Last updated: April 2026
The protection of your personal data is important to us. We collect, use, and store your personal data in accordance with the provisions of applicable data protection laws, including the EU General Data Protection Regulation (GDPR). Below we inform you about the type, scope, and purpose of the collection and use of personal data.
Responsible for data processing is:
Social FlowsYou can browse our website without registering. If you register for a free trial account or as part of a paid account, the information below applies. For the use of our website and blog, please refer to the Special Privacy Notice under Section C.
In accordance with Art. 15 GDPR, you have the right to request information free of charge about the personal data stored about you and the purpose of the data processing. In accordance with Art. 16, 17 and 18 GDPR, you also have the right to correct incorrect data and to block and delete your personal data. Under the conditions set out in Art. 20 GDPR, you are also entitled to receive your personal data stored by us in a structured, commonly used, and machine-readable format and to transmit this data to another controller without hindrance. In addition, in accordance with Art. 21 para. 1 GDPR, you are entitled to object to the processing of personal data concerning you for reasons arising from your particular situation. You also have the right to lodge a complaint with a data protection supervisory authority.
In addition, pursuant to Tunisian Organic Law n° 2004-5 on the protection of personal data, you have the right to access, rectify, and delete your personal data. You may exercise these rights by contacting us at the address listed above. You also have the right to file a complaint with the National Authority for the Protection of Personal Data (INPDP).
We process personal data in our software (Art. 4 No. 1 GDPR) which we receive as part of our activities as a provider of cloud software for social commerce management. The personal data processed includes name, address, email addresses, phone numbers, and communication content. We only process personal data that we have received from customers or their employees on the basis of a registration. In our software, we also process the data of people who interact with our customers' social media profiles and online stores — such as profile information, order details, and exchanged communication content — which we process on behalf of our customers on the basis of a data processing agreement.
Insofar as we act as the controller in the context of data processing, we process data in order to provide our services as a cloud software provider. The data processing is legitimized in accordance with Art. 6 para. 1 lit. b) GDPR.
Our software uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL encryption is activated, the data you send to us cannot be read by third parties.
We collect and store information about the use of our software in so-called server log files, which your browser automatically transmits to us, on the basis of Art. 6 para. 1 lit. f GDPR. These are:
This data is collected exclusively for statistical purposes and is not merged with other data sources.
Our software uses so-called “cookies” on the basis of Art. 6 para. 1 lit. b GDPR. A cookie stores the information that a user has logged in with their username and password. We set technically necessary cookies required for the operation of the software on the basis of our legitimate interest in accordance with Art. 6 para. 1 f) GDPR. We only set other cookies, such as analytics cookies, with your express consent in accordance with Art. 6 para. 1 a) GDPR. You can manage your cookie preferences via the cookie banner displayed on your first visit. You can also allow or deactivate cookies via the settings in your browser. However, not all functions of our software may then be available.
When you join our waitlist, we store and process the contact information you provide. This includes:
We use this data solely to notify you when the platform becomes available. We do not pass on personal data to third parties. Storage and processing is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. f GDPR (legitimate interest in pre-launch communication).
Our software integrates with social media platforms (Facebook, Instagram, TikTok, and others) via their respective APIs. When customers connect their social media accounts, we access profile information, comments, messages, and post data as our customers' processor. This data is used solely within the context of providing our social commerce management services.
We do not transfer personal data processed by us as the controller within our software to a third country outside the EU/EEA unless permitted under the EU-US Data Privacy Framework or legitimized by standard contractual clauses.
We do not use automated decision-making processes in accordance with Art. 22 GDPR that would have legal consequences for the data subject or similar significant negative effects.
In order to provide the functions of Social Flows, it may be necessary to disclose personal data to third parties. The following sub-processors are currently engaged:
An updated list of sub-processors, including the purpose and place of processing, is available upon request.
We process personal data (Art. 4 No. 1 GDPR) that we collect on our website or receive from you directly. The personal data processed includes name, address, email addresses, and communication content.
We process personal data in order to provide our services and to be able to receive and process your inquiries.
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content.
We collect and store information about your visit to our website in server log files on the basis of Art. 6 para. 1 lit. f GDPR. These are:
Our website uses cookies. We set technically necessary cookies required for the operation of the website on the basis of our legitimate interest in accordance with Art. 6 para. 1 f) GDPR. We only set other cookies, such as analytics cookies, with your express consent in accordance with Art. 6 para. 1 a) GDPR. When you first visit our website, a cookie banner will appear allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies, which will cause the banner to reappear.
We process and store personal data only for the period necessary to achieve the purpose of processing or if this is provided for by laws or regulations. If the storage purpose no longer applies or if a legally prescribed storage period expires, the personal data is routinely blocked or deleted.
This website may use analytics services to analyze usage and improve our offerings. When analytics tools are used, data such as page views, bounce rate, and session duration are collected. IP addresses are anonymized where possible. You can object to data collection at any time.
We provide a contact form on our website to give you the opportunity to contact us electronically. If you use our contact form, we store and process the following data:
We do not pass on personal data to third parties. Data is only used to respond to your request. Storage and processing is based on Art. 6 para. 1 lit. f GDPR.
For our website, we may use cloud services from providers based outside the EU/EEA. We only transfer personal data to such providers if the transfer is permitted under the EU-US Data Privacy Framework or legitimized by standard contractual clauses.
We do not use automated decision-making processes in accordance with Art. 22 GDPR.
If you have given us your consent to contact you via our website in accordance with Art. 7 GDPR, you can revoke your consent at any time free of charge (e.g., by email or by using the unsubscribe function).
If you have any questions about this Privacy Policy, please contact us at privacy@socialflows.app.