Privacy Policy Annexes
These annexes form part of our Privacy Policy. Annex A lists our service providers, Annex B the cookies and local storage we use, and Annex C the data we access on each social-media platform you connect.
Annex A — Service providers (sub-processors)
These service providers process personal data for us under contract, only on our instructions and only to provide the Service. Section 14 of our Privacy Policy explains how we share personal data, and section 15 how it is transferred internationally.
| Provider | Service | Personal data | Location |
|---|---|---|---|
| Clerk, Inc. | Authentication, account management, sign-in and invitation emails | Account, sign-in and device data | United States |
| Supabase, Inc. | Database and file storage | All Service data | Singapore |
| Vercel Inc. | Hosting, compute, content delivery and web analytics (Vercel Web Analytics) | All data in transit; technical logs; anonymised page-view statistics | United States; global edge locations |
| OpenAI | AI text, image and Brand Brain generation | Prompts and selected content | United States |
| Kling | AI video and audio generation | Prompts, reference images and media | Singapore |
| Razorpay Software Private Limited | Payments and subscriptions (also acts under its own terms: https://razorpay.com/privacy-policy/) | Billing and payment data | India |
| Google LLC (Google Analytics 4) | Product analytics, only with your consent where the law requires | Pages and screens viewed, features used, approximate location, device and browser type (no IP addresses) | United States |
We will update this list before adding a new provider that processes personal data. To be told about changes, email support@sociocrush.com.
Annex B — Cookies and local storage
The cookies and browser local storage the Service uses. Our Cookie Policy explains each one in more detail and how to manage your choices.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
Clerk authentication cookies: __session and __client_uat (sociocrush.com), __client (clerk.sociocrush.com) | Strictly necessary | Clerk | Keep you signed in; protect sessions | __session: 60 seconds, renewed automatically while you are signed in; __client and __client_uat: persistent, until you sign out or your session expires (7 days maximum) |
_cfuvid (clerk.sociocrush.com) | Strictly necessary | Cloudflare, for Clerk | Protects sign-in against bots and abuse | Until you close your browser |
sc_active_workspace_id | Strictly necessary | Sociocrush | Remembers which Workspace you are working in | 1 year |
sc_active_brand_id | Strictly necessary | Sociocrush | Remembers which brand you are working on | 1 year |
sc_onboarding_new_workspace | Strictly necessary | Sociocrush | Supports creating a new Workspace | 30 minutes |
sc_cookie_consent | Strictly necessary | Sociocrush | Records your cookie choices so that we respect them | 12 months |
sc_referral_code | Referral | Sociocrush | Credits the person who referred you | 30 days |
_ga | Analytics | Google Analytics | Distinguishes one browser from another to count visits; set only if you accept analytics cookies | 2 years |
_ga_<container-id> | Analytics | Google Analytics | Keeps track of your current visit; set only if you accept analytics cookies | 2 years |
theme (local storage) | Preference | Sociocrush | Light, dark or system theme | Until cleared |
sociocrush:sidebar-collapsed (local storage) | Preference | Sociocrush | Sidebar open or closed | Until cleared |
sociocrush:approval-comments-last-seen (local storage) | Preference | Sociocrush | Marks approval comments you have read | Until cleared |
Local-storage items stay on your device and are never sent to our servers.
Annex C — Connected-platform data
The social-media platforms you can currently connect to Sociocrush, the data we access through each connection and what we do on your behalf. We access only what the permissions you approve allow, and we add a platform here before it can be connected.
| Platform | Account types | Data accessed | Actions on your behalf |
|---|---|---|---|
| X (formerly Twitter) | Personal and business X accounts | Your X profile (account ID, name, username and profile picture) and the posts and replies Sociocrush publishes for you. Permissions: users.read, tweet.read, offline.access | Publish posts with text, images, GIFs or video, and publish replies to your own posts (used for first comments). Permission: tweet.write |
You can disconnect a platform at any time in Sociocrush, or revoke our access in that platform's own settings. Section 8 of our Privacy Policy explains what happens to the data when you do.