This policy explains what personal data Social Proof collects, why, who we share it with and the choices you have. It covers the people who use Social Proof, the visitors to our own website, and the visitors to websites that use our widgets. We do not sell personal data.
1. Who is responsible
Social Proof is built and run by Pylogix, 1717 Saint James Place #628, Houston, TX 77056, United States, with a second office at 346 Kensington High Street, London W14 8NS, United Kingdom.
Pylogix is the controller for Social Proof account data and for data about visitors to the Social Proof website. When a website uses our widgets, the owner of that website is the controller of the data the widgets collect from its visitors, and we process that data on the owner's behalf.
2. What we collect
If you have a Social Proof account
Your name, email address and password when you sign up. We store passwords as a secure hash, never as plain text. If you sign in with Facebook, we receive your name, email address and Facebook account ID from Facebook. We also keep your campaigns, widgets, settings and plan. Each time you sign in, we record the IP address, device type, operating system and approximate location, to protect your account and investigate abuse.
If you visit a website that uses our widgets
The widget script on that website sends us:
- the page address and the website domain
- your IP address, so live counters can count visitors, and the approximate location worked out from it
- whether a widget was shown, hovered, clicked or closed on that page
- anything you type into a widget form, such as an email address, phone number, name or feedback, sent to the owner of that website
The script also stores small settings in your browser, for example to remember that you closed a widget or already saw it in this session.
If you visit the Social Proof website
Basic technical data your browser sends, such as IP address and browser type, and the analytics described in section 5.
Messages
If you contact us, we keep your message and our reply.
3. How we use it
- to run your account and show the widgets you create
- to show widgets and count activity on websites that use Social Proof, on behalf of their owners
- to show website owners statistics and the form submissions their widgets collected
- to send service emails, such as account confirmation, password resets and important notices
- to keep Social Proof secure, stop spam and abuse, and enforce our Terms of Service
- to understand how people use our own website, so we can improve it
- to meet our legal obligations
We do not sell personal data, and we do not use visitor data for our own marketing.
4. Legal bases (UK and EU)
If you are in the United Kingdom or the European Union, we rely on these legal bases: contract, to provide the service to account holders. Legitimate interests, to keep the service secure, prevent abuse and improve our website. Consent, where the law requires it for cookies or similar technology. Legal obligation, where we must keep or share data by law. For visitors of other websites, the website owner decides the legal basis for the data their widgets collect.
5. Cookies
Cookies we need
These keep the service working and cannot be switched off: a session cookie that keeps you signed in, "remember me" cookies if you choose to stay signed in, and a referral cookie if you arrive through a referral link.
Analytics on our website
We use Microsoft Clarity on the Social Proof website to see how people use it, for example which pages they open, where they click and how far they scroll. Clarity uses cookies and Microsoft processes this data under its own privacy terms. We do not add Clarity to the websites that use our widgets.
You can block or delete cookies in your browser settings. If you block the cookies we need, you will not be able to sign in.
6. Who we share data with
We only share personal data with companies that help us run Social Proof, and only as much as they need:
- Hosting and email. Our servers run on infrastructure we manage with our hosting provider, and our service emails are sent through our hosting provider's mail server.
- Cloudflare sits in front of our website to keep it fast and protect it from attacks, so it handles the traffic to and from the site.
- Microsoft provides Clarity analytics for our website.
- Meta handles the sign-in if you choose to log in with Facebook.
- Google Fonts serves the fonts on our website, so Google receives your IP address when the fonts load.
- Gravatar (Automattic) shows your profile picture when you are signed in. It receives a scrambled version of your email address, not the address itself.
- Website owners can see the statistics and form submissions from their own widgets in their dashboard.
We may also share data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.
7. International transfers
Pylogix works from the United States and the United Kingdom, and our providers may process data in other countries. When UK or EU law requires it, we use recognized safeguards for these transfers, such as standard contractual clauses.
8. How long we keep data
- Account data and content are kept while your account is open. When you delete your account, we delete them from our live systems. Copies in backups are overwritten on a regular cycle.
- Widget statistics and form submissions are kept until the website owner deletes them, the widget or their account.
- Sign-in records are kept as long as they are needed to protect accounts and investigate abuse.
- Messages are kept as long as we need them to deal with your request.
9. Your rights and choices
Account holders can see and correct most of their data in their account settings and can delete their account at any time.
You can also ask us to give you a copy of your personal data, correct or delete it, limit or stop how we use it, send it to you in a format you can move elsewhere, or withdraw consent you have given. If you visited another website that uses our widgets, we will pass your request to that website's owner or help them answer it.
If you live in California or another US state with a privacy law, you have the right to know what we collect, to correct it, to delete it and to opt out of its sale or sharing. We do not sell personal data or share it for cross-context behavioral advertising, and we will never treat you differently for using your rights.
To make a request, contact us through our contact page. We may need to confirm your identity first. In the UK you can also complain to the Information Commissioner's Office, and in the EU to your local data protection authority.
10. Children
Social Proof accounts are for adults running websites. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.
11. How we protect data
We use encrypted connections, store passwords as secure hashes, store visitor IP addresses in a compact binary form, and limit who can access our systems. No online service can promise perfect security, so please use a strong, unique password.
12. Changes to this policy
We will update this policy when our service or the law changes. If a change is significant, we will tell account holders by email or in the app before it takes effect.
13. Contact us
Questions about privacy or your data? Send us a message through our contact page and a person will reply.