Privacy Notice

Social Surfboard is operated by LeadsGPS LLC. LeadsGPS LLC is the data controller for the personal data described here. That means we decide how and why your data is used.

What we collect and why

• Account details (name, email, login credentials): to create and secure your account. Legal basis: contract.
• Business and brand information (websites, brand profiles, strategies, posts, media and AI prompts): to provide the service. Legal basis: contract.
• Connected account data (read-only stats from channels you connect, such as TikTok, YouTube, LinkedIn and Google Search Console): to show your analytics and inform your content. Legal basis: contract and consent.
• Support messages and AI assistant chats: to help you and answer your questions. Legal basis: contract.
• Usage and device data (IP address, device and browser details, usage logs): for security, fraud prevention and improving the product. Legal basis: legitimate interests.
• Marketing emails: only if you agree to them. You can opt out anytime. Legal basis: consent.

Who we share data with

• Service providers that help us run the service, such as hosting, database, AI model and analytics providers.
• Stripe, our payment processor, which handles card payments, subscription billing and invoices.
• Professional advisers, such as lawyers and accountants.
• Authorities, when the law requires it.

We do not sell your personal data.

Retention

We keep your data while your account is active and for as long as we need it for the purposes above or to meet legal duties. After that, we delete or anonymise it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your data. You may also have the right to object to how we use it and to withdraw consent. You can complain to your local data protection authority. Contact us to use any of these rights and we'll respond within one month.

International transfers

Our providers may process data outside your country. Where required, we use safeguards such as Standard Contractual Clauses.

Security

We use appropriate technical and organisational measures to protect your data. These include encryption in transit, access controls, and private storage for your media files.

Cookies

We use essential cookies and browser storage to keep you signed in and to remember settings, such as your active brand. We don't use advertising cookies. You can clear them in your browser settings, but you'll be signed out.