Privacy Policy

This Privacy Notice describes how Socialmon handles and protects personal information collected through our properties that link to this Privacy Notice, including the Socialmon website, web application, and our Chrome extension (together, the “Service”), as well as through our support and marketing activities described here. Socialmon helps teams save real-world marketing examples, organize them into boards, collaborate, and surface uploads publicly in a browsable inspiration library.

‍

Scope & Applicability

This Privacy Notice applies to:

• Use of the Service (website, web app, and Chrome extension used to capture screenshots/URLs).
• Content and data you submit or upload to Socialmon (e.g., screenshots, tags, board names, comments).
• Our communications with you (e.g., support, product updates, marketing emails where permitted).
• Analytics we run to operate, secure, and improve the Service (e.g., GA4).

‍

This Privacy Notice does not apply to:

• Third-party websites, platforms, or services you visit or capture content from (e.g., Instagram, LinkedIn, X/Twitter, TikTok). Those services are governed by their own terms and privacy policies.
• Public websites where content originates; we do not control those sites.
• Any third-party tools you connect now or in the future (e.g., social publishing integrations), which are subject to their own terms.

‍

Who We Are (Controller)

The controller of your personal information for the Service is Socialmon. You can contact us at privacy@socialmon.ai (or the address provided in the “How to Contact Us” section below).

‍

Roles (Controller vs. Processor)

Depending on the context, we act as:

• Controller for account administration, security, fraud prevention, Service operations, support, and our own analytics/marketing.
• Processor/Service Provider for User Content that you and your workspace store in Socialmon. In that capacity, we process User Content only on your instructions and under our data-processing terms. A Data Processing Addendum (DPA) is available upon request.

‍

Key Definitions (used throughout)

• Service: The Socialmon website, web app, and Chrome extension, plus related support and marketing touchpoints.
• User Content: Screenshots, images, text, tags, notes, comments, board names, and any metadata you add or that is captured during your use of the Service.
• Boards/Workspaces: Organizational spaces where you and your team store and collaborate on User Content. Boards can be private, team-visible, or public (if you choose).
• Public Items: Uploads saved via the Save Tool are automatically public and searchable in Socialmon’s vault. Items do not have their own public/private toggle. Boards have separate privacy controls that do not change an item’s public status in the vault.
• Administrators: Individuals who manage an organization workspace (e.g., invite/remove members, view workspace content and audit logs, manage billing and settings).
• Automated Features: Automated processing that may help organize, find, and manage content (for example, limited metadata or similarity signals used for search, de-duplication, or recommendations). Any use of User Content to improve these features (if offered) will be described in this Notice and, if provided, controllable in Settings.
  ‍

Personal Information We Collect

We collect the categories of information below when you use the Service, contact us, or otherwise interact with Socialmon.

‍

A. Information you provide directly

• Account & profile. Email address, display name, password (hashed), workspace/organization name, role, invited members, and optional profile photo.
• User Content. Screenshots and images you upload or capture with the Chrome extension; source URLs and page titles (if you include them); captions, notes, tags, keywords, custom fields, and any other metadata you add.
• Boards & collaboration. Board/collection names, descriptions, tags, comments, reactions, @mentions, share settings (private, team, or public), and audit trails of who did what and when.
• Support & feedback. Messages you send to support, attachments (including screenshots/logs you choose to share), survey responses, and feature requests.
• Billing (if/when enabled). Contact name, email, company details, and limited Stripe metadata (we do not store full payment card numbers).

B. Information collected via the Chrome extension (the “Save Tool”)

When you choose to save content using the extension, we collect:

• Active tab details (at the time you click save): URL, page title, and the specific images/screens you select to capture.
• Capture context: timestamp, browser type/version, extension version, viewport size.
• What we don’t collect: the extension does not read passwords, does not access other tabs/windows, and does not capture content in the background without your action. You can disable site permissions or uninstall at any time.

C. Information from third parties (you connecting them to your account)

• Login providers. If you sign in with Google OAuth, we receive your name, email, and profile image as permitted by your provider settings.
• Payments (if/when enabled). Our payment processor (Stripe) receives your payment details and shares back limited billing metadata necessary to identify the transaction. See Stripe’s privacy policy: https://stripe.com/privacy.
• Future integrations (if you enable them). If you later connect publishing or collaboration tools (e.g., Slack, social platforms), we will receive tokens/identifiers and the minimum data needed to provide that integration (such as scheduled posts and publish logs). You can revoke access at any time.

D. Information collected automatically when you use the Service

• Device & technical data. IP address, device/browser type and version, operating system, language and region settings, and generalized location (e.g., city/country derived from IP).
• Usage & analytics (GA4). Pages/screens viewed, on-site searches and filters, navigation paths, session duration, referral source, and interactions with UI elements (e.g., saving, tagging, sharing). We use cookies and similar technologies to operate and improve the Service. You can manage preferences in our cookie controls where available.
• Security & operations. Event logs (e.g., login attempts, permission changes, errors/crashes) to detect abuse and keep the Service reliable.
• See “Cookies and analytics” under Your Choices & Rights for details and controls.

E. Information generated by our features

We use automated features to help organize, find, and manage content you submit to the Service. When you add screenshots or other items, the Service may generate limited metadata about that content (for example, labels or similarity signals) so features like search, de-duplication, and recommendations work properly. These processes apply only to content you or your workspace choose to store in Socialmon.

In rare cases, authorized personnel may review small samples to test quality, troubleshoot issues, or investigate potential misuse, subject to strict access controls.

We do not automatically collect data from third-party websites or platforms on your behalf. Any information from such sites appears in Socialmon only if you or your workspace upload or enter it.

F. Public or shared content

• Public display. Uploads saved via the Save Tool are automatically public and searchable in Socialmon’s vault (for example, search results or galleries). Items do not have a separate public/private toggle. We may moderate, delay, or decline public display at our discretion (e.g., for quality, safety, or legal reasons).
• Public boards. If you mark a board as public, its content and associated metadata (e.g., title, tags, your display name) may be visible to anyone with the link or in publicly browsable galleries. Changing a board’s privacy does not alter the public status of items in the vault. You can switch a board’s visibility off at any time, though copies already viewed or shared by others may persist outside our control.
• Public Gallery & Takedowns. If you are a rights holder or an individual featured in public content and believe your rights or privacy are infringed, contact privacy@socialmon.ai with the URL, a description of your request, and proof of authority. We will review and respond within a reasonable period and remove or restrict content where required by law or our policies.
• Team visibility. Content in a workspace is visible to members according to workspace permissions. Administrators may have access to member-created content and activity logs for that workspace.

G. Content that may include personal or sensitive data

We do not seek to collect sensitive personal data. Because screenshots can contain anything visible on a page, you should avoid capturing sensitive information (e.g., government IDs, health or financial data). If such information is uploaded inadvertently, you can delete it in-product or contact us to request removal, subject to applicable law.

H. Information from public sources

If you choose to include public attribution (e.g., a creator handle or link) with your saved items, we will store that attribution. We do not control third-party sites you capture from and are not responsible for their content or privacy practices.

‍

How We Use Your Personal Information

We use personal information for the purposes below, or as otherwise disclosed at the time of collection.

1) Provide and operate the Service

• Create and manage accounts and workspaces; authenticate users.
• Enable saving via the Chrome extension, uploading screenshots, organizing items into boards, and collaborating with teammates.
• Power core functions such as search, organization, de-duplication, and sharing (public vault for items; private or public options for boards).
• Provide customer support and resolve issues.

2) Personalize your experience

• Remember settings and preferences (e.g., layout, filters).
• Surface relevant items or features based on how you use Socialmon.

3) Improve and develop the Service

• Monitor performance, fix bugs, and run diagnostics.
• Analyze usage patterns (e.g., with GA4) to understand what’s working and where to improve.
• Run product experiments and quality checks to test new features.

4) Security, safety, and abuse prevention

• Protect accounts and workspaces; detect, investigate, and prevent fraud, spam, unauthorized use, or violations of our terms.
• Maintain activity/audit logs and conduct security monitoring.

5) Communications

• Send service and transactional messages (e.g., account notices, policy updates, support replies).
• Send product updates, waitlist/beta notices, and marketing emails where permitted by law; you can opt out of marketing at any time.

6) Public display

• Host and display uploads (items) by default in the public vault, including any attribution you add (e.g., a link or handle), subject to moderation and our policies. We remove an item from public areas when you delete it; copies already shared by others may persist outside our control.
• Host and display boards you choose to mark as public. You can change visibility later, but copies already shared may persist outside our control.
• Allow others to view, share, and find public items in the vault and any public boards within Socialmon.

7) Feature quality and relevance (conservative)

• Generate limited metadata about content you store (for example, labels or similarity signals) so features like search, organization, and recommendations work properly.
• Occasionally review small samples under strict access controls to troubleshoot or check quality.
• We do not automatically collect data from third-party websites or platforms on your behalf. Information from such sites appears in Socialmon only if you or your workspace upload or enter it.
• (If offered) Workspace-level settings may allow you to control whether de-identified data can be used to help improve these features.

8) Compliance and legal

• Comply with applicable laws, lawful requests, and legal process.
• Enforce our terms and protect the rights, privacy, safety, or property of Socialmon, our users, or others.

9) Aggregated and de-identified uses

• Create aggregated or de-identified statistics and insights that no longer identify an individual, to analyze and improve the Service and our business.

10) Business transitions

• Support evaluations or transfers in the context of financing, mergers, acquisitions, reorganizations, or similar events, subject to appropriate safeguards.

(Retention periods for each data type are described in the “Retention” section.)

‍

Legal Bases (EEA/UK)

Where the GDPR/UK GDPR applies, we rely on the following legal bases to process personal information:

• Contract (Article 6(1)(b)) to provide and operate the Service you request.
• Legitimate interests (Article 6(1)(f)) for security, fraud prevention, Service improvement, and internal analytics, balanced against your rights.
• Consent (Article 6(1)(a)) for optional activities such as marketing emails and non-essential cookies/analytics in consent jurisdictions.
• Legal obligation (Article 6(1)(c)) to comply with laws and lawful requests.

How We Share Personal Information

We share personal information in the following circumstances, or as otherwise disclosed at the time of collection:

1) With other users and organizations at your direction

• Workspace members. Items you add to a workspace are visible to other members according to that workspace’s permissions.
• Administrators. Workspace owners/admins may access member-created content and related activity/audit logs for that workspace and manage settings, billing, and membership.
• Public items and boards. Items (uploads) are public by default in the vault and may be visible to anyone in publicly browsable areas of the Service. Boards may also be shared publicly if you choose. You can change a board’s visibility later; deleting an item removes it from the vault within a reasonable time, but copies already shared by others may persist outside our control.

2) Service providers (processors)

We engage vendors to host, support, and operate the Service (e.g., cloud hosting and storage, email delivery, customer support tooling, analytics/measurement, error monitoring, security). These providers may only process personal information on our instructions and under contractual confidentiality, security, and data protection obligations.

3) Payment processing (if/when enabled)

If you purchase a plan, payments are processed by our payment processor (e.g., Stripe). The processor receives your payment details directly and shares back limited billing metadata so we can identify your transaction and service your account. See Stripe’s privacy policy: https://stripe.com/privacy.

4) Login providers and integrations (you enable them)

If you sign in with a third-party login (e.g., Google OAuth), we receive the minimum information needed to authenticate you (such as name, email, profile image) as permitted by your provider settings.
If you later connect other tools or publishing integrations, we receive the tokens/identifiers and limited data necessary to provide that integration. You can disconnect integrations at any time.

5) Professional advisors

Lawyers, auditors, bankers, and insurers where necessary for the services they provide to us.

6) Compliance, safety, and legal protection

Law enforcement, regulators, government authorities, or other third parties when required by law or when we believe disclosure is necessary to: (a) comply with legal obligations or lawful requests; (b) enforce our terms; (c) protect the rights, privacy, safety, or property of Socialmon, our users, or others; or (d) detect, prevent, or address fraud, security, or technical issues.

7) Business transfers

In connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, reorganization, or similar transaction. The recipient will be required to use personal information consistent with this Privacy Notice or as otherwise permitted by law.

8) With your consent or at your explicit request

We may share information with third parties when you ask us to (for example, when you invite collaborators, share a public link, or participate in a referral/affiliate program).

9) Analytics and measurement

We may share limited information with analytics/measurement providers to help us understand usage and improve the Service (for example, pseudonymized identifiers and event data). Where required by law, we will obtain consent and provide controls.

10) Aggregated or de-identified information

We may share aggregated or de-identified information that does not identify you, to analyze and improve the Service or for other lawful purposes.

What we don’t do

• We do not grant service providers permission to use your personal information for their own independent marketing purposes.
• We do not automatically collect data from third-party websites or platforms on your behalf. Information from such sites appears in Socialmon only if you or your workspace upload or enter it.

Your Choices & Rights

You have choices about how your information is used, and rights under applicable laws. The options below are available in-product or by contacting us (see “How to Contact Us”).

Access and correction

• You can view and update account/profile details in Settings.
• You may request a copy or correction of other personal information we hold, subject to identity verification and applicable law.

Deletion

• You can delete items and boards at any time. Workspace admins may also delete content within their workspaces.
• You may request deletion of your account. Some information (e.g., audit logs, security records, billing/tax data) may be retained for a period as required by law or for legitimate business purposes. We’ll explain what is deleted and what is retained.

Visibility & sharing controls

• There is no per-item public/private toggle. Uploads (items) are automatically public and searchable in the vault. If you delete an item, we will remove it from public areas within a reasonable time; copies already shared by others may persist outside our control. 
• Boards have their own privacy controls. You can keep boards private to your workspace or mark them public. Changing a board’s privacy does not change an item’s public status in the vault.
• Workspace admins control membership, roles, and workspace-level settings.

Chrome extension controls

• Capture occurs only when you take a save action. You can disable per-site permissions in your browser or uninstall the extension at any time.

Email communications

• You can opt out of marketing emails via the unsubscribe link. We’ll still send you service and transactional messages (e.g., security notices, billing).

Cookies and analytics

We use cookies and similar technologies to operate the Service (strictly necessary), understand usage (analytics, e.g., GA4), improve performance, and—if enabled—support marketing.

• In regions where consent is required (e.g., EU/UK), we will present cookie preferences and honor your selections.
• You can also control cookies in your browser; some features may not work without them.
• We currently do not respond to browser Do Not Track signals. Where applicable law requires, we will honor Global Privacy Control (GPC) signals as an opt-out of targeted advertising or “sale/share” of personal information.

Interest-based advertising (if enabled)

• Where we use advertising technologies, you can limit use of advertising IDs in your device/browser settings. Regional opt-out mechanisms (where available) will be respected.

Integrations & tokens (if enabled)

• You can connect or disconnect integrations (e.g., login providers, publishing tools) and revoke permissions/tokens at any time. Disconnecting may disable related features.

Declining to provide information 

We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Region-Specific Rights

• EEA/UK: You may have rights to request access, correction, deletion, restriction, portability, and to object to processing based on legitimate interests, as well as to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority.
• California (CPRA): If we engage in activities considered “selling” or “sharing” personal information (for cross-context behavioral advertising), you have the right to opt out and we will provide a “Do Not Sell or Share My Personal Information” control and honor Global Privacy Control (GPC) signals. You also have rights to know, delete, correct, and to limit use of sensitive personal information (if collected). We do not use or disclose sensitive personal information for any purpose that would require a “limit” link.
• Singapore (PDPA): You may request access and correction; we will obtain consent for marketing and notify you of purposes for collection, use, or disclosure.

Other Sites and Services

The Service may contain links to websites, apps, and online services operated by third parties. In addition, items you save (e.g., screenshots) may reference or link to third-party content or platforms. These links and references are not an endorsement and we do not control third-party properties.

• Third-party privacy practices. Those sites and services are governed by their own terms and privacy policies. We are not responsible for their content, security, or data practices. We encourage you to review the applicable policies before interacting with them.
• Content originating elsewhere. Information from third-party sites or platforms appears in Socialmon only if you or your workspace upload or enter it (for example, by saving a screenshot or adding a link or attribution). We do not automatically collect data from those third parties on your behalf.
• Embeds and previews. Where the Service displays a link preview or thumbnail, it is provided to enhance your experience and may rely on data you supplied or standard web preview mechanisms. Availability and accuracy of previews depend on the third-party source.
• Logins and integrations. If you choose to sign in with a third-party login provider or connect other tools (now or in the future), your use of those providers is subject to their terms and privacy policies. You can disconnect integrations at any time in settings (where available).
• Your responsibilities. You are responsible for ensuring that your use of third-party sites and any content you capture or share through the Service complies with applicable laws and the third-party’s terms. If you believe content surfaced via Socialmon infringes rights or privacy, please use the contact methods in How to Contact Us.

Security

We use technical and organizational measures designed to protect personal information and the content you store in the Service. No system can be guaranteed 100% secure, but we work to reduce risk and limit impact.

Technical measures

• Encryption in transit (e.g., TLS) and at rest (where supported by our infrastructure).
• Network protections, rate limiting, and abuse detection.
• Logical separation of customer workspaces and access controls around data stores.
• Backups and recovery procedures intended to preserve availability and integrity.
• Logging and monitoring to help detect unusual activity and troubleshoot issues.
• Secure development practices, dependency management, and vulnerability remediation.

Organizational measures

• Role-based access control and least-privilege permissions for our personnel.
• Multi-factor authentication for internal administrative systems where available.
• Restricted, time-bound access to customer data for support, troubleshooting, and security, with activity logging.
• Vendor due diligence and written data-processing terms with service providers.
• Security and privacy training for relevant staff.

Your responsibilities

• Choose strong, unique passwords; keep them confidential; and enable available security features.
• Review workspace membership and permissions regularly.
• Avoid uploading sensitive personal information to screenshots or boards.

Incident response

If we become aware of a security incident affecting the Service, we will investigate, take appropriate remediation steps, and notify affected users and/or authorities as required by law.

Responsible disclosure

If you believe you have found a vulnerability, please report it to us at privacy@socialmon.ai with enough detail to help us reproduce the issue. Please do not publicly disclose the issue before we have had a reasonable opportunity to address it.

International Data Transfers

We are headquartered in Singapore and may use service providers that operate in other countries. Your personal information may be transferred to Singapore or other locations where privacy laws may not be as protective as those in your state, province, or country. When we transfer your personal information internationally, we will comply with our legal and regulatory obligations in relation to your personal information, including putting appropriate safeguards in place as required by applicable data protection laws. Where required by law (e.g., EEA/UK), we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) for transfers to countries without an adequacy decision.

Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods are:

• Account & workspace data: kept while your account is active. If you delete your account, we delete or de-identify this data within 30 days, with backups purged on a rolling basis (up to 90 days).
• User Content (screenshots, boards): retained until you or your workspace delete it; residual copies may remain in backups for up to 90 days.
• Automated-feature metadata (e.g., labels/similarity signals): retained and deleted in line with the underlying content.
• Security and operational logs: typically 12–18 months.
• Billing and tax records: typically 7 years or as required by law.

We may retain limited information as needed to comply with law, prevent fraud/abuse, or maintain security.

Children​

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are in the EEA/UK, you must be at least 16 (or have verifiable parental consent) to use the Service. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Privacy Notice​

We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on the Service, sending you an email or other appropriate means. Any modifications to this Privacy Notice will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Notice indicates your acceptance of the modified Privacy Notice.

How to contact us​

If you have any enquiries or feedback on our personal information protection policies and procedures, or if you wish to make any request, you may contact our Data Protection Officer in the following manner:

Data Protection Officer: Gina Ng

Email: privacy@socialmon.ai