Who we are
AutoSocialProof is a product of TheBigBot LLC, a company registered in the United States. For the website and for your AutoSocialProof account we are the controller of your personal data. For data your website visitors give to widgets you run, you are the controller and we are your processor; see our Data Processing Agreement.
What we collect
- Account data: name, email, password (stored hashed), language and time zone.
- Purchase data: plan, amounts, billing country and the Stripe customer and payment identifiers. Card details are handled by Stripe; we never receive full card numbers.
- Support and contact data: what you send us through the contact form or email.
- Website usage: if you accept analytics cookies, pages viewed and events such as button clicks, through Google Analytics. Without consent, no analytics run.
- Attribution: campaign parameters (UTM tags) from the link you arrived on, stored in your browser and passed to checkout and app signup so we know which campaigns work.
- Technical data: IP address and request logs processed by our hosting and security provider (Cloudflare) to deliver and protect the site.
- App data: campaigns, widgets, statistics and the data your widgets collect or receive.
Why we use it, and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, provide the service | Contract |
| Take payments, keep tax and accounting records | Contract, legal obligation |
| Answer support requests | Contract, legitimate interests |
| Protect the site and prevent fraud (Turnstile, logs) | Legitimate interests |
| Website analytics | Consent |
| Service and billing emails | Contract |
| Product news | Consent, which you can withdraw at any time |
International transfers
We are based in the United States and our providers may process data in the US and other countries. Where GDPR or UK GDPR applies, we rely on the European Commission's Standard Contractual Clauses, the UK addendum or an adequacy decision such as the EU-US Data Privacy Framework where the provider participates.
How long we keep it
- Account data: while your account is open, and up to 90 days after deletion for backups.
- Purchase records: as long as tax law requires, typically up to 7 years.
- Widget statistics and collected data: according to your plan's retention setting, or until you delete them.
- Contact messages: up to 2 years.
- Analytics: up to 14 months in Google Analytics.
Your rights
Depending on where you live you may have the right to access, correct, delete or port your data, to object to or restrict processing, to withdraw consent, and to complain to a supervisory authority. California residents have the rights to know, delete, correct and opt out of sale or sharing (we do neither), and to non-discrimination. Make a request on our data request page. We answer within 30 days (GDPR) or 45 days (CCPA).
Children
AutoSocialProof is a business tool and is not directed to children under 16. We do not knowingly collect their data.
Security
We use HTTPS everywhere, hashed passwords, access controls and reputable infrastructure providers. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.
Changes
We will post any change on this page with a new date, and email account holders about material changes.
Contact
Use the contact form (choose "Privacy or data request"), or the privacy email shown there behind the "Show email" button. TheBigBot LLC, United States (remote-first).
