Privacy Policy
Effective date: 13 October 2026 · Domain: www.thesocialforks.com
1. Who we are
TheSocialForks ("we", "our", "us") is a trade name of Manisha Kamal (Proprietorship), registered for GST in India (GSTIN 09AWWPM4042N1ZP). We run TheSocialForks, a hosted web application at www.thesocialforks.com for managing social media, YouTube channels and website SEO from one dashboard, and we are the data controller for the personal data described in this policy.
Address: 408, F17, Hawelia Road, Techzone 4, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201318, India
Contact: legal@thesocialforks.com
2. What data we collect
Account data
- Name and email address (given when you register, or shared by Google or LinkedIn when you sign in with them)
- Profile picture URL (when you sign in with Google or LinkedIn)
- Hashed password (bcrypt — never stored in plain text)
- Login provider and last login IP
- Role and permissions within the platform
Social account credentials
- OAuth access tokens and refresh tokens — encrypted at rest using AES-256-GCM
- Platform-specific account metadata (username, profile picture URL, follower counts)
- Account health scores and posting history
Content and campaign data
- Post content, drafts, schedules, and campaign configurations
- SEO data: keywords, rank history, backlinks, audit results
- Analytics: click logs, UTM parameters, conversion events
Technical data
- Server logs (IP address, user agent, timestamps) — retained for 30 days
- Cookie consent preferences
- Session tokens (stored as HTTP-only, Secure cookies)
3. How we use your data
- To authenticate you and maintain your session
- To connect and publish content to social media platforms on your behalf
- To schedule, queue, and track marketing campaigns
- To generate analytics and SEO reports
- To send transactional system notifications (e.g. post failures, token expiry alerts)
- To comply with legal obligations
We do not sell, rent, or share your personal data with any third party for marketing purposes.
4. Legal basis for processing (GDPR)
| Processing activity | Legal basis |
|---|---|
| Account management and authentication | Contract (Art. 6(1)(b) GDPR) |
| Publishing social media posts | Contract / Legitimate interest |
| Analytics and reporting | Legitimate interest (Art. 6(1)(f)) |
| Cookie consent tracking | Consent (Art. 6(1)(a)) |
| Security logs | Legitimate interest |
| Compliance with legal requests | Legal obligation (Art. 6(1)(c)) |
5. Data retention
- Account data: retained while account is active; deleted within 30 days of deletion request
- Social tokens: deleted immediately when account is disconnected
- Post history and analytics: retained for 2 years, then anonymised
- Server logs: 30-day rolling window
- Cookie consent records: 13 months
6. Your rights (GDPR)
Under the GDPR you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Restriction — limit how we process your data
- Object — object to processing based on legitimate interest
- Withdraw consent — for any processing based on consent (e.g. cookies)
Exercise any of these rights by emailing legal@thesocialforks.com. We respond within 30 days.
7. Google API Services — Limited Use Disclosure
TheSocialForks' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through the following Google APIs is used only for the purposes described below and is never shared with third parties, used for advertising, or used to train AI/ML models:
| Google API / Scope | Data accessed | Purpose in TheSocialForks |
|---|---|---|
| Sign in with Google (openid, email, profile) | Your name, email address and profile picture | Used to create your TheSocialForks account, sign you in, and show your name and picture in the app. |
| Google Analytics Data API (analytics.readonly) | Sessions, users, pageviews, bounce rate, engagement rate, channel grouping, top pages, traffic sources | Displayed in the Analytics dashboard, and next to your SEO rank tracking. Read when you open a report; not stored. |
| Search Console API (webmasters.readonly) | Search queries, clicks, impressions, CTR, average position by query/page/device/country | Displayed in the SEO Performance dashboard. Used for rank tracking, CTR opportunity analysis, and content decay detection. Read-only; never modified. |
| YouTube Data API v3 (youtube.readonly, youtube.upload) and YouTube Analytics API (yt-analytics.readonly) | Channel info, video metadata, upload capabilities, audience analytics | Used to upload the videos you choose and to show channel and video performance in the YouTube section. |
| YouTube Data API v3 (youtube.force-ssl) | Comments and replies on your own videos, your like/dislike ratings, video details, playlists, caption tracks | Used only when you act: to read and answer comments on your videos in the Feed and Inbox, like or dislike a video, edit a video's title, description, tags and privacy, add or remove it from your playlists, and use your own captions as a transcript for AI-written titles. |
| Business Profile APIs (business.manage) | Your Business Profile accounts and locations, the posts you publish, customer reviews of your locations | Used to let you pick the locations you post to, publish the updates, offers and events you write, and show reviews in the Feed so you can reply to them. Only on your instruction. |
| Google Ads API (adwords) | Your Google Ads accounts, campaigns, budgets, ad groups, ads, keywords, conversion actions and their performance, for the accounts you connect | Used to show your campaigns' performance in the Ads section and, only when you act, to create campaigns (paused until you launch them), ad groups, ads, keywords and conversion actions, pause or enable campaigns and change their budgets. Reports are kept for up to 15 minutes to stay within Google's limits. Disconnecting Google Ads deletes its tokens and the campaign data synced from it. |
TheSocialForks uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to data from YouTube. You can revoke TheSocialForks' access to your YouTube data at any time from Google's security settings page.
Google user data is accessed only to do what you ask in the app (including a video upload you have scheduled), and only for your own workspace. YouTube videos and comments, and Business Profile posts and reviews, that you sync are stored in your workspace so the app can show them; YouTube data that hasn't been refreshed for 30 days is deleted, and you can ask us to delete any of it at any time (section 6). Disconnecting an account deletes its access tokens.
You can revoke access at any time from Google Account Permissions or by disconnecting the integration from Platforms → [Google Service] → Disconnect.
8. Third-party services
The platform integrates with the following third-party APIs. When you connect these services, their respective privacy policies also apply:
- Google (Analytics, Search Console, YouTube, Business Profile, Ads) — Privacy Policy
- LinkedIn (Microsoft) — Privacy Policy
- Meta (Facebook, Instagram, Threads, WhatsApp) — Privacy Policy
- X / Twitter — Privacy Policy
- Reddit — Privacy Policy
- TikTok — Privacy Policy
- NVIDIA (AI models) — Privacy Policy
- Anthropic and OpenAI (backup AI models) — Anthropic, OpenAI
AI features send the text you ask the AI to work on to our AI model provider, NVIDIA, or, when its models are unavailable, to Anthropic or OpenAI. When you ask the AI to write a YouTube title or description from your video, this includes your own video's captions. We don't deliberately include other personal information in AI prompts, and we never use Google user data to train AI models.
9. Security
- All OAuth tokens encrypted at rest with AES-256-GCM
- HTTPS enforced on all connections
- Passwords hashed with bcrypt (cost factor 12)
- Session tokens stored in HTTP-only, Secure, SameSite=Strict cookies
- Two-factor authentication (TOTP) for operator accounts
- Audit log for every data mutation
10. Cookies
See our Cookie Policy for full details. You can manage your cookie preferences at any time.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via an in-app notification. Continued use of the platform after the effective date constitutes acceptance.
12. Contact
Data Controller: TheSocialForks, a trade name of Manisha Kamal (Proprietorship) · GSTIN 09AWWPM4042N1ZP
Address: 408, F17, Hawelia Road, Techzone 4, Greater Noida, Gautam Buddha Nagar, Uttar Pradesh 201318, India
Email: legal@thesocialforks.com
Website: www.thesocialforks.com