Privacy Policy

1. Overview

Somie ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at somiesocial.com and related mobile applications (collectively, the "Platform"). Please read this policy carefully. If you disagree with it, please discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide

• •Account information: Name, email address, password.
• •Creator profile: Social media usernames, follower counts, engagement rates, location (city/state).
• •Business profile: Business name, address, phone number, website, category, verification documents.
• •Campaign content: Notes and questions you send to a business, post URLs, proof of work submissions.
• •Ratings and reviews: Feedback you leave about other users.
• •Communications: Messages sent through the Platform or to our support team.

2.2 Information Collected Automatically

• •Device information: IP address, browser type, operating system.
• •Usage data: Pages visited, buttons and features used, time spent on the Platform, and technical error reports when something breaks. We collect this using PostHog, our product analytics provider, on every page including pages you can see without an account. PostHog requests are routed through our own domain (the /ingest path) rather than sent directly to PostHog's servers, but PostHog still receives and stores this data on our behalf.
• •Location data: Approximate location (city/region) used to show nearby offers. We ask for browser location permission explicitly.
• •Cookies and similar technologies: Session cookies for authentication, and analytics cookies and browser local storage set by PostHog (names beginning ph_) that let us recognise a returning visitor and group their activity into a single session. We do not use advertising, retargeting, or cross-site tracking cookies, and we do not sell or share this data with advertisers. You can clear or block these through your browser's cookie and site-data settings; the Platform continues to work without them.

2.3 Information from Third Parties

• •Social media platforms: If you connect Instagram or TikTok via OAuth, we receive your username, follower count, and engagement metrics from those platforms. We do not access your private messages or post on your behalf.
• •Payment processors: Stripe handles payment processing. We receive limited billing information (last 4 digits, billing country) but never your full card number.
• •Google Places: If you use our business address lookup feature, we send your search query to Google. See Google's Privacy Policy at policies.google.com.

3. How We Use Your Information

• •To provide, maintain, and improve the Platform.
• •To match Creators with relevant business offers based on their location, follower count, and engagement rate.
• •To process payments and send billing communications.
• •To send transactional emails (campaign acceptances, rejections, verification decisions, campaign completions).
• •To verify business identity and prevent fraud.
• •To calculate and display trust scores and ratings publicly on profiles.
• •To respond to your support requests and communicate with you.
• •To enforce our Terms of Service and prevent prohibited conduct.
• •To comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share data only as follows:

• •Between platform users: Creator profiles (username, follower count, engagement rate, ratings, location city/state) are visible to Business Users searching for creators. Business profiles (name, category, location, verification status) are visible to Creators browsing offers.
• •Service providers: We share data with Supabase (database and authentication), Stripe (payments), Resend (email delivery), PostHog (product analytics and error reporting — it receives the usage data described in section 2.2), and similar infrastructure providers who are contractually bound to protect your data and may not use it for their own purposes.
• •Legal requirements: We may disclose information if required by law, court order, or government authority.
• •Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Data Retention

We retain your personal data as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., billing records, fraud prevention). Verification documents are retained for up to 7 years for regulatory compliance.

6. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted passwords (via Supabase Auth), Row Level Security policies in our database, and private storage buckets for sensitive documents. However, no system is perfectly secure. We cannot guarantee the absolute security of your information and encourage you to use strong, unique passwords.

7. Your Rights and Choices

• •Access: You may request a copy of the personal data we hold about you.
• •Correction: You may update most of your information directly in your account settings.
• •Deletion: You can delete your account and its personal data yourself from Settings, or request deletion by emailing support@somiesocial.com. See how account deletion works.
• •Opt-out of emails: Transactional emails (e.g., campaign updates) are required for Platform use. You may opt out of marketing emails using the unsubscribe link in any such email.
• •Location: You can revoke location access in your browser settings at any time. Some features (nearby offer matching) require location data to function.
• •Connected accounts: You may disconnect your Instagram or TikTok account from within the Platform at any time.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion of your personal information, and to opt out of the "sale" of personal information (we do not sell personal information). To exercise these rights, contact us at support@somiesocial.com. We will not discriminate against you for exercising these rights.

9. Children's Privacy

The Platform is not directed to persons under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, contact us at support@somiesocial.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at: