This Privacy Policy explains what personal data SocialStud.io collects, why we use it, who we share it with and what rights you have. It applies to our website, dashboard and services.
1. Who we are
SocialStud.io is the data controller, operating under individual activity certificate No. 906730 in Lithuania, with a business address at Čiobiškio g. 33, Vilnius, Lithuania.
For privacy questions or requests, contact us at hello@socialstud.io.
2. What data we collect
Depending on how you use SocialStud.io, we may collect:
Account data: your name, email address and account login information.
Instagram access data: your Instagram username, password and, where needed, a two-factor authentication or backup code.
Onboarding data: information you provide so we can build your growth strategy, including your target audience, similar or competitor accounts, accounts to avoid, targeting preferences and other information you choose to provide.
Payment data: payments are processed by third-party payment providers such as Stripe. We may receive your billing name, email address, payment status, card type and the last four digits of your card. We do not store your full card number or CVC.
Communication data: emails, live chat messages, support requests, feedback and other communications with us.
Usage data: information such as your IP address, browser and device type, pages visited, referring website, approximate location and cookie identifiers.
3. How we use your data
We use personal data only where we have a lawful reason to do so.
We use it to:
- create and manage your account and provide the SocialStud.io service — performance of our contract with you;
- access your Instagram account and carry out the services you purchased — performance of our contract with you;
- process payments, refunds and billing — performance of our contract and legal obligations;
- provide customer support and send important service-related messages — performance of our contract;
- protect our service against fraud, abuse and unauthorised access — our legitimate interests in protecting our business and customers;
- meet accounting, tax and other legal requirements — legal obligation;
- send marketing communications where you have agreed to receive them or where otherwise permitted by law; and
- use non-essential analytics or advertising technologies where your consent is required — consent.
If you do not provide information that is necessary to create your account, process payment, or access your Instagram account, we may not be able to provide the service.
4. Instagram account access
We require access to your Instagram account to provide our growth service.
Your Instagram credentials are kept in restricted systems and access is limited to authorised team members and contractors who need them to provide your service.
We use your credentials only to carry out the account activity included in your Socialstud.io service. We do not use them for unrelated purposes, access your private messages or make unrelated changes to your account.
We do not sell your Instagram credentials or disclose them to unrelated third parties.
You can revoke our access at any time by changing your Instagram password.
After your subscription ends, your stored Instagram credentials are deleted within 30 days. You may also ask us to delete them sooner.
5. Who we share data with
We use trusted service providers to operate Socialstud.io. These may include:
- payment processors, such as Stripe;
- customer support and communication providers, such as Intercom;
- email delivery providers;
- website hosting and infrastructure providers;
- analytics and advertising providers, such as Google and Meta; and
- authorised contractors who help us provide your Socialstud.io service.
These providers receive only the information reasonably necessary for their role and are required to handle personal data appropriately.
We may also disclose information where required by law, to protect our legal rights, or as part of a merger, acquisition or sale of the business.
We do not sell personal data.
6. International data transfers
Some of our service providers may process personal data outside the European Economic Area.
Where required, we use appropriate safeguards recognised under applicable data protection law, such as European Commission Standard Contractual Clauses or an applicable adequacy decision.
7. How long we keep your data
We keep personal data only for as long as reasonably necessary for the purposes described in this policy.
Generally:
- Instagram credentials: while your service is active and deleted within 30 days after it ends;
- account, onboarding and communication data: while you are a customer and for up to 12 months afterwards;
- payment, invoice and accounting records: for the period required by applicable tax and accounting laws;
- marketing information: until you unsubscribe or we no longer need it, although we may retain a limited record of your opt-out so we do not contact you again;
- cookie and analytics data: according to the lifespan of the relevant cookie or analytics setting.
We may keep certain information longer where reasonably necessary to resolve disputes, prevent fraud or meet legal obligations.
8. Your rights
Depending on applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- ask us to delete your data;
- restrict or object to certain processing;
- receive certain data in a portable format;
- withdraw consent at any time where processing is based on consent; and
- object to direct marketing at any time.
You also have the right to lodge a complaint with a data protection authority. Our lead supervisory authority in Lithuania is the State Data Protection Inspectorate (VDAI).
To exercise your rights, email hello@socialstud.io.
We normally respond within one month and may ask you to verify your identity before completing a request.
9. Cookies
We use cookies and similar technologies to operate and improve our website.
Essential cookies are used where necessary for website functionality, security, account login, checkout and onboarding.
Analytics cookies help us understand how visitors use our website.
Advertising cookies may be used to measure advertising performance.
Support technologies may be used to provide features such as live chat.
Where consent is required by law, non-essential cookies are not used until you give consent.
You can accept or reject non-essential cookies through our cookie banner and change your choices later through the cookie settings available on our website. You can also control cookies through your browser.
10. Security
We use reasonable technical and organisational measures to protect personal data, including access controls, secure connections and limiting access to people who need the information to perform their work.
No system can guarantee complete security. If a personal data breach occurs, we will take appropriate action and notify affected individuals and authorities where required by law.
11. Age requirement
Socialstud.io is intended for people aged 18 or over.
We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided personal data to us, contact us and we will take appropriate steps to remove it.
12. Changes to this policy
We may update this Privacy Policy from time to time.
If we make material changes that significantly affect how we use personal data, we will provide appropriate notice.
The date at the top of this page shows when this Privacy Policy was last updated.