Privacy Policy

Company Name: Socified

Brand Name: SocifiedAI

Address: Istanbul / Sisli, Turkey

Email: socified.ai@gmail.com

Website: https://socified.co

1Scope of This Privacy Policy

This Privacy Policy covers how we handle personal data we collect when you access or use our services. "Personal Data" means any information that identifies or relates to a particular individual, and includes any information defined as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations.

This Privacy Policy does not apply to applications of companies we do not own or control, or to individuals we manage. Socified may modify this Privacy Policy from time to time. Such changes may be necessary to reflect changes in laws, regulations, industry standards, or the scope of our services.

If we make significant changes that affect your privacy rights, we will try to inform you through the Socified.co website, email, or other communication channels. If you choose not to receive our emails (or if you have not provided your email), it is your responsibility to review these policy updates on your own.

Your continued use of the service after any changes to the Privacy Policy means you accept the updated terms.

2About Socified Platform

Socified is an AI-powered platform developed for social media advertising management. Our platform offers the following key features:

• Facebook/Meta Integration: Manage your Facebook and Instagram ad accounts
• Google Ads Integration: Optimize your Google ad campaigns
• AI-Powered Recommendations: AI analysis to improve campaign performance
• Analytics Dashboard: Detailed analysis of your ad performance
• Automatic Optimization: Automatically improve your campaigns

This platform is designed to help advertisers manage their social media advertising more effectively.

3Data We Collect

3.1 Account and Profile Information

To use our platform, we collect the following basic information:

Data Category	Collected Data	Purpose of Collection	Legal Basis
Identity Information	Name, surname, email address, profile photo	Account creation and authentication	Performance of contract (KVKK 5/2-c)
Business Information	Company name, industry, number of employees, tax number	Service personalization and invoicing	Performance of contract (KVKK 5/2-c)
Contact Information	Phone number, address, WhatsApp number	Customer support and communication	Legitimate interest (KVKK 5/2-f)
Account Settings	Language preference, time zone, currency, notification preferences	Personalizing platform experience	Explicit consent (KVKK 5/1)

3.2 Social Media Integration Data

To manage your advertising accounts, we collect data from the following platforms:

Platform	Collected Data	Data Type	Purpose of Use
Facebook/Meta	Business Manager account information, page management permissions	Identity and authorization data	Account connection and authorization
Instagram Business	Business account information, content data	Profile and content data	Content management and analysis
Advertising Accounts	Campaign data, budget information, target audience data	Advertising performance data	Campaign management and optimization
Google Ads	Account information, campaign data, keyword data, conversion data, performance metrics (impressions, clicks, cost, CTR, ROI), demographic data, geographic data, device data, hourly performance patterns	Advertising and search data	Google Ads account connection, campaign performance monitoring, analytics dashboard, AI-powered recommendations, keyword research

3.2.1 Google Ads API Data Collection

Google User Data Collection: When you connect your Google Ads account to our platform, we collect the following Google user data through the Google Ads API:

Google Data Category	Collected Data	Collection Method	Purpose of Collection
Account Information	Google Ads account ID, account name, accessible customer accounts	Google Ads API (OAuth 2.0)	Account connection and verification
Campaign Data	Campaign names, status, budgets, targeting settings	Google Ads API - Campaign reports	Campaign performance monitoring and management
Performance Metrics	Impressions, clicks, conversions, cost, CTR, ROI, conversion rates	Google Ads API - Performance reports	Performance analytics and optimization recommendations
Demographic Data	Age range, gender distribution	Google Ads API - Demographic reports	Audience analysis and targeting optimization
Geographic Data	Country, region, city-level performance data	Google Ads API - Geographic reports	Geographic performance analysis
Device Data	Device type (mobile, desktop, tablet) performance	Google Ads API - Device reports	Device performance analysis
Time-based Data	Hourly performance patterns, time-series data	Google Ads API - Time-based reports	Timing optimization recommendations
Keyword Data	Keyword ideas, search volume, competition level, bid estimates	Google Ads API - Keyword Planner	Keyword research and campaign optimization

3.3 AI Analysis Data

To provide AI-powered recommendations, we analyze the following data:

Analysis Type	Data Used	AI Algorithm	Output
Campaign Optimization	CTR, CPC, ROAS, conversion rates	Machine learning	Budget allocation recommendations
Audience Analysis	Demographic data, interests, behavioral data	Clustering algorithm	New target audience suggestions
Creative Optimization	Visual and text performance, engagement data	Natural language processing	Ad copy suggestions
Timing Analysis	Posting times, engagement data	Time series analysis	Optimal posting times

3.4 Platform Usage Data

To improve platform performance, we collect the following data:

Data Category	Collected Data	Collection Method	Retention Period
Technical Data	IP address, browser type, operating system, device information	Automatic collection	1 year
Usage Statistics	Page views, feature usage, session duration	Google Analytics	2 years
Error Reports	Error messages, error times, user actions	Automatic reporting	6 months
Cookie Data	Session cookies, preference cookies, analytics cookies	Browser cookies	According to cookie type

4How We Use Your Data

4.1 Advertising Management Services

We use the data we collect for the following purposes:

Service Type	Data Used	Process	Expected Outcome
Campaign Management	Advertising account information, campaign data	Automated management via API integration	Campaign creation, editing, pausing
Performance Analysis	CTR, CPC, ROAS, conversion data	Data collection and analysis algorithm	Detailed performance reports
Budget Optimization	Spending data, performance metrics	Machine learning algorithm	Optimal budget allocation recommendations
Audience Analysis	Demographic data, behavioral data	Clustering and segmentation	New target audience suggestions

4.2 AI-Powered Recommendations

Our AI technology provides recommendations in the following areas:

AI Feature	Data Analyzed	Algorithm Type	Recommendation Type
Campaign Optimization	CTR, CPC, ROAS, conversion rates	Gradient Boosting	Bid strategy recommendations
Creative Recommendations	Ad copies, visual performance	Natural Language Processing (NLP)	Ad copy and visual suggestions
Timing Analysis	Posting times, engagement data	Time Series Analysis	Optimal posting times
Budget Distribution	Campaign performance, spending data	Reinforcement Learning	Automatic budget distribution

4.3 Platform Development

We use the following data to continuously improve our platform:

Development Area	Data Used	Analysis Method	Development Outcome
Feature Development	User feedback, feature usage statistics	User behavior analysis	New features and improvements
Bug Fixing	Error logs, user actions, system performance	Error pattern analysis	Bug fixes and stability improvements
Performance Improvement	Page load times, API response times	Performance metrics analysis	Speed and reliability improvements
User Experience	User journey, click data, feedback	UX analysis	Better user experience

5Data Sharing and Security

5.1 Google Ads API Integration and Data Usage

Google API Services User Data Policy Compliance: We use Google user data in accordance with Google's API Services User Data Policy:

Google Service	Google User Data Used	OAuth Scope	Purpose of Use
Google Ads API	Account information, campaign data, performance metrics	https://www.googleapis.com/auth/adwords	Read-only access to campaign data for performance monitoring and analytics
Google Ads Account Connection	Account ID, accessible customer accounts	https://www.googleapis.com/auth/adwords	Account verification and multi-account management
Campaign Performance Monitoring	Impressions, clicks, conversions, cost, CTR, ROI	https://www.googleapis.com/auth/adwords	Real-time campaign performance visualization and reporting
Analytics Dashboard	Demographic data, geographic data, device data, time-based data	https://www.googleapis.com/auth/adwords	Comprehensive analytics visualizations and performance analysis
AI-Powered Recommendations	Campaign performance data, keyword data	https://www.googleapis.com/auth/adwords	AI analysis to generate optimization recommendations
Keyword Research	Keyword ideas, search volume, competition data	https://www.googleapis.com/auth/adwords	Keyword research and campaign optimization suggestions

5.2 Google Ads API Data Protection

Google API Security Standards: We implement the following security measures to protect Google user data:

Security Area	Google-Compliant Measures	Google Requirements	Implementation
OAuth 2.0 Security	Secure token storage, token refresh, access token encryption	Google OAuth 2.0 Policy	OAuth tokens stored securely in Firestore with encryption
API Security	All API calls through secure backend proxies, HTTPS only	Google API Security Standards	Firebase Cloud Functions backend proxies all Google Ads API calls
Data Encryption	SSL/TLS 1.3, AES-256 encryption for stored data	Google Data Protection Standards	All data encrypted in transit and at rest
Access Control	User-based access control, OAuth consent screen verification	Google OAuth Verification Requirements	Each user can only access their own Google Ads account data
Data Isolation	Separate storage per user, no cross-user data access	Google API Services User Data Policy	User data isolated in Firestore with user-based security rules
Security Audit	Regular security reviews, OAuth app verification	Google OAuth Verification Process	Application submitted for Google OAuth verification

5.3 Meta Platform Integration and Data Sharing

Meta Platform Compliance: We share data in accordance with Meta's Platform Terms and Developer Policies:

Meta Platform	Shared Data	Meta Permissions	Purpose of Use
Facebook Business Manager	Advertising account information, campaign data	ads_read, ads_management	Campaign management and optimization
Instagram Business	Business account information, content data	instagram_basic, instagram_manage_insights	Content management and analysis
Meta Analytics	Performance metrics, conversion data	read_insights	Advertising performance analysis
Meta Conversions API	Conversion data, event data	conversions_api	Conversion tracking and optimization

5.2 Meta-Compliant AI and Analytics Services

Meta Developer Policy Compliance: We configure our AI services in accordance with Meta's data usage policies:

AI Service	Meta Compliance	Processed Data	Data Protection
Meta AI (Priority)	Meta's own AI services	Meta platform data	Meta security protocols
OpenAI GPT-4	Meta data anonymized	Anonymized ad copies	Data anonymization, API encryption
Google AI	Excluding Meta data	General campaign performance data	Google Cloud security standards
Custom ML Models	Meta data processed separately	Non-Meta user behavior data	Internal security measures

5.3 Meta-Compliant Data Security Measures

Meta Developer Security Standards: We take the following measures in accordance with Meta's security requirements:

Security Area	Meta-Compliant Measures	Meta Requirements	Audit Frequency
Meta API Security	OAuth 2.0, Meta App Secret protection	Meta Developer Policy	Continuous
Data Encryption	SSL/TLS 1.3, AES-256, Meta data isolation	Meta Security Standards	Continuous
Access Control	Meta App Review process, user permissions	Meta Platform Terms	Daily
Meta Data Protection	Separate storage of Meta data, isolation	Meta Data Use Policy	Continuous
Security Audit	Meta App Review, security certificates	Meta Developer Policy	Monthly

6Your User Rights

6.1 Data Access and Control Rights

You have the following rights on the Socified platform:

Right Type	Description	How to Use	Response Time
Right to Information	Learn which of your data is being processed	Account settings > View Data	Instant
Right to Access	Request access to your data	Request via email	30 days
Right to Rectification	Correct incorrect information	Edit profile	Instant
Right to Erasure	Delete your account and data	Account settings > Delete Account	7 days
Right to Portability	Export your data	Data Download page	30 days
Right to Restriction	Stop certain data processing	Request via email	7 days

6.2 Integration Control

You can control your platform integrations in the following ways:

Integration Type	Control Options	Impact	Reversible
Facebook/Meta Connection	Disconnect, limit permissions	Facebook campaigns stop	Yes
Google Ads Connection	Disconnect, restrict API access	Google Ads management stops	Yes
AI Recommendations	Turn off AI recommendations, disable specific recommendations	Automatic recommendations stop	Yes
Analytics Tracking	Disable cookies, stop tracking	Usage analysis stops	Yes

6.3 Methods for Exercising Your Rights

You can use the following methods to exercise your rights:

Method	Applicable Rights	Advantages	Response Time
In-Platform	View data, rectify, delete	Instant processing, user-friendly	Instant
Email	All rights	Detailed request, written confirmation	30 days
Data Deletion Page	Account deletion, data deletion	Special form, guided process	7 days
Phone Support	Emergencies, complex requests	Personal support, immediate help	24 hours

7Data Retention and Deletion

7.1 Retention Periods

We apply the following retention periods for different data types:

Data Type	Retention Period	Legal Basis	Deletion Method
Account Data	Account active + 3 years	KVKK, accounting obligation	Secure deletion
Google Ads Account Data	Account active + 1 year after disconnect	Google API Services User Data Policy, user consent	Secure deletion, OAuth token revocation
Google Ads Performance Data	2 years (anonymized after 1 year)	Platform development, analytics	Anonymization, then secure deletion
Advertising Data	5 years	Accounting obligation	Anonymization
AI Analysis Data	2 years (anonymized)	Platform development	Anonymization
Technical Logs	1 year	Security and error analysis	Automatic deletion
Cookie Data	1 day - 2 years depending on cookie type	User experience	Automatic deletion
Communication Data	3 years	Customer service	Secure deletion

7.2 Data Deletion Process

When you delete your account, the following process is followed:

Time	Action	Affected Data	Reversible
Immediately	Account access is suspended	Login credentials, API access	Yes (within 7 days)
Within 7 Days	Personal data is deleted	Profile information, contact data	No
Within 30 Days	Cleaned from backups	All backup data	No
Within 90 Days	Anonymous data is processed	Anonymized analytics data	No

7.3 Child Protection

Socified is not intended for users under 18 years of age. We do not knowingly collect data from individuals under 18.

8Cookies and Tracking

8.1 Cookie Types

We use the following types of cookies on our platform:

Cookie Type	Purpose	Retention Period	Can Be Disabled
Essential Cookies	Platform functionality, security, session management	Session duration	No (platform won't work)
Analytics Cookies	Usage statistics, performance analysis	2 years	Yes
Marketing Cookies	Ad targeting, conversion tracking	1 year	Yes
Preference Cookies	Language preference, theme settings, notification preferences	1 year	Yes
Functional Cookies	Advanced features, personalization	6 months	Yes

8.2 Cookie Management

You can manage your cookie preferences using the following methods:

Method	Description	Impact	Recommended
In-Platform Settings	Cookie preferences from account settings	Selective cookie control	Yes
Browser Settings	Browser cookie settings	Affects all cookies	No
Cookie Banner	Cookie consent on first visit	Initial preference setting	Yes
Email Preferences	Turn off marketing cookies	Marketing cookies only	Yes

9Policy Updates

9.1 Change Notification

When we update this privacy policy, we use the following notification methods:

Notification Type	Method	Target Audience	Timing
Email Notification	Email to registered users	All active users	7 days before update
Platform Notification	Popup notification during login	Platform users	30 days after update
Website Announcement	Banner on homepage	All visitors	30 days after update
Social Media	LinkedIn, Twitter announcements	Followers	7 days after update

9.2 Significant Changes

If we make significant changes to our data usage, we follow these processes:

Change Type	Notice Period	Consent Required	Right to Withdraw
Data Collection Change	30 days in advance	Yes	Yes (30 days)
Sharing Change	30 days in advance	Yes	Yes (30 days)
Legal Basis Change	60 days in advance	Yes	Yes (60 days)
Minor Edits	7 days in advance	No	No

10Meta Compliance and Contact

10.1 Meta Developer Support

Meta Platform Compliance: You can use the following channels for issues related to Meta platforms:

Support Type	Contact	Meta Compliance	Response Time
Meta Developer Support	developers.facebook.com/support	Meta official support	24 hours
Meta App Review	developers.facebook.com/apps	Meta approval process	7 days
Meta Platform Terms	developers.facebook.com/policy	Meta policy compliance	Instant
Socified Support	socified.ai@gmail.com	Application support	48 hours

10.2 Data Protection Officer

You can contact us regarding privacy policy and data protection matters:

Contact Type	Information	Response Time	Suitable Topics
Email	socified.ai@gmail.com	48 hours	General questions, data requests
Website	https://socified.co	24 hours	Support requests, feedback
Postal Address	Istanbul / Sisli, Turkey	7 days	Official correspondence
Phone	+90 (212) XXX XX XX	Instant	Emergencies

10.3 Response Times

We guarantee the following response times for different request types:

Request Type	Response Time	Processing Time	Follow-up Method
General Questions	48 hours	Instant	Email
Data Access Request	30 days	7 days	Email + Platform
Data Deletion Request	7 days	30 days	Email + SMS
Complaint	24 hours	15 days	Email + Phone
Emergency Security	2 hours	24 hours	Phone + Email

10.4 Complaint Authority

If you believe your rights have been violated, you can apply to the following authorities:

Country/Region	Complaint Authority	Website	Application Period
Turkey	Personal Data Protection Board (KVKK)	www.kvkk.gov.tr	30 days
EU	Data Protection Authority	www.edpb.europa.eu	30 days
USA	Federal Trade Commission (FTC)	www.ftc.gov	60 days
United Kingdom	Information Commissioner's Office (ICO)	www.ico.org.uk	30 days