SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Policy, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you register for and use our Services, we process the personal information you provide to us, such as your name, email, and payment details. A core function of our Service is also to collect and process publicly available information from social media platforms, on behalf of our users. Learn more about personal information you disclose to us and information we collect from other sources.
• Do we process any sensitive personal information? We do not intentionally target or process sensitive personal information as part of our Service. However, because our Service processes publicly available social media posts, it may incidentally collect sensitive information that individuals have chosen to make public.
• Do we collect any information from third parties? Yes. The core function of SocialSonar is to collect and index publicly available data from third-party social media platforms (like X, Facebook, Reddit, etc.) based on the parameters set by our users. Learn more about information collected from other sources.
• How do we process your information? We process your (our user's) information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the publicly available data to provide our social listening analytics and insights to our users. Learn more about how we process your information.
• In what situations and with which types of parties do we share personal information? We may share your (our user's) information in specific situations and with specific categories of third parties (like our payment processor). The public data we collect is processed and displayed to our registered users as the core feature of the Service. Learn more about when and with whom we share your personal information.
• How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located geographically, you have certain rights regarding your personal information. This includes rights for our Users (to access/delete their account data) and rights for individuals whose public data we may have processed. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Policy in full.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us when you register for and use SocialSonar.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Name: To identify the user and personalize their experience.
• Email Address: To send updates, notifications, and account-related information.
• Job Title: To tailor services and insights to the user's professional role.
• Contact Preference: To ensure communication aligns with user preferences.
• Contact or Authentication Data: To secure account access and authenticate users.
• Billing Address: To process payments and comply with billing requirements.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy policy link(s) here: http://www.stripe.com/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called “HOW DO WE HANDLE YOUR SOCIAL LOGINS?” below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files.
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services.

Information collected from other sources

In Short: Our Service's core function is to collect publicly available data from social media platforms based on our users' requests.

SocialSonar is a social media listening tool. To provide our Services to our users (e.g., a Product Manager or Brand Manager), we collect and process publicly available information from third-party social media platforms and other public online sources. We collect this data on behalf of our users based on the keywords and parameters they set within the Service.

This data may include:

• Publicly available social media posts, articles, and comments.
• Publicly available profile information of the authors of such content (e.g., username, public handle, public bio, follower count).
• Metadata associated with public content (e.g., time of post, engagement statistics).

We only collect information that has been made publicly available by the social media user on the respective platform. We do not (and cannot) access private accounts or non-public information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We also process public data to provide the core social listening service to our users.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. This includes:
  • Processing your (our user's) payment and account information.
  • Providing our social listening services to you. A core part of our Service is to process the publicly available data we collect (as described in Section 1) and present insights from that data to you (e.g., sentiment analysis, key themes, mention volume).
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To communicate with you regarding our services. We may use your personal information such as your email address or phone number or other contact information to send you feedback requests, service-related updates, responses to your inquiries, and other messages from our business related to your use of our platform. You may opt out of receiving such communications at any time.
• To deliver targeted advertising to you. We may process your information to develop and display personalized content and advertising tailored to your interests, location, and more.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on.

• For Our Users (Our Customers):
  • Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose (e.g., marketing). You can withdraw your consent at any time.
  • Performance of a Contract. We process your personal information to fulfill our contractual obligations to you (i.e., to provide you with the SocialSonar Service you paid for).
• For Public Social Media Data We Process:
  • Legitimate Interests. We process publicly available social media data based on our legitimate interests, and the legitimate interests of our users (our customers). Our legitimate interest is to provide a service that allows businesses to understand public brand perception, track marketing campaign effectiveness, and identify customer feedback on public channels. Our users (e.g., a Product Manager) have a legitimate interest in understanding their customers' public feedback to improve their products. We believe this processing does not outweigh the interests or fundamental rights and freedoms of the individuals whose public data is being processed, as the data is already publicly available and our use is for analytical and reporting purposes.
• For All Data:
  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
  • Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share your (our user's) information in specific situations and/or with specific categories of third parties. The public data we collect is shared with our users as part of our Service.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your (our user's) data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. This includes:

• Payment Processors: (e.g., Stripe)
• Data Analytics Services
• Cloud Computing Services
• Website Hosting Service Providers
• Sales & Marketing Tools

With Our Users (Subscribers to the Service). The information we collect from public sources (public social media data) is processed, analyzed, and displayed to our users as the core feature of the Service they pay for. We do not sell this public data to any other third parties outside of providing this core Service.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. OUR ROLE AS A DATA PROCESSOR AND CONTROLLER

For the purposes of data protection laws (like the GDPR), it is important to understand our role.

• Tapti as a Data Controller: We act as a Data Controller for the personal information you provide to us as a user of SocialSonar (e.g., your name, email, billing info). We decide the purposes and means of processing this data.
• Tapti as a Data Processor: When our Service collects and processes publicly available social media data on behalf of our users, we are acting as a Data Processor.
• You (Our User) as a Data Controller: When you use SocialSonar to set up keywords and queries to monitor public conversations, you are acting as a Data Controller. You are determining the purpose of the data processing (e.g., “I want to track feedback for my new product line”). You are responsible for ensuring your use of the Service complies with all applicable laws and regulations.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These help us maintain the security of our Services and your account, fix bugs, save your preferences, and for analytics and advertising purposes.

(You should create and link a separate, simple Cookie Policy if you use non-essential cookies).

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information about you from your social media provider (e.g., name, email address, profile picture).

We will use the information we receive only for the purposes that are described in this Privacy Policy. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider.

Interaction with Social Media Networks

When you authorize a social media network (e.g., Facebook, X, YouTube, etc.) to connect with SocialSonar, certain data may be stored or processed by the respective platform. These interactions are governed solely by the privacy policies of that social media network.

YouTube Integration via API Services

If you choose to link your YouTube account to SocialSonar, you are granting access via YouTube API Services. By doing so, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace APIs or data to train Generative AI or ML models.

You may revoke our access to your Google account at any time via the Google Security Settings page (https://security.google.com/settings/security/permissions).

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we will take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law, including by using the European Commission's Standard Contractual Clauses.

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal account information for as long as it is necessary for the purposes set out in this Privacy Policy, and no longer than the period of time in which you have an account with us.

We retain the publicly available data we collect for a period necessary to provide our analytical services to our users.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk.

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

12. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You have rights that allow you greater access to and control over your personal information. This applies both to our users and to individuals whose public data we process.

For Users of SocialSonar (Our Customers)

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; and (iii) to restrict the processing of your personal information.

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings or contact us.

For Individuals Whose Public Data We Process

SocialSonar processes information that is made publicly available on social media. If our Service has processed your publicly available social media information on behalf of one of our users and you wish to have it removed from our systems, you can contact us at admin@tapti.ai.

We will consider and act upon any request in accordance with applicable data protection laws. Please note that we cannot remove the data from the original social media platform itself; you must contact that platform to do so.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time.

Opting out of marketing: You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track (“DNT”) feature. As no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals.

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of certain US states, you have specific rights regarding your personal information.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, North Carolina, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, or delete your personal information.

Categories of Personal Information We Collect (from our Users)

We have collected the following categories of personal information in the past twelve (12) months:

We have not “sold” or “shared” any personal information to third parties (as defined by US state laws) for a business or commercial purpose in the preceding twelve (12) months.

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing us at admin@tapti.ai.

15. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, you may have additional rights based on the country you reside in.

• Australia and New Zealand: You have the right to request access to or correction of your personal information. If you believe we are unlawfully processing your personal information, you have the right to submit a complaint.
• Republic of South Africa: You have the right to request access to or correction of your personal information and to contact the office of the regulator if you are unsatisfied.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date at the top. We encourage you to review this Privacy Policy frequently.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at admin@tapti.ai or contact us by post at:

TAPTI AI TECHNOLOGIES PRIVATE LIMITED
235, 2nd & 3rd Floor,
13th Cross Rd, Indira Nagar II Stage,
Hoysala Nagar, Indiranagar,
Bengaluru, Karnataka 560038
India

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please email us at: admin@tapti.ai.