1.Who we are
SocialScope (“SocialScope”, “we”, “us”) is an online marketplace that helps brands discover content creators and send them paid collaboration requests. The service is operated by SocialScope, Office address, Lahore, Punjab, Pakistan.
This Privacy Policy explains what information we collect when you use our website and apps (the “Service”), how we use it, who we share it with, and the choices you have. If you have questions, contact us at privacy@socialscope.co.
2.The short version
- We collect the information you give us (account, profile, rates, messages) and, if you are a creator, statistics from social accounts you choose to connect.
- We connect to Instagram, TikTok, YouTube and Facebook only through their official login and APIs. We never see your social media passwords and we never post, comment or send messages on your behalf.
- Creator profiles you publish, including connected-account statistics, are public so brands can find you.
- We do not sell your personal information and we do not show third-party advertising.
- You can disconnect a social account or delete your whole account at any time from your dashboard. Deletion is immediate.
3.Information we collect
a) Information you provide
- Account information: name, email address, password (stored only as a salted hash), and whether you are a creator or a brand.
- Creator profile: username, display name, bio, profile picture URL, categories, languages, country and city, availability, business contact email, rate card and portfolio items.
- Brand profile: company name, website, industry, location, logo URL and description.
- Collaboration content: campaign briefs, deliverables, budgets, deadlines, counter-offers and the messages exchanged between brands and creators.
- Communications you send to our support team.
b) Information from social accounts you connect (creators)
When you choose to connect a social account, you are redirected to that platform’s official login page and asked to grant us specific, read-only permissions. We then receive an access token (stored encrypted) and read the following:
| Platform | Data we read |
|---|---|
| Instagram (Professional accounts) | Account ID, username, profile picture, follower, following and media counts; like and comment counts and view insights for your recent posts. |
| TikTok | Open ID, username, display name, avatar, profile link, follower, following, likes and video counts; view, like and comment counts for your recent videos. |
| YouTube | Channel ID, channel title, custom URL, thumbnail, subscriber and video counts; view, like and comment counts for your recent uploads. |
| Through Facebook Login (public profile only): your app-scoped Facebook user ID, name and profile picture, used to verify that the profile is yours and to process deletion requests. Facebook does not share follower or view counts with us; the profile link and statistics shown for Facebook are entered by you and labelled “Self-reported”. We never post, read your messages, friends or posts. |
From this data we calculate aggregate metrics such as average views, average likes, engagement rate and follower growth. We do not access your direct messages, your password, your contacts, or content that is not listed above, and we never publish anything to your accounts.
c) Information collected automatically
- Log and device data: IP address, browser type, pages requested and timestamps, used for security, rate limiting and troubleshooting.
- Search activity: the filters used in creator searches, together with your account ID or an anonymous visitor ID, used to apply free search limits and to improve search results.
- Usage counters: the number of times a creator profile is viewed or appears in search results, shown to that creator as insights.
- Cookies: see section 8.
d) Payment information
Payments are processed by Stripe. Your card details are entered on Stripe’s secure checkout and are never sent to or stored on our servers. We receive only the payment status, amount, currency and a transaction reference. See the Stripe Privacy Policy.
4.How we use information
- To create and secure your account and keep you signed in.
- To build and display creator media kits and search results, including statistics from connected social accounts.
- To refresh connected-account statistics automatically (about every 12 hours) and to show follower history.
- To let brands and creators send, negotiate and discuss collaboration requests.
- To process listing fees and search-credit purchases, and to enforce free search limits.
- To prevent fraud, abuse, spam and duplicate or impersonated accounts (for example, one social account may be connected to only one creator).
- To send service messages about your account, requests and payments.
- To comply with legal obligations and enforce our Terms of Service.
Where laws such as the GDPR apply, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (security, fraud prevention, improving the Service), consent (connecting a social account, which you can withdraw at any time), and legal obligations.
5.What is public
Nothing about a creator is public until they activate their listing. Before going live, creators must confirm that they agree to publish the information below, and we record the date of that agreement.
Once a creator activates their listing, their media kit at /c/username is publicly accessible and appears in search. It shows the display name, username, bio, profile picture, categories, languages, city and country, availability, connected-account handles and statistics (followers, average views, likes and comments, engagement rate and number of posts), rate card and portfolio. Facebook statistics are entered by the creator and are labelled “Self-reported”.
Your email address, business contact email, messages, payment history, social access tokens and platform account IDs are never public. Brand profiles are visible only to creators who receive a request from that brand.
7.Instagram, TikTok, YouTube and Facebook
YouTube API Services
SocialScope uses YouTube API Services to read statistics of YouTube channels that creators connect. By connecting a YouTube account you agree to be bound by the YouTube Terms of Service. Google’s handling of your information is described in the Google Privacy Policy.
You can revoke SocialScope’s access to your YouTube/Google data at any time via the Google security settings page, or by disconnecting YouTube in your SocialScope dashboard. How quickly we delete the YouTube data we store:
- You disconnect YouTube or delete your account: immediately.
- You ask us to delete it by email: as soon as possible and within 7 days of your request.
- You revoke access on the Google security settings page: we can no longer refresh the data, and it is deleted automatically within 7 days of the revocation.
While YouTube is connected we refresh its data about every 12 hours, and data that can no longer be refreshed is never kept for more than 7 days.
Instagram (Meta)
Instagram data is accessed through Meta’s official Instagram API and is subject to the Meta Platform Terms and Meta Privacy Policy. You can remove SocialScope’s access in the Instagram app under Settings → Security → Apps and websites, or disconnect Instagram in your dashboard. If you remove the app on Instagram, Meta notifies us and we delete your Instagram data automatically. See our Data Deletion page.
Facebook (Meta)
Facebook profile data (ID, name and picture) is accessed through Facebook Login and the Graph API and is subject to the Meta Platform Terms and Meta Privacy Policy. You can remove SocialScope’s access on Facebook under Settings & privacy → Settings → Apps and websites (or Business integrations), or disconnect Facebook in your dashboard. When you remove the app on Facebook, Meta notifies us and we delete your Facebook data, including the stats you entered, automatically.
TikTok
TikTok data is accessed through TikTok’s Login Kit and Display API and is subject to the TikTok Terms of Service and TikTok Privacy Policy. You can remove access in the TikTok app under Settings and privacy → Security → Apps and services, or disconnect TikTok in your dashboard.
SocialScope is an independent service and is not affiliated with, endorsed or sponsored by Meta, Facebook, Instagram, TikTok, Google or YouTube.
9.How long we keep information
- Account and profile data: for as long as your account exists. When you delete your account, it is erased immediately together with your profiles, connected accounts, statistics history, rate cards, portfolio, collaboration requests and messages.
- Connected-account data: refreshed about every 12 hours while connected. Deleted immediately when you disconnect the account or delete your account, and within 7 days of a deletion request by email. If you revoke our access on the platform, the data can no longer be refreshed and is deleted automatically within 7 days. Facebook stats you entered yourself are kept until you disconnect Facebook, remove SocialScope on Facebook, or delete your account.
- Search logs: up to 12 months.
- Payment records: transaction records held by Stripe are retained by Stripe as required by financial regulations.
- Deletion confirmations: a confirmation code and date (no personal content) to prove a deletion request was honored.
- Backups: deleted data may remain in encrypted database backups, which are not used for any other purpose and are overwritten within 7 days.
10.Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, and to object to certain processing.
- Access and correct: edit your profile, rates and portfolio at any time from your dashboard.
- Disconnect: remove any connected social account from Dashboard → Social accounts. Its data is deleted immediately.
- Delete: delete your account from Dashboard → Settings → Delete account, or follow the steps on our Data Deletion page. Deletion requests sent by email are completed within 7 days.
- Export or other requests: email privacy@socialscope.co. We respond within 30 days and may need to verify your identity.
- Complaints: you can contact your local data protection authority.
We will not discriminate against you for exercising any of these rights.
11.Security
We protect information with industry-standard measures: all traffic is encrypted with HTTPS, passwords are hashed with bcrypt, social access tokens are encrypted at rest with AES-256-GCM and are never exposed to browsers, sessions use HTTP-only cookies with rotating refresh tokens, and access to production systems is restricted. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. We will notify you and the relevant authorities of a data breach where required by law.
12.International transfers
We and our service providers may process information in countries other than the one you live in, including Pakistan, the United States and the European Union. Where required, we use appropriate safeguards such as standard contractual clauses.
13.Children
The Service is intended for users who are at least 18 years old (or the age of majority where they live). We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
14.Changes to this policy
We may update this policy as the Service changes. We will post the new version here with a new effective date, and notify you by email or in the app if the changes are material.
15.Contact us
SocialScope
Office address, Lahore, Punjab, Pakistan
Privacy and data requests: privacy@socialscope.co
Support and legal notices: support@socialscope.co