Privacy Policy

Protecting your personal information with clear, transparent, and responsible data practices.

Effective Date: 7 JULY 2026 Last Updated: 7 JULY 2026

1. Introduction

Welcome to SOCIOCRAFTS ("SOCIOCRAFTS", "Company", "we", "our", or "us"). SOCIOCRAFTS is a Partnership Firm established under the Indian Partnership Act, 1932. We provide Software-as-a-Service (SaaS) solutions that help businesses, creators, and organizations automate workflows, manage digital communications, integrate with third-party platforms, and improve customer engagement.

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process your personal information when you visit our website, use our platform, mobile applications, APIs, integrations, or any related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. Company Information

Company Name: SOCIOCRAFTS

Legal Structure: Sole Proprietorship

Registered Office:West Bengal, India

Email: support@sociocrafts.com

Privacy Email: support@sociocrafts.com

Website: https://sociocrafts.com

3. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

  • Company, SOCIOCRAFTS, we, our, or us means SOCIOCRAFTS, a Partnership Firm established under the Indian Partnership Act, 1932.
  • User, you, or your means any individual, business, organization, or other legal entity that accesses or uses the Services.
  • Services means the website, web application, software, APIs, dashboard, automation tools, integrations, and all related products and services provided by SOCIOCRAFTS.
  • Personal Data means any information relating to an identified or identifiable natural person, including any information that can directly or indirectly identify such individual.
  • Processing means any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, organization, use, analysis, disclosure, transfer, sharing, modification, retrieval, deletion, or destruction.
  • Account means a registered user profile created to access and use the Services.
  • Cookies means small text files stored on your device that help us improve functionality, enhance security, remember preferences, and analyze the use of our Services.
  • Third-Party Services means external platforms, software, applications, APIs, payment providers, cloud service providers, analytics providers, or other services that integrate with or support the Services provided by SOCIOCRAFTS.
  • Applicable Law means all laws, regulations, rules, and governmental requirements applicable to the collection, processing, storage, transfer, and protection of Personal Data, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other applicable laws of India.

4. Applicable Laws

SOCIOCRAFTS processes personal data in accordance with applicable laws, including:

  • Digital Personal Data Protection Act, 2023 (India)
  • Information Technology Act, 2000
  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • Other applicable laws and regulations.

Data Principal Rights Under the Digital Personal Data Protection Act, 2023

In accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), individuals whose Personal Data is processed by SOCIOCRAFTS ("Data Principals") may have the following rights, subject to applicable law and reasonable verification of identity:

  • a. Right to Access Information — You may request information regarding the Personal Data processed by SOCIOCRAFTS, including the categories of Personal Data being processed, the purposes of processing, and information regarding any third parties with whom such data has been shared, where required by applicable law.
  • b. Right to Correction and Erasure — You may request the correction, completion, updating, or erasure of your Personal Data that is inaccurate, incomplete, misleading, or no longer necessary for the purpose for which it was collected, subject to legal and regulatory requirements.
  • c. Right to Withdraw Consent — Where processing is based on your consent, you may withdraw such consent at any time by contacting us through the methods provided in this Privacy Policy. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal and may affect your ability to access certain Services.
  • d. Right to Grievance Redressal — If you have concerns regarding the processing of your Personal Data, you may submit a grievance to SOCIOCRAFTS using the contact details provided in this Privacy Policy. We will make reasonable efforts to address and resolve such grievances within the timeframes prescribed by applicable law.
  • e. Right to Nominate — Where permitted under applicable law, you may nominate another individual to exercise your rights under the DPDP Act on your behalf in the event of your death or incapacity.
  • f. Right to Contact the Data Protection Board — If you are dissatisfied with the resolution of your grievance, you may have the right to seek remedies or file a complaint before the appropriate authority or regulatory body established under applicable law, including the Data Protection Board of India, where applicable.

To exercise any of the rights described above, please contact SOCIOCRAFTS using the contact information provided in this Privacy Policy. We may request reasonable information to verify your identity before processing any request.

5. Information We Collect

Depending on how you interact with our Services, we may collect the following categories of information:

A. Information You Provide

  • Full Name
  • Email Address
  • Mobile Number
  • Business Name
  • Company Details
  • Billing Information
  • Tax Information (where applicable)
  • Account Credentials
  • Customer Support Communications

B. Information Collected Automatically

When you use our Services, we may automatically collect:

  • IP Address
  • Browser Type
  • Device Information
  • Operating System
  • Language Preferences
  • Login Activity
  • Usage Statistics
  • Session Information
  • Error Logs
  • Cookies and Similar Technologies
  • Referral URLs

C. Information from Third-Party Integrations - Meta Platforms Data (IMPORTANT FOR META REVIEW)

If you connect supported third-party services (such as Instagram, Facebook, WhatsApp, Google, or other approved integrations) via official APIs (such as Meta Graph API), we collect only what you authorize and require to run the services:

  • Facebook Page ID, Page Name, Page Access Token
  • Instagram Business Account ID, Username, Profile Picture
  • Instagram Comments, Direct Messages (DMs), Story Mentions and Replies, Message Content and Attachments
  • Meta API Permissions: instagram_basic, instagram_manage_messages, pages_show_list, pages_messaging, business_management

Purpose: To provide a unified inbox dashboard for you to view, manage, automate, and reply to your Instagram DMs and Facebook comments/messages on behalf of your own business. We collect and process ONLY the data necessary to provide this inbox and automation functionality. We do not access, collect, or store data from personal Facebook profiles.

D. Marketplace and Digital Product Information

If you use the marketplace features of our Services to buy, sell, distribute, or access digital products or services, SOCIOCRAFTS may collect additional information necessary to operate and manage the marketplace, including:

  • Order Information, such as order numbers, purchased digital products or services, subscription details, and order status.
  • Purchase History and transaction records.
  • Product Listings, descriptions, pricing, images, digital files, licenses, and other content submitted by Creators.
  • Creator Information, including business details, contact information, payout information, and tax-related information where required by applicable law.
  • Buyer Information necessary to process purchases, verify transactions, and provide customer support.
  • Digital delivery information, including download history, product access records, license activation details, subscription status, and usage records where applicable.
  • Refund, cancellation, dispute, and support request information.
  • Communications between buyers and Creators conducted through the Services, where applicable.
  • Marketplace activity logs used to maintain platform security, detect fraud, improve the Services, and comply with legal and regulatory obligations.

We collect and process only the information reasonably necessary to provide, secure, and improve our digital marketplace Services.

In addition to the purposes described above, SOCIOCRAFTS may use your Personal Data to:

  • Facilitate purchases and sales of digital products and services through the marketplace.
  • Enable Creators to publish, manage, update, and distribute their digital products and services.
  • Process digital purchases, subscriptions, license activations, renewals, refunds, cancellations, and related transactions.
  • Deliver purchased digital products, licenses, subscriptions, or access credentials to buyers.
  • Share only the information reasonably necessary with the relevant Creator to fulfill digital purchases, provide customer support, process refunds, resolve disputes, and comply with applicable legal obligations.
  • Verify buyer and Creator identities where reasonably necessary to protect the integrity of the marketplace.
  • Maintain transaction records for accounting, taxation, auditing, legal compliance, fraud prevention, and dispute resolution.
  • Detect, investigate, prevent, and respond to fraudulent, unauthorized, deceptive, or illegal marketplace activities.
  • Monitor marketplace performance, improve user experience, and develop new features and functionality.
  • Enforce our Terms of Service, Creator Agreement, Marketplace Policies, and other applicable agreements.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain secure user sessions
  • Authenticate users
  • Improve platform functionality
  • Analyze platform performance
  • Prevent fraud and abuse
  • Enhance user experience

You may disable cookies through your browser settings; however, certain features may not function properly.

7. How We Use Your Information

We may use your information to:

  • Create and manage user accounts
  • Provide and improve our Services
  • Process transactions
  • Verify identity
  • Respond to customer support requests
  • Send important service notifications
  • Maintain platform security
  • Detect and prevent fraud
  • Comply with legal obligations
  • Perform analytics and product improvements
  • Communicate product updates and marketing (where permitted by law)

9. Sharing of Information

We do not sell your personal information.

We may disclose your information only to:

  • Payment service providers
  • Cloud hosting providers
  • Analytics providers
  • Customer support providers
  • Professional advisers
  • Government authorities or law enforcement where required by law
  • Service providers acting on our behalf under confidentiality obligations

10. Third-Party Integrations and API Providers

To provide, maintain, and improve our Services, SOCIOCRAFTS may integrate with or utilize third-party platforms, APIs, cloud infrastructure providers, payment service providers, analytics services, communication services, artificial intelligence services, and other technology partners.

These integrations may include, but are not limited to:

  • Meta Platforms (including Instagram, Facebook, WhatsApp, and related APIs)
  • Google Services and Google APIs
  • Cashfree Payments
  • Razorpay
  • Amazon Web Services (AWS)
  • Microsoft Azure
  • Cloudflare
  • OpenAI
  • Anthropic (Claude)
  • Other third-party service providers and API partners that support the functionality of our Services.

Where you choose to connect your account with a third-party platform, we may access, receive, process, or exchange only the information that you have authorized or that is necessary to provide the requested functionality.

Each third-party provider operates under its own terms of service and privacy policy. SOCIOCRAFTS does not control and is not responsible for the privacy practices, security measures, or content of any third-party provider. We encourage users to review the applicable privacy policies and terms of service of such providers before using any integrated features.

SOCIOCRAFTS is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc., Google LLC, Amazon Web Services, Microsoft Corporation, Cashfree Payments, Razorpay Software Private Limited, OpenAI, Anthropic, or any other third-party provider unless expressly stated in writing.

Users remain solely responsible for complying with the terms, policies, and applicable legal requirements of any third-party platforms connected to or used with the Services.

10.A How We Handle Meta Data

To ensure compliance with Meta's developer policies, we adhere to strict standards when handling your Meta-related data:

  • Storage: All Meta Access Tokens are stored encrypted at rest on Amazon Web Services (AWS) secure servers.
  • Retention: Meta messages and comments are retained for a maximum of 90 days, or are deleted immediately when you disconnect your account.
  • Sharing: We do NOT sell, rent, or transfer Meta data. We only share it with AWS for hosting under strict confidentiality.
  • Deletion: When you disconnect your Meta account in the Sociocrafts dashboard or email us, we delete your Meta access tokens and all associated messages from our database within 7 business days.

Sociocrafts is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc.

11. Payment Information

Payments are processed by secure third-party payment providers.

SOCIOCRAFTS does not store:

  • Credit Card Numbers
  • Debit Card Numbers
  • CVV Numbers
  • UPI PINs
  • Internet Banking Passwords

Payment providers process payment information according to their own privacy policies.

12. Data Security

SOCIOCRAFTS is committed to protecting the confidentiality, integrity, and availability of your Personal Data. We implement reasonable administrative, technical, physical, and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Our security measures may include, but are not limited to:

  • SSL/TLS encryption to protect data transmitted over the internet (encryption in transit).
  • Encryption of sensitive information where appropriate and technically feasible.
  • Role-based access controls (RBAC) to restrict access to Personal Data based on business need and authorized responsibilities.
  • Authentication controls, including secure password practices and other access management mechanisms.
  • Secure cloud infrastructure hosted by reputable service providers.
  • Network security measures, including firewalls and intrusion detection or prevention systems where appropriate.
  • Continuous security monitoring and system logging to detect unauthorized or suspicious activities.
  • Audit logs to maintain records of significant system and account activities.
  • Periodic security reviews, vulnerability assessments, and risk evaluations to identify and address potential security weaknesses.
  • Access restrictions and internal policies to ensure that only authorized personnel have access to Personal Data.
  • Employee and contractor confidentiality obligations and security awareness measures, where applicable.

While we take reasonable steps to safeguard Personal Data, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Accordingly, SOCIOCRAFTS cannot guarantee absolute security and encourages users to take appropriate precautions, including maintaining the confidentiality of their account credentials and promptly notifying us of any suspected unauthorized access or security incident.

13. Data Retention

SOCIOCRAFTS retains Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, prevent fraud, protect the security and integrity of the Services, and maintain legitimate business records.

Unless a longer retention period is required or permitted by applicable law, we generally retain information for the following periods:

  • Account Information: Until the Account is deleted or for as long as necessary to provide the Services, unless a longer retention period is required by law.
  • Marketplace Transaction Records: Up to 8 years or such longer period as required by applicable tax, accounting, or other legal obligations.
  • Billing and Payment Records: Up to 8 years or as otherwise required by applicable law. SOCIOCRAFTS does not store complete payment card details.
  • Customer Support Requests and Communications: Up to 2 years after the support request is closed, unless longer retention is required for legal or dispute resolution purposes.
  • Security Logs, Authentication Logs, and System Activity Logs: Generally between 90 and 365 days, depending on operational, security, and compliance requirements.
  • Analytics and Usage Information: Up to 26 months, unless anonymized or retained for a longer period in aggregate, non-identifiable form.
  • Consent Records: For as long as necessary to demonstrate compliance with applicable legal requirements.
  • Deleted Account Information: Certain information may be retained for a limited period after account deletion where required for fraud prevention, dispute resolution, legal compliance, enforcement of our agreements, or other legitimate business purposes.

When Personal Data is no longer required for the purposes described above, SOCIOCRAFTS will securely delete, anonymize, or otherwise dispose of such information in accordance with applicable law and our internal data retention practices.

14. Your Rights

Subject to applicable law, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Update your information
  • Request deletion of your data
  • Withdraw consent, where applicable
  • Request a copy of your personal information
  • Lodge a complaint with the appropriate authority, where available

To exercise these rights, please contact us using the details provided below.

15. Children's Privacy

Our Services are intended for users who are at least 18 years of age or the minimum legal age required under applicable law.

We do not knowingly collect personal information from children. If we become aware that such information has been collected, we will take reasonable steps to delete it.

16. International Data Transfers

Your information may be processed or stored in countries where our service providers operate.

Where personal information is transferred internationally, we implement reasonable safeguards in accordance with applicable law.

18. Data Breach Response

If we become aware of a security incident affecting personal information, we will investigate the matter, take appropriate remedial measures, and provide notifications where required under applicable law.

19. Intellectual Property

This Privacy Policy does not transfer ownership of any intellectual property.

All software, source code, trademarks, logos, branding, platform design, APIs, documentation, and proprietary technology remain the exclusive property of SOCIOCRAFTS or its licensors.

Users retain ownership of the content they upload or create through the Services, subject to any applicable service agreements.

20. Marketplace Transactions

SOCIOCRAFTS provides a platform that enables creators, businesses, and other authorized sellers ("Creators") to list, promote, and sell their products or services to users through the Services.

To facilitate marketplace transactions, we may collect, use, process, and share certain information necessary to:

  • Create and manage Creator accounts.
  • Display product or service listings.
  • Process purchases and payments.
  • Verify transactions.
  • Facilitate communication between buyers and Creators where applicable.
  • Process refunds, cancellations, or disputes.
  • Prevent fraud, abuse, and unauthorized activities.
  • Comply with applicable legal, tax, accounting, and regulatory obligations.

When a user purchases a product or service through the Services, certain information, such as the buyer's name, shipping or delivery information (where applicable), contact information, and order details, may be shared with the relevant Creator solely to the extent necessary to fulfill the order, provide customer support, process returns or refunds, and comply with applicable laws.

Creators are independent sellers and are responsible for their own privacy practices, product information, fulfillment obligations, tax compliance, customer support, and compliance with applicable laws. SOCIOCRAFTS does not control the privacy practices of individual Creators and encourages users to review any additional privacy information provided by a Creator before completing a purchase.

SOCIOCRAFTS may monitor marketplace activities, investigate suspicious transactions, and take appropriate action, including suspending or terminating accounts, where necessary to protect users, Creators, the platform, or to comply with legal obligations.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on our website with an updated "Last Updated" date. Continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

22. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India.

In the event of any dispute, claim, controversy, or disagreement arising out of or relating to this Privacy Policy or the processing of Personal Data, the parties shall first make reasonable efforts to resolve the matter amicably through good-faith discussions and negotiations.

If the dispute cannot be resolved amicably within ONE HUNDRED TWENTY (120) days from the date written notice of the dispute is provided by either party, either party may pursue any remedies available under applicable law.

Subject to the foregoing, any dispute arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Kolkata, West Bengal, India, unless otherwise required by applicable law.

23. Account Deletion & User Data Deletion

You may request the deletion of your Account and associated Personal Data at any time by contacting SOCIOCRAFTS using the contact information provided in this Privacy Policy or by emailing us at support@sociocrafts.com.

For Meta integration data, you can request deletion of all associated Personal Data and Meta data by:

  1. Navigating to Dashboard > Settings > Disconnect Facebook/Instagram > Delete Account, OR
  2. Emailing us at support@sociocrafts.com with the subject "Data Deletion Request".

We will verify and delete your Meta access tokens and stored messages within 7 business days.

You can also remove Sociocrafts integrations directly via: Facebook > Settings > Business Integrations > Remove Sociocrafts.

Data Deletion URL for Meta: https://sociocrafts.com/data-deletion

Upon receiving a valid request, we will verify your identity where reasonably necessary and process the request within a reasonable period, subject to applicable laws and our legitimate business requirements.

Please note that we may retain certain information where retention is required or permitted by applicable law, including for legal compliance, fraud prevention, dispute resolution, enforcement of our agreements, tax, accounting, or regulatory obligations, or to protect the rights, property, or safety of SOCIOCRAFTS, our users, or third parties.

Where Personal Data cannot be deleted due to legal or regulatory requirements, we will securely retain such information only for the period required by applicable law and will restrict its use to those purposes.

24. Business Transfers

In the event that SOCIOCRAFTS undergoes or is involved in a merger, acquisition, investment, financing, corporate restructuring, reorganization, dissolution, sale of assets, or any other business transaction, your Personal Data may be transferred, disclosed, or assigned to the acquiring entity, successor organization, or other relevant third party as part of that transaction.

Any successor or acquiring entity will be required to handle your Personal Data in a manner that is consistent with this Privacy Policy or as otherwise permitted or required by applicable law. Where required by law, we will provide appropriate notice of such transfer and any available choices regarding your Personal Data.

25. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact us:

SOCIOCRAFTS

Email: support@sociocrafts.com

Website: https://sociocrafts.com

Registered Office: Kolkata, West Bengal, India