SocialScore · Legal
Privacy Policy
How DSNTech LTD (SocialScore) processes personal data as a controller: website visitors, business contacts and the users of customer accounts.
Legal & Trust Center·Cookie Policy·DPA·Your rights
This Privacy Policy explains how DSNTech LTD ("SocialScore", "we", "us") processes personal data as a controller: when you visit socialscore.io, contact us, receive our communications, or use a SocialScore account on behalf of your company.
1. WHO WE ARE#
1.1 The controller is DSNTech LTD, company reg. no. 207337125, registered seat Mladost 2, Sofia, Bulgaria, operating the SocialScore service at https://socialscore.io.
1.2 For any privacy question or request, contact our data protection contact at dpo@socialscore.io or write to DSNTech LTD, Mladost 2, Sofia, Bulgaria. For general questions, write to office@socialscore.io.
2. SCOPE#
2.1 This policy covers personal data of: (a) visitors of our website and users of our free online tools; (b) business contacts, including prospects, partners and people who contact us or attend our events; and (c) representatives and users of our business customers, such as account administrators, invited users and billing contacts.
2.2 This policy does not cover the personal data that our business customers submit to the SocialScore Services about their own customers or website visitors. For that data, the business customer is the controller and we act as its processor under our Data Processing Agreement (https://socialscore.io/data-processing-agreement/). If you are an end customer of a business that uses SocialScore, please contact that business first. We will forward any request we receive to it without undue delay.
3. WHAT DATA WE PROCESS AND WHERE IT COMES FROM#
3.1 Data you give us: name, work email address, phone number, company name, role, country and the content of your messages, when you fill in a form, request a demo, use a free tool, subscribe, register an account or write to us.
3.2 Account and contract data: login details, the company you represent, your role and permissions in the account, the use case your company declares at registration, records of your acceptance of our Terms of Service and Data Processing Agreement (document version, date and time, user account), Plan and order details, invoices and payment status, and support requests.
3.3 Usage data: records of how you use your account and the Services, including system logs needed for security, and the messages you exchange with the AI assistant in the dashboard.
3.4 Payment data: card payments are processed by our payment provider. We receive confirmation of the payment and limited card information, such as the card type and the last four digits. We do not receive or store full card numbers.
3.5 Website data: IP address, browser and device information, pages viewed, referring page and approximate location, collected through cookies and similar technologies where you allow them. See our Cookie Policy.
3.6 Data from other sources: we may obtain business contact details, such as name, role, company and work email, from professional data providers and from public sources, such as company websites, public registers and professional networks, in order to contact relevant businesses about our Services. We verify customer companies against public trade registers and sanctions lists when they register.
3.7 We do not knowingly collect special categories of personal data or data of children.
4. WHY WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS#
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answer enquiries, organise demos and prepare offers | Contact and message data | Art. 6(1)(b) steps before a contract; Art. 6(1)(f) legitimate interest in handling business enquiries |
| Provide the account and the Services, process orders and payments, provide support | Account, contract, usage and payment data | Art. 6(1)(b) performance of the contract with your company; Art. 6(1)(f) legitimate interest where you act for your company |
| Record acceptance of our Terms and DPA and verify customer companies | Acceptance records, company and sanctions checks | Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interest in proving the contract and preventing fraud and sanctioned use |
| Issue invoices and keep accounting records | Billing and payment data | Art. 6(1)(c) legal obligation under accounting and tax law |
| Contact businesses about our Services (B2B outreach) | Business contact data from you or from the sources in Section 3.6 | Art. 6(1)(f) legitimate interest in B2B marketing; you can object at any time |
| Send newsletters, product updates and event invitations | Name and work email | Art. 6(1)(a) consent, or Art. 6(1)(f) for existing customers about similar services; you can unsubscribe at any time |
| Website analytics and improvement | Website data | Art. 6(1)(a) consent through the cookie banner |
| Security, abuse prevention and legal claims | Logs, usage and account data | Art. 6(1)(f) legitimate interest in protecting our services and defending legal claims |
4.1 We do not sell your personal data. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects for you.
5. WHO RECEIVES YOUR DATA#
5.1 We share personal data with service providers that act on our instructions under written data protection terms, in particular:
- Google (Google Cloud and Firebase for hosting the SocialScore application; Google Analytics for website analytics, with your consent);
- HubSpot (customer relationship management, forms and email communications);
- Hotjar (website usage analytics, with your consent);
- CookieYes (cookie consent management);
- Paypercut (payment processing);
- Cloudflare (hosting of our free online tools);
- our website hosting provider in Bulgaria;
- professional contact data providers that supply business contact details for B2B outreach.
5.2 We may also share personal data with professional advisers, such as lawyers and accountants, with authorities where required by law, and with a successor in the event of a merger, acquisition or restructuring.
5.3 We do not share your personal data with credit bureaus, credit reference agencies, credit intermediaries or lenders.
6. INTERNATIONAL TRANSFERS#
6.1 We process personal data mainly in the European Union. Some service providers, or companies in their groups, are located outside the European Economic Area, for example in the United States. Where personal data is transferred outside the EEA, we rely on an adequacy decision, including the EU-US Data Privacy Framework for certified companies, or on the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards at dpo@socialscore.io.
7. HOW LONG WE KEEP YOUR DATA#
- Enquiries, demo requests and prospect data: up to 24 months from the last interaction, unless you become a customer or ask us to delete it earlier.
- Marketing consent and unsubscribe records: until you withdraw consent or unsubscribe, plus a suppression record so that we do not contact you again.
- Account, contract and support data: for the duration of the customer relationship and afterwards for the general limitation period of 5 years, to establish or defend legal claims.
- Records of acceptance of our Terms and DPA: for the duration of the contract and 5 years after it ends.
- Invoices and accounting records: for the periods required by Bulgarian accounting and tax law.
- Website analytics data: according to the retention settings of the relevant tool, as described in our Cookie Policy.
- Security logs: for as long as needed to investigate and prevent incidents.
8. YOUR RIGHTS#
8.1 Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interests, including direct marketing at any time. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing.
8.2 To exercise your rights, write to dpo@socialscore.io. We reply within one month, which may be extended by two further months for complex requests, in which case we inform you.
8.3 You have the right to lodge a complaint with a supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP), https://www.cpdp.bg.
9. SECURITY#
9.1 We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access limited to authorised people with multi-factor authentication, logging of administrative access, backups and confidentiality undertakings from personnel. If you become aware of a security concern, please write to dpo@socialscore.io.
10. CHILDREN#
10.1 Our website and Services are intended for businesses and are not directed at children under 16. If you believe that a child has provided us with personal data, contact dpo@socialscore.io and we will delete it.
11. CHANGES TO THIS POLICY#
11.1 We may update this policy to reflect changes in our practices or in the law. The current version is always available at https://socialscore.io/privacy-policy/ with its date at the top. We inform customers of material changes by email or in the Services.