Privacy Policy

How we handle your data with a security-first approach. Your social media tokens and content are always protected.

Last Updated: March 2026

Privacy Policy

Last Updated: March 2026

This Privacy Policy ("Policy") describes how Demands Hub AI Solutions LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects information about you when you use the SocialForge platform ("Service"). BY USING THE SERVICE, YOU AGREE TO THE COLLECTION AND USE OF INFORMATION IN ACCORDANCE WITH THIS POLICY.

1. Scope and Applicability

This Policy applies to all users of the SocialForge web application and APIs. It does not apply to the data practices of any third-party social media platforms (e.g., YouTube, Instagram, TikTok, Twitter/X, LinkedIn, Facebook, Snapchat) whose APIs you may connect to through the Service. We encourage you to review the privacy policies of all third-party platforms you connect.

2. Information We Collect

a) Account Information. When you register, we collect: full name, email address, and subscription/billing information. Billing data is processed and stored exclusively by Stripe, Inc. We do not store raw payment card data.

b) OAuth Tokens. When you connect social media accounts, we receive OAuth access tokens from those platforms. These tokens are encrypted at rest using AES-256-GCM and are never stored in plaintext. The encryption key material is managed separately from the encrypted data. Tokens are decrypted in-memory only for the duration of an authorized publishing or analytics request and are never logged in plaintext.

c) Usage Data. We automatically collect metadata about your use of the Service, including: IP addresses, browser/device type, operating system, session duration, features accessed, posts created, platforms connected, and scheduling activity. This data is used to operate, improve, and secure the Service.

d) Published Content. We store the captions, hashtags, media references, scheduled times, and publication status of posts you create through SocialForge in order to execute scheduled publishing on your behalf.

e) Analytics Data. We may retrieve engagement metrics (likes, comments, reach, impressions) from connected social media platforms via their APIs, solely to display analytics to you within the Service. We do not sell or share this data with third parties.

f) AI Interaction Data. If you use AI-powered features (e.g., caption generation), we collect the inputs you provide and the outputs generated. This data may be used in anonymized or aggregated form to improve our AI features. See Section 4 for opt-out options. We will not use identifiable Prompt data for AI training without your separate consent.

g) Device and Technical Information. We may collect device identifiers, crash/diagnostic data, and push notification tokens when applicable.

h) Communications. If you contact us via email or support channels, we retain those communications to resolve your inquiry and improve support quality.

i) Content Safety Data. To enforce our Content Standards and zero-tolerance hate speech policy (as described in our Terms of Service), we may analyze content submitted to the Service for prohibited material. Flagged content may be retained for a reasonable period for enforcement, legal, and abuse-prevention purposes.

3. How We Use Your Information

We use the information we collect to:

  • **Provide and Operate the Service:** Process your requests, manage your account, authenticate your identity, execute scheduled posts, and retrieve analytics from connected platforms on your behalf.
  • **Content Safety and Enforcement:** Monitor for content that violates our Terms of Service, including our zero-tolerance hate speech policy, to protect the safety and integrity of the platform and its users.
  • **Security and Fraud Prevention:** Monitor for suspicious activity, investigate breaches, enforce our Terms, and protect the rights and safety of our users and the Company.
  • **Billing and Payments:** Process subscriptions, issue invoices, and manage payment failures through Stripe.
  • **AI Improvement:** Use anonymized and aggregated data to train and improve our AI features. We will not use identifiable data for AI training without your separate consent.
  • **Customer Support:** Respond to support requests, resolve disputes, and troubleshoot issues.
  • **Marketing and Communications:** As consented to under our Terms of Service, we may contact you with product updates, educational content, and promotional offers.
  • **Legal Compliance:** Comply with applicable laws, regulations, court orders, and lawful government requests, including reporting unlawful content or conduct to appropriate authorities.
  • **Analytics and Product Improvement:** Analyze aggregate usage patterns to improve the Service's features, stability, and user experience.
  • 4. Your Choices and Rights

    a) AI Training Opt-Out. You may contact us at info@demandshub.com to request that your interaction data not be used for AI model training. Opt-out requests will be honored within 30 days for future data; we cannot retroactively remove data already incorporated into prior training cycles.

    b) Marketing Opt-Out. You may opt out of promotional emails at any time via the unsubscribe link in our communications. Opting out of marketing does not affect transactional and account-related messages necessary to provide the Service.

    c) Connected Accounts. You may disconnect any connected social media account at any time through your dashboard. This will revoke our ability to publish on your behalf to that platform. You should also revoke the OAuth token directly within each social media platform's settings.

    d) Access and Correction. You may access and update your account information at any time through your account settings dashboard.

    e) Data Deletion. You may request deletion of your account and associated personal data by submitting a request through your dashboard or by contacting info@demandshub.com. Upon a verified deletion request, we will delete or anonymize your personal data within 30 days, subject to legal hold obligations. Note that content safety records related to policy violations may be retained as required by law or for legitimate enforcement purposes.

    f) Jurisdiction-Specific Rights.

  • **California (CCPA/CPRA):** California residents have the right to know what personal information is collected, request access to or deletion of personal information, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. Contact us at info@demandshub.com to exercise your rights.
  • **European Economic Area (GDPR):** If you are located in the EEA, your personal data will be processed in accordance with GDPR. Our legal bases for processing include: (i) performance of a contract; (ii) legitimate interests; (iii) legal obligation; and (iv) consent. You may lodge a complaint with your local Data Protection Authority.
  • 5. Data Sharing and Third-Party Disclosure

    We do not sell, rent, or trade your personal information or SMS opt-in data to third parties for their own marketing purposes.

    We may share your information with:

  • **Service Providers:** Trusted third-party vendors who assist us in operating the Service (e.g., Stripe for payments, Cloudflare for edge infrastructure, database hosting providers). These providers are contractually obligated to use your data only as directed by us.
  • **Social Media Platforms:** When you connect accounts and publish through SocialForge, we interact with the APIs of the connected platforms on your behalf. These platforms receive the content you publish and may collect data about the interaction per their own privacy policies.
  • **Legal and Regulatory Authorities:** We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of the Company, our users, or the public. This includes reporting illegal content (e.g., child sexual abuse material, credible violence threats) to law enforcement and appropriate authorities.
  • **Business Transfers:** In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your information may be transferred as a business asset, subject to the terms of this Policy.
  • **With Your Consent:** We may share information with third parties when you have explicitly consented to such sharing.
  • 6. Security

    We implement industry-standard, enterprise-grade security measures to protect your information, including:

  • AES-256-GCM encryption of all OAuth tokens at rest.
  • TLS 1.2/1.3 encryption for all data in transit.
  • Zero-knowledge architecture ensuring tokens are decrypted only in-memory for authorized publishing requests and are never logged in plaintext.
  • Role-based access controls and audit logging for internal access to customer data.
  • Regular security assessments and vulnerability management.
  • However, no security system is impenetrable. By using the Service, you acknowledge that: (i) internet transmissions are never entirely secure; (ii) we cannot guarantee the absolute security of your information; and (iii) you agree that the Company is not liable for unauthorized access or data breaches to the fullest extent permitted by law. You are responsible for maintaining the security of your account credentials and for promptly notifying us of any suspected unauthorized access.

    7. Data Retention

    We retain your personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where required by law to retain it for longer periods (e.g., financial records, which may be retained for up to 7 years as required by applicable tax and accounting regulations; content safety records related to enforced violations, which may be retained for up to 2 years).

    Anonymized, aggregate data derived from your use of the Service may be retained indefinitely for analytics and product improvement purposes.

    8. Children's Privacy

    The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information promptly. If you believe we have mistakenly collected information from a minor, please contact us at info@demandshub.com.

    Any content involving the sexual exploitation of minors (CSAM) that is discovered on our platform will be immediately removed, the responsible account will be permanently terminated, and we will report the matter to the National Center for Missing and Exploited Children (NCMEC) and applicable law enforcement.

    9. International Data Transfers

    Demands Hub AI Solutions LLC is headquartered in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

    10. Third-Party Links and Services

    The Service may contain links to or integrations with third-party websites, applications, or services. This Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of all third-party services you access through the Service.

    11. Changes to This Policy

    We may update this Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, providing notice via email or in-app notification. Your continued use of the Service following notice of changes constitutes your acceptance of the updated Policy.

    12. Contact Us

    For questions, concerns, or requests regarding this Privacy Policy:

  • **Email:** info@demandshub.com
  • **Mailing Address:** Demands Hub AI Solutions LLC, State of Maryland, United States
  • By using SocialForge, you consent to the data practices described in this policy.
    For data requests or inquiries, contact info@demandshub.com.

    Back to HomeTerms of Service →