Privacy policy

Who we are

SocialPoof (socialpoof.io) is a service that helps businesses collect testimonials from their customers and show them on their websites. You can run it in the web app or hand the job to an AI agent. In this policy, “we” means SocialPoof. You can reach us at support@socialpoof.io.

Two groups of people are covered here. Account owners are the businesses and people who sign up and use SocialPoof. Respondents are the people who leave a testimonial on an owner’s collect page. If you are a respondent, you don’t need an account and most of this page won’t apply to you, but the sections on your words, cookies and your rights do.

What we collect from account owners

• Sign-in details. Your email address, and your first name if you give it to us or choose Google sign-in (Google shares your email, whether it is verified, and your first name).
• Your brands and what you put in them. Brand names, website addresses, colours, a logo if you upload one, your collect forms, walls and settings, the testimonials you collect or import, and the tags and edits you make. If you add people to ask, their email addresses and names. If you add a webhook, its address and signing secret.
• Billing details. Payment is handled by Stripe, so we never see or store your card number. We keep your plan, a Stripe customer and subscription ID, and the email you used at checkout.
• Keys and sessions. We store only a one-way hash of your API key (plus its last four characters so you can recognise it). A signed-in browser gets a session record with a hashed token, the browser’s user-agent text, and when it was used.
• Agent activity. When an AI agent uses your key we log each tool call (which tool, when, how long, whether it worked) and the name the agent app gives itself. This powers the activity receipt in your account. We also keep a short record of sensitive actions like rotating a key, changing plan, exporting data and deleting the account.
• Usage counts. Per day, how many times each wall was viewed, each collect page was visited and how many submissions came in, plus the website hostnames that load your wall. We don’t record anything about the people viewing the wall.
• Agency enquiries. If you use the contact form for Agency plans: your name, email, agency, number of brands and message.
• Network address. We use your IP address to limit abuse, such as too many sign-ups or sign-in links from one place. For that we keep only a shortened one-way hash of it, and those counters are deleted after about three days. The raw address is also seen by our host and by the human check described below.

What we collect from respondents

When you leave a testimonial on a collect page, we store what you choose to send:

• Your words, and your star rating if the page asks for one.
• A video of up to two minutes, if you record one. It is stored with Cloudflare Stream.
• Your name, and your role, company, photo link and answers to any extra questions if the page asks for them.
• Your email address, if you give one (it is optional), or the address the ask email was sent to if you arrived through a personal link. We use it to send you a confirmation with a link to remove your words. It is never shown publicly.
• Your consent: the exact sentence next to the checkbox you ticked, and when you ticked it. The sentence says the business may show your exact words, or a shortened excerpt, with your name, role and rating on its website, its social media and its SocialPoof page.
• A shortened one-way hash of your network address, used only to limit spam, and kept for about three days. A human check from Cloudflare runs when you send, and it sees your address and browser details.

The business you wrote to receives all of this, including your email address, in its SocialPoof account. If it approves your testimonial, your words, name, role, company, photo and rating can appear on its website, on a SocialPoof page for its wall, and on share images it makes. Videos play from Cloudflare when a visitor taps play.

Why we use it

• To run SocialPoof: sign you in, store your brands and testimonials, show walls, and send the emails the service depends on.
• To bill you and keep track of your plan and trial.
• To keep the service safe: stop spam and bots, limit abuse, and protect accounts.
• To answer you when you write to us, and to meet legal obligations.

Where the law asks for a legal basis: we use your data to deliver the service you asked for, with your consent where you gave it (the testimonial checkbox), and for our legitimate interest in keeping the service secure.

Who helps us run it

These companies process data for us, and only to provide their part of the service.

• Vercel hosts the website and the app. It handles each request to socialpoof.io, including the visitor’s IP address, and keeps request logs.
• Neon runs the Postgres database where everything above is stored, including uploaded brand logos.
• Stripe takes payments. It receives your email, your payment details (entered on Stripe’s own page) and your subscription. Stripe keeps its own records as the law requires.
• Resend sends our email: sign-in links, key recovery, notifications to owners, and the asks and confirmations sent on an owner’s behalf. It receives the recipient’s address and the message. It tells us about bounces and complaints.
• Cloudflare stores and delivers testimonial videos (Stream) and runs the human check (Turnstile) on the sign-in page, collect pages and the Agency form. Turnstile sees the visitor’s IP address and browser details.
• Google, only if you choose “Continue with Google”. Google learns that you signed in to SocialPoof, and we receive your email, its verified status and your first name.

Two more recipients are not our vendors. The business that collects a testimonial receives it (see above). And if an owner sets up a webhook, the testimonial details go to the address they chose. When an owner’s wall loads on a website, the visitor’s browser fetches the wall from socialpoof.io, and plays video from Cloudflare only on tap.

We may also share information when the law requires it or to protect people from harm.

We don’t sell your data or track you for ads

We don’t sell personal information, we don’t share it for advertising, and our pages have no advertising pixels and no analytics scripts. Our fonts are served from our own site, so loading a page doesn’t contact Google Fonts.

Cookies and browser storage

We use only what the product needs to work. None of it is for advertising.

• sp_session keeps you signed in. It is HttpOnly, lasts 30 days from your last visit and is only set when you sign in.
• sp_oauth holds the state of a Google sign-in for up to 10 minutes, then it goes.
• sp_brand remembers which of your brands you were looking at in the app. It holds a brand ID and nothing else, and lasts a year.
• Browser storage (localStorage). The collect page keeps a draft of what you typed and, after you send, a random removal code so you can take your words back from the same device. An embedded wall remembers its height and layout so the page doesn’t jump. The app remembers that you have seen the “your wall is live” note.
• Cloudflare Turnstile loads from Cloudflare where a human check is shown, and may use its own browser storage. See Cloudflare’s documentation for details.

How long we keep it, and deleting it

Owners’ accounts and everything in them stay until you delete the account. If a trial ends or you cancel, we keep your content so you can come back, but collecting pauses. You can export your testimonials as CSV or JSON from Settings at any time.

Deleting your account is in Settings: you type your email to confirm. We cancel your Stripe subscription first (if that fails, nothing is deleted and you can try again). Then we delete your brands, forms, walls, testimonials, asks, webhooks, keys and sessions. Videos are removed from Cloudflare Stream, and if that call fails we keep retrying until it succeeds.

After an account is deleted we still keep:

• a short record that it happened (a random ID, plan, number of brands and time, with no email or content in it);
• the website hostnames it used, so a deleted trial can’t simply be restarted on the same site;
• the “do not email” list of addresses that unsubscribed or bounced, so we keep honouring it;
• any Agency enquiry you sent us;
• records our providers must keep, such as Stripe’s billing records.

Short-lived data is removed automatically: sign-in links (15 minutes to use, then deleted within a day or so), sessions that expire, abuse-limit counters (about three days), the list of which sites loaded a wall (90 days, after rolling it into daily counts) and webhook delivery logs (30 days). Our database provider may keep backups on its own schedule.

If you left a testimonial

• Consent is yours. Nothing is sent until you tick the box, and the page says exactly what you are agreeing to.
• Take your words back. The confirmation email has a “Remove my words” button, and the collect page on the same device offers “Want to change them?”. Your testimonial then stops appearing on walls and share pages right away. The business may still hold the record in its account until it deletes it, and we can’t pull back copies already posted elsewhere, such as a shared image on social media.
• Ask the business. It decides what to do with your testimonial and can delete it. If you can’t reach it, email support@socialpoof.io and we will help.
• Stop emails. Every ask and confirmation email sent through SocialPoof has a one-click “Don’t ask me again” or “Don’t email me again” link. It stops our emails to your address from every business that uses SocialPoof.
• Your other rights. Depending on where you live, you may be able to ask to see, correct, export or delete your personal information, object to how it is used, or complain to your local data protection authority. Email us and we will answer. For testimonials, we act on the business’s behalf, so we may point you to the business too.

Keeping it safe

Pages are served over HTTPS. API keys, sign-in links, removal codes and sessions are stored only as one-way hashes. No system is perfectly secure, so if you think something is wrong, tell us at support@socialpoof.io.

Children

SocialPoof is made for businesses and isn’t meant for anyone under 16. We don’t knowingly collect information from children. If you think a child has sent us something, write to us and we will delete it.

Changes

We may update this policy as the product changes. The date at the top shows the latest version. If we make a big change, we will tell account owners by email. See also our terms of service.

Contact

Questions, requests or worries: support@socialpoof.io.