google and other leading identity providers. We apply access controls and monitoring to ensure your information remains private and secure.

5. Third-Party Services

When you connect platforms like LinkedIn, Gmail, or Twitter, their APIs may share limited information with us under their respective terms. We comply with their data policies and only request permissions necessary to power your network search.

5a. Sharing of Google User Data

If you connect Gmail or Google Contacts, we process data obtained through Google's APIs. We disclose Google user data only to the following third parties, and only as necessary to provide our Service:

• Google Cloud Platform (GCP): We store and process your data on Google Cloud infrastructure (e.g., Cloud Run, Cloud SQL, Cloud Storage) to host and operate the Service.
• People Data Labs (PDL): We may send email addresses and names derived from your Gmail or Google Contacts to People Data Labs to enrich person profiles (e.g., job title, company) for your network search. PDL processes this data under its own privacy policy.
• Weaviate Cloud: We index person and relationship data (including data derived from Gmail and Google Contacts) in Weaviate Cloud to power our semantic search. Weaviate is a managed vector database service.
• OpenAI: We use OpenAI's APIs to generate embeddings and summaries from person data (including data derived from Gmail and Google Contacts) for search and display. OpenAI processes this data under its own privacy policy and data processing terms.

We do not sell, rent, or share Google user data with advertisers, data brokers, or any other parties not listed above. You can revoke our access to your Google account at any time via your Google Account permissions.

5b. Sending Emails on Your Behalf

SocialSweep lets you reach out to people in your network without leaving the app. If you choose to grant permission, you can authorize SocialSweep to send emails directly from your connected email account (such as Gmail) on your behalf — for example, when you want to message someone surfaced in your search results.

This permission is entirely optional and is only ever used at your explicit direction. We send an email only when you compose and confirm it within the Service. We do not send messages automatically, and we never use this access to send marketing, promotional, or unsolicited communications on your behalf.

You remain in full control. You can revoke email-sending access at any time from your account settings or via your Google Account permissions, and SocialSweep will immediately stop being able to send email from your account.

5c. How We Use Gmail Data

When you connect your Gmail account, SocialSweep accesses your Google data solely to power features you have explicitly asked for. Specifically, we use Gmail data to:

• Identify the people you communicate with so we can build and enrich your personal network graph and relationship insights.
• Measure relationship strength and surface relevant contacts in your search results.
• Send emails directly from your account, but only when you compose and confirm a message yourself (see "Sending Emails on Your Behalf" above).
• If you belong to or contribute to an organization, show the people you know (never the content of your emails) to that organization's members, as described in "Organizations and Shared Networks" below.

We do not sell, rent, or transfer your Gmail data to any third party for advertising, marketing, or any other purpose unrelated to providing the Service. We do not use your Gmail data to serve ads, and we do not allow humans to read your Gmail data except in the narrow cases permitted by Google (for example, with your explicit consent, for security or abuse investigations, to comply with applicable law, or where the data has been aggregated and anonymized).

SocialSweep's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5d. Organizations and Shared Networks

Every SocialSweep account belongs to exactly one team. When you sign up, that team is just you, and nothing you connect is shared with anyone else. An organization can apply for the Team plan, which SocialSweep sets up; its owner and admins can then invite members, and you join only by accepting an invitation. You can belong to one team at a time. A team can also invite contributors: people outside the team, such as advisors or investors, who share their network through a private link without creating a full account.

When you are a member of or a contributor to an organization:

• What members can see: the organization's members can search the people in your connected network and see that you know them, including the profile details we hold for those people (for example name, job title, company and public profile links), so they can ask you for an introduction.
• What they can't see: members never see the content of your emails or messages, your account credentials, or the contacts you have hidden or removed. Your searches, conversations, lists, imports, introduction requests and inner circles stay private to you and are not shared with the team.
• Introductions: when a member asks for an introduction to someone you know, we email you with the request. You decide whether to make it.
• Contributor consent: contributors are asked to agree before anything they connect is shared with the organization.
• Administration: the organization's owner and admins can see who belongs to or contributes to the organization, and how many shared credits each person has used. The team's plan and credits are shared by its members.

You stay in control. You can disconnect a source at any time, and contributors can also hide or remove individual contacts or delete everything they have shared from their contributor page. If you leave an organization, are removed from it, or a contributor's access is revoked, your network stops being searchable by that organization's members. Introductions already made outside SocialSweep can't be undone.

The organization's owner is responsible for inviting only people who are entitled to join, and for using shared networks in line with this policy and our Terms of Service.

6. Cookies

SocialSweep uses cookies and similar technologies to enhance user experience and analyze traffic. You can disable cookies in your browser settings, but some parts of the Service may not function properly.

7. Data Retention

We retain your data only as long as necessary to provide the Service or comply with legal obligations. When your account is deleted, we securely erase or anonymize personal data from our systems.

8. International Transfers

As a Canada-based company, your data may be processed on servers located in Canada or other regions where we or our partners operate. We ensure compliance with applicable data protection laws for all transfers.

9. Children's Privacy

SocialSweep is not intended for individuals under 18 years old. We do not knowingly collect data from minors. If we become aware of such data, we will delete it promptly.

10. Updates to This Policy

We may update this Privacy Policy periodically. If material changes occur, we'll notify you by email. Continued use of SocialSweep after updates means you accept the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

• Email:team@socialsweep.ai
• Website:https://socialsweep.ai