Privacy Policy

Last updated: May 2026

This Privacy Policy describes how SocialGO (“SocialGO”, “we”, “us”) collects, uses, and shares your personal data when you visit our website, create an account, or place an order. We act as the data controller for the information described below. We are committed to processing your data lawfully, transparently, and only for the purposes set out here.

1. Who this policy applies to

This policy applies to everyone who uses SocialGO, regardless of where you are located. It is written to be consistent with the European Union’s General Data Protection Regulation (GDPR) and Brazil’s Lei Geral de Proteção de Dados (LGPD), and we extend the same core rights and protections to all users.

2. Data we collect

We collect only what we need to provide the service:

• Account data: your email address, a hashed password, and basic profile preferences (such as language) you choose when signing up.
• Order data: the public profile links or post URLs you submit, the services you request, quantities, and the status and history of each order.
• Payment data: payments are handled by third-party payment processors. We do not store full card numbers or banking credentials on our servers. We retain only the minimum needed to reconcile an order, such as a transaction reference, the amount, the currency, and the payment status.
• Communications: messages you send us through support or contact forms, so we can answer you and keep a record of the conversation.
• Technical data: limited, security- and reliability-related information such as your IP address, browser type, timestamps, and basic device information collected automatically when you use the site.

We do not knowingly collect data from children, and we do not request sensitive categories of personal data (such as health, religion, or political opinions).

3. How we use your data

We use your personal data to:

• create and manage your account and authenticate your sign-ins;
• process, deliver, and provide support for the orders you place;
• prevent fraud and abuse, and keep the service secure and reliable;
• send essential service messages (for example, order confirmations and account or security notices);
• comply with our legal, accounting, and tax obligations.

4. Legal bases for processing

Under the GDPR and LGPD, we rely on the following legal bases: performance of a contract (to deliver the orders and account you ask for), legitimate interests (to keep the service secure and prevent abuse), legal obligation (to meet accounting and tax requirements), and, where required, your consent (for example, for non-essential cookies). You can withdraw consent at any time without affecting prior processing.

5. Cookies and similar technologies

We use cookies and similar technologies for two purposes:

• Strictly necessary cookies: required to sign you in, keep your session active, and remember your language. These cannot be switched off.
• Analytics cookies: used, only where permitted, to understand how the site is used so we can improve it. These are optional and set only with your consent where the law requires it.

You can control or delete cookies through your browser settings. Disabling strictly necessary cookies may prevent parts of the site from working.

6. Payment processors and other recipients

We share data only with the parties needed to run the service, under appropriate confidentiality and data-protection terms:

• Payment processors: independent third-party providers that securely handle your transactions. Your card or banking details are submitted directly to them and are governed by their own privacy policies.
• Service providers: infrastructure, hosting, and email delivery partners that operate on our behalf and only follow our instructions.
• Authorities: where we are legally required to disclose information, or to protect our rights and the safety of our users.

We do not sell your personal data, and we do not share it for third-party advertising.

7. International data transfers

SocialGO operates internationally, so your data may be processed in countries other than your own. When we transfer personal data across borders, we rely on recognized safeguards, such as standard contractual clauses or transfers to jurisdictions deemed to provide an adequate level of protection, to ensure your data stays protected to the standard required by the GDPR and LGPD.

8. Data retention

We keep personal data only for as long as we need it:

• Account data: for as long as your account is active; you can ask us to delete it at any time.
• Order and payment records: for the period required to meet accounting, tax, and anti-fraud obligations (typically several years), after which they are deleted or anonymized.
• Support messages: for as long as needed to resolve your request and for a reasonable period afterward.

When data is no longer needed, we delete it securely or anonymize it so it can no longer identify you.

9. How we protect your data

We apply technical and organizational measures appropriate to the risk, including encryption in transit, hashed passwords, access controls, and the principle of least privilege. No system is perfectly secure, but we work to keep your data safe and to respond promptly if an incident occurs.

10. Your rights

Subject to applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data (“the right to be forgotten”), subject to legal retention requirements.
• Restriction and objection: ask us to limit or stop certain processing.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: where processing is based on consent, withdraw it at any time.
• Complain: lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by applicable law and may need to verify your identity first.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Continued use of the service after an update means you accept the revised policy.

12. Contact us

If you have questions about this policy or want to exercise your rights, you can reach our Data Protection Officer through our contact page. We treat every privacy request seriously and aim to resolve it quickly and fairly.