Privacy Policy

We use your data to:

We implement technical and organizational security measures to protect your data:

• SSL/TLS encryption for all communications
• Password encryption using strong algorithms
• Secure hosting on certified infrastructure
• Restricted access to data on a need-to-know basis
• Managed database with point-in-time recovery provided by our hosting provider (Supabase)

We never sell your personal data. We may share your data with:

• Service providers: Stripe (payments), Supabase (hosting), analytics services
• Legal obligations: When required by law or competent authorities
• Business transfers: In the event of a merger or acquisition

All of our partners are bound by strict confidentiality obligations.

Under GDPR, you have the following rights:

To exercise your rights, contact our DPO at: dpo@socialoverlab.com

We use cookies and similar technologies on our public pages. Consent is collected and stored through Axeptio, our consent management platform (CMP). No advertising or analytics cookie is set before you give your consent, and your choice is remembered for 6 months.

• Essential cookies: required for the site to function (authentication, security). They do not require consent.
• Analytics & statistics: audience measurement, loaded only after consent.
• Advertising cookies: Meta Pixel (Meta Platforms Ireland Ltd.) and, when advertising campaigns run, Google Advertising Products, loaded through Google Tag Manager only after consent, with Google Consent Mode v2 (everything is denied by default).

You can change your mind or withdraw your consent at any time: click the "Cookies" link in the footer of our public pages (or the small cookie button at the bottom left) to reopen the consent banner.

We retain your data for as long as necessary to provide our services and meet our legal obligations:

• Account data: until account deletion + 3 years
• Billing data: 10 years (tax obligations)
• Technical logs: 1 day to 90 days depending on the log (error reports 90 days, rate-limit counters 7 days, expired sign-in states 1 day)
• Token usage ledger: 18 months (billing traceability and dispute handling)
• Voice transcriptions: 90 days
• Creations: until deleted by the user

The SociaLover Chrome extension has a single purpose: it adds a "Save" button to ad cards on the Meta Ad Library (facebook.com/ads/library) and syncs the ads you choose to save to your own SociaLover account.

• Data collected: only the ads you explicitly save (ad text, brand or page name, media URLs, format) and the email address of the account you sign in with.
• Purpose: to display these ads in your SociaLover dashboard. They are never sold, shared with third parties, or used for advertising or tracking.
• Where it goes: the extension only communicates with our backend (Supabase). No other website receives your data, and no code is loaded from a remote server.
• Login: "Sign in with Google" or email and password, through the same secure authentication as the web app. Session tokens stay on your device.
• Permissions: storage (your saved ads and your session, on your device), identity (Google sign-in), access to facebook.com/ads/library pages only (to add the Save button) and to our backend.
• Deletion: saved ads can be deleted at any time from your dashboard; uninstalling the extension removes all local data. You can also contact us to delete your account.

For any question regarding this policy or your personal data:

You also have the right to lodge a complaint with the relevant data protection authority.