Privacy Policy
Last updated: [[DATE]]
This policy explains how [[COMPANY LEGAL NAME]], trading as SocialBoost, handles personal information, as required by the Protection of Personal Information Act, 2013 (POPIA). We are the responsible party for the information described here.
Information Officer: [[INFORMATION OFFICER NAME]], privacy@socialboost.co.za, [[PHYSICAL ADDRESS]].
1. What we collect
Everyone: name, email address, password (stored only as a secure hash), account type, the date you accepted our terms, and the IP address used when you log in.
Brands: business or artist name, campaign briefs, links to what you're promoting, targeting choices, and payment records (amount, date, gateway reference). Card and PayPal details are entered directly with PayFast or PayPal. We never receive full card numbers.
Creators: profile photo, bio, province, niches, social media handles and links, follower and view counts, prices, the posts you submit, and payout details (bank name, account holder, account number and branch code, or PayPal email).
Messages: emails and dispute details you send us.
2. Why we use it
- To create and run your account, and to keep it secure.
- To match Brands with Creators and show Creator profiles in our directory.
- To process campaign payments, hold funds, pay Creators and issue refunds.
- To verify account ownership and prevent fraud and fake engagement.
- To send emails you need, such as new applications, approvals and payouts.
- To keep financial records required by law.
We process information because it's needed to perform our agreement with you, to meet legal obligations, or for our legitimate interest in running a safe marketplace. We'll only send marketing emails if you agree, and every marketing email has an unsubscribe link.
3. What is public
For Creators with a verified account, the following is shown publicly in our directory: display name, profile photo, bio, province, niches, platform handles and links, follower counts and starting price. Your payout details are never shown to anyone except our payout staff.
Brands see a Creator's public profile and offers. Creators see a Brand's business name and campaign brief.
4. Who we share it with
- PayFast (South Africa) and PayPal to process payments.
- Our email provider to send account emails.
- Our hosting provider, who stores the site and database.
- Our bank, to make Creator payouts.
- Authorities such as SARS or law enforcement, if the law requires it.
We do not sell personal information.
5. Information sent outside South Africa
PayPal and some service providers may process information outside South Africa. We only use providers bound by data protection law or contracts that give protection similar to POPIA.
6. How long we keep it
We keep account information while your account is open. After you close it, we delete or anonymise it within 90 days, except payment and payout records, which we keep for 5 years as required by tax law.
7. Security
We use encrypted connections (HTTPS), hashed passwords, restricted staff access, and server-side processing of uploaded photos. No system is perfectly secure. If a breach affects your information, we'll notify you and the Information Regulator as POPIA requires.
8. Cookies
We use one essential cookie to keep you logged in. It's removed when you log out or after 7 days. We don't use advertising or tracking cookies. If we add website analytics in future, we'll update this policy first.
9. Your rights
Under POPIA you can ask us to:
- confirm whether we hold your information and give you a copy;
- correct information that's wrong or incomplete;
- delete information we no longer have a lawful reason to keep;
- stop using your information for marketing, or object to other processing.
Email privacy@socialboost.co.za and we'll respond within 30 days. You can also complain to the Information Regulator at inforegulator.org.za.
10. Children
SocialBoost is only for people aged 18 or older. If we learn we hold information about someone younger, we'll delete it.
11. Changes
If we make important changes to this policy, we'll email account holders before they take effect.