privacy Policy

Updated October 24th, 2023

Inversocial's Privacy Policy describes how Inversocial collects, stores, and processes your personal information.

We are registered with the ICO in the United Kingdom, under the registration number ZB523385.

You can contact us if you have any questions about our privacy practises.

Please scroll to read the policy.

Information and Exclusions

This Privacy Policy does not apply to certain processing activities where we are not the data controller.  

For example, where Inversocial processes personal information as a data processor or service provider on behalf of our customers i.e. the businesses who purchase our chatbot service and allow the chatbot to represent them on social media platforms.

Where we act as a processor or service provider, the privacy statement of the customer who uses our Services applies, instead of this Privacy Policy, and our processing of such personal information is governed by our agreements with such customers.

If you have concerns about personal information that we process on behalf of a customer or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.

Data Inversocial Collects from You

You may provide us with the information as follows

  • Contact data and account profile data - We collect information when you (or your organisation) create an account, activate a subscription, and/or upload information to the Inversocial Platform. Personal information may include your name, company name, phone number and email address, billing information (your payment information), marketing preferences, subscription data, and your username and account credentials.
  • Communications, feedback, and related data - We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback or otherwise interact or communicate with us. This information may include AI supported chat records from our website.
  • Marketing data - You may provide us with your contact information and preferences for receiving marketing communications.
  • Business and financial information - We may receive information about your business.

Data Inversocial Collects from Third-Party Sources

Inversocial is tailored to help your business connect with other contacts and businesses through social media channels.  

When you set up an account with Inversocial through our application at app.inversocial.com, your set-up details are processed via our platform provider vercel.com. Vercel are a Californian based company and we may lawfully transfer data to the USA under the existing EU Standard Contractual Clauses Data Protection Addendum for the UK. We are aware that this Addendum will expire in March 2024 and will address revised transfer mechanisms at that time.

If you interact with us through our websites chat window, the service is provided to us by Intercom. A company registered in the EU as R & D Unlimited and also registered in Delaware as Intercom Inc.  Intercom are registered on the EU-US Data Privacy Framework which the UK are adopting under The Data Protection (Adequacy) (USA) Reg 2023. Their privacy notice can be found here.

Inversocial processes your payment details via our third-party provider Stripe, Inc (Stripe). Stripe are registered on the EU-US Data Privacy Framework which the UK are adopting under The Data Protection (Adequacy) (USA) Reg 2023. Their privacy notice can be found here.  

Our third-party sources may vary over time and depend upon how you use our services.

Data Inversocial Collects over time

We, and our service providers, may automatically log personal information about you, your computer or mobile device, and your interaction over time with the Services. Some of these include the following

  • Device Information - We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers. For example, we may collect IP addresses from you as part of our sign in and security features.
  • Usage Information - We may collect information about your use of the Inversocial site, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.
  • Communication interaction data - We may collect information about when you use our website chatbot services.
  • Service Delivery and Optimisation - We may use your personal information to provide you with the Inversocial application, create your account and manage our relationship with you, evaluate your eligibility for marketing offers, products and services, and to authenticate your identity
  • Marketing and Advertising - We may collect and process your personal information for purposes to: market services, products and experiences, including to deliver promotional materials, product recommendations and other non-transactional communications via email, in accordance with your marketing preferences. Personalise your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with Inversocial’s chatbot, services, and offerings.  

    You may change your mind and marketing preferences at any time in your account settings.
  • Exercise our Rights - In the course of judicial, administrative, or arbitration proceedings

End-User Data Collection

Inversocial provides chatbot services to businesses who engage with existing and potential customers on social media platforms. We act as a processor or service provider and the privacy statement of the customer (business) who uses our Services apply instead of this Privacy Policy.

Our processing of such personal information is governed by our agreements with such customers. We believe in being transparent about what information we may process on behalf of customers. When you interact with a chatbot which is representing a business or brand we will receive:

  • The interaction details between you and the business ("the conversation").
  • The timestamp of message interactions, and the time the conversation was initiated and resolved.
  • The necessary details of your public profile that you may be contacting the business from, such as Facebook. Where possible, we will store the nickname, username, and avatar media URL to let the business know who they are engaging with. We do not control or encourage what the business does with those details.

The business you are interacting with can define how long a conversation is stored for, the current durations are 6 months, 12 months, and 24 months. You may ask the business to delete a conversation, Inversocial and our team cannot cooperate with the destruction of any messages or conversations.

We may use your information to:

  • Improve and develop our product and services by analysing, where you have agreed, how they are used and interacted with, by training our artificial intelligence models and other machine learning models, as well as by assessing the use of and interactions with our application and certain content our customers send or display through the application.
  • Combine and anonymise information about your interactions with the chatbot service to create aggregate, anonymised statistics for use in and for marketing, promoting, improving, and developing our service.

Artificial Intelligence Processing

When you use or interact with a chatbot powered by Inversocial, digital assistants, or other digital conversational experiences powered by artificial intelligence, we process your personal information using automated methods.

For example, when we use automated processing on your personal information to provide a more personalised and enhanced experience on our website or on social media platforms where our chatbot represents customers (businesses who use our services) you may see instantly tailored recommendations.

We process your artificial intelligence and chatbot conversations through OpenAI (an AI research organisation)'s tool GPT (Generative Pre-trained Transformer) which uses machine learning intelligence and language to create generative content.

You can learn about OpenAI and their practises here.

Rights to Your Data

Depending on where you live, you may also have certain country-specific rights with respect to your personal information. Please see the specific terms section for your country, below.

Verification
To help protect privacy and the security of your personal information, you may be asked to provide additional information to verify your identity before we can fulfil your data rights request. If we cannot verify your identity rights to the data, we may not be able to service your request until you provide proper documentation.

Data retention
Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Inversocial application and successfully run our business. Even if you submit a deletion request, we may be required to maintain your personal information for as long as necessary to comply with legal or compliance regulations, to protect against fraudulent use, and to exercise, establish, and defend legal claims.

This means we may keep different information for different periods. If your account is deleted because you haven’t used it for a long time, we may delete this information immediately. There are currently no procedures in place to delete inactive accounts.

There may be occasions where we are unable to fully delete, anonymise, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymise, or de-identify it.

Data Transfers between Geographic Locations

Some of these recipients of your personal information are located in the USA for which the European Commission and/or UK Government have issued an adequacy decision, which means that the USA is recognised as providing an adequate level of data protection under applicable UK and/or European data protection laws and the transfer is therefore permitted under Article 45 of the GDPR.

Individual sub-processor recipients must be registered on the EU-US Data Privacy Framework to utilise this Finding of Adequacy. Where recipients of your personal information are not the subject of the Adequacy decision. we may use the Standard Contractual Clauses approved by the European Commission or, as may be applicable, the International Data Transfer Agreement approved by the UK Government, to help ensure your personal information is protected.  

Security of Your Personal Information

We use reasonable physical, technical and organisational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information. If, in the unlikely event a data breach occurs that may affect you, we are required by law to notify you through the appropriate contact methods that we may have on record for you.

Revisions and Reviews of our Privacy Policy

From time to time we may change or update our Privacy Policy. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice on our website, or by emailing the address saved to your account; by sending you a notification; or by other means consistent with applicable law.

We will periodically review our Privacy Policy to ensure that the methods and processes we have mentioned are up-to-date and honest.

You can see when this Privacy Policy was last updated by checking the date at the top of this Privacy Policy. Please review this Privacy Policy periodically to stay informed about how Inversocial protects your privacy.

Children under 13

Our services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children.

If you believe we may have information from a child, please contact us.
If you are a parent or legal guardian and you believe that your child is using our service, please contact us.

United Kingdom (UK) and European Economic Area (EEA)

Personal Information
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws. Essentially, “personal data” is information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).

Legal Basis of Processing
We use your personal information only as permitted by law. Applicable EEA and UK data protection law requires us to have a “legal basis” for each purpose for which we collect your personal information.

Our legal basis for collecting and using the personal information described in this Privacy Policy will depend on the type of personal information and the specific context in which we collect it. However, we will normally process personal information from you when:

  • We have a contract with your business and it is necessary to process your personal information to perform our contract with you;  
  • The processing is in our legitimate business interests, such as operating our businesses, improving and developing our services, communicating with you, marketing our offerings and services and to detect illegal activities; and/or
  • To comply with legal requirements, including applicable laws and regulations.

If you are a resident of the UK or EEA, you may have the following rights and choices: Access, Correction or Deletion. You may request to access, to correct or to delete your personal information.  

  • You may request a copy of your personal information by contacting us at hello@inversocial.com.
  • You may request for us to delete your personal information. Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Data Retention”.

Objection and Restriction
You may object to our processing of your personal information or ask us to restrict processing of your personal information.

Portability
You may request portability of your personal information.

Withdraw Consent
If we process your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

File a complaint.
You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information. You can contact the UK regulatory authority here https://ico.org.uk/make-a-complaint/

Manage marketing communications from us
To update your marketing communication preferences click unsubscribe at the bottom of the marketing emails, or use your account settings to disable marketing communications.

Cookies and Similar Technologies

Inversocial and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request, recognise your visit, track your interactions, and improve your and other customers’ experiences.