Privacy Policy

This Privacy Policy explains how MAGNATEX LLP ("MagnateX", "SocioGenie", "we", "our", "us") collects, uses, shares, stores, and protects personal data when you visit www.sociogenie.ai, create an account, or use the SocioGenie platform (the "Services").

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000 and rules made under it, the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act / CPRA, and other applicable data-protection laws.

1. Who We Are

The data controller / data fiduciary is:

• MAGNATEX LLP (LLPIN: ACU-5689)
• 111, Fortune Business Hub, Sola, Nr. Satyamev Elysium, Ahmedabad, Gujarat 380060, India
• General contact: support@magnatex.co
• Privacy, data requests, and grievances: founder@magnatex.co

Where you upload material containing other people's personal data, you are the controller and we act as your processor. Section 15 and our Data Processing Agreement govern that relationship.

2. Scope

This Policy applies when you visit our website, create or maintain an Account, subscribe to a plan or buy Credits, connect a social-media account, upload brand assets or catalogues, use any AI feature, or contact us.

3. What We Collect

3.1 Information you provide

Account data — name, email address, phone number, password (stored hashed), profile picture, country, time zone, language.

Business and brand data — business name, business email, business contact number, industry, website URL, location, brand slogan, brand description and voice, default hashtags, brand colours, visual-style selection, logo files, product images, product descriptions, and any other asset uploaded to your Media Library.

Uploaded catalogues — where you upload a catalogue PDF during onboarding, we extract text and images from it to build your Brand DNA. Do not upload catalogues containing personal data, pricing you consider confidential, or third-party material you are not licensed to use.

Questionnaire answers — your responses about products, customers, objections, themes, preferred phrasing, seasonal campaigns, and product lines to feature.

Content data — prompts, reference text, uploaded reference images, generated captions and creatives, drafts, approvals, rejections, regeneration requests, scheduled posts, and published posts.

Communications — support emails, chat-assistant transcripts, and feedback.

3.2 Information collected automatically

Device and technical data — IP address, device type, operating system, browser type and version, screen resolution, language, referring URL, error and crash logs.

Usage data — features accessed, generation events, credits consumed, approval actions, posts scheduled and published, session activity.

Cookies and similar technologies — see our Cookie Policy.

3.3 Information from third parties

Social-media platforms. When you connect Instagram, Facebook, or LinkedIn via OAuth, we receive access tokens, account and page/organisation identifiers, basic profile data, granted permission scopes, and — where you authorise it — post-level insights such as reach, impressions, and engagement. We use tokens only to perform actions you have authorised. We never receive or store your social-media password.

Website and brand extraction. If you provide a website URL during onboarding, we fetch publicly available pages through third-party extraction services (Firecrawl and OpenBrand) to pull business name, industry, description, logos, colours, imagery, and contact details into your Brand DNA.

Payment processor. Purchases are handled by Dodo Payments Inc., our Merchant of Record. Dodo collects your billing name, address, country, tax identifiers, and payment-instrument details directly. We receive only a limited transaction record — plan, amount, currency, last four digits, status, invoice ID. We never see or store your full card number, CVV, or bank credentials.

4. Why We Process It, and On What Legal Basis

Under the DPDP Act, processing is carried out on the basis of your consent or for legitimate uses as defined in that Act.

5. AI Processing

SocioGenie sends prompts, brand context, and — where relevant — your uploaded images and assets to enterprise AI providers acting as our processors:

• Anthropic, PBC (United States) — text generation, content strategy, reasoning.
• Google LLC — Vertex AI / Gemini API (United States) — multimodal generation across text, image, and video.
• OpenAI, L.L.C. (United States) — text and image processing for specific features.

We do not use your personal data, brand assets, or generated content to train our own AI models. Our AI providers are contractually prevented from training their general-purpose models on your data under the configurations we use, and we enable API training opt-outs and zero-retention settings where the provider makes them available.

Automated decision-making. The AI Engine decides what to post, when, and how to present it. In Manual Review mode nothing publishes without your approval. In Auto Approve mode, content is published on schedule following the limited human review described in Section 6. These decisions concern your marketing content, not you as an individual, and do not produce legal or similarly significant effects on any person within the meaning of GDPR Article 22. You can disable automation at any time.

For what generated content can and cannot be relied on, see our AI Disclosure.

6. Human Review

Where your plan includes human-reviewed content, review is carried out by employees of MAGNATEX LLP working in India. We do not use an external agency, contractor pool, or crowd workforce for review.

Reviewers see only the generated post — caption and creative. They do not access your social-media inbox, message threads, follower or audience data, contact lists, billing information, or account credentials. All reviewers are bound by written confidentiality obligations and work under least-privilege access controls with review actions logged.

Review covers brand consistency, caption quality, creative presentation, and readiness to post. It is not a fact-check, legal review, or rights clearance.

7. Who We Share Data With

We do not sell personal data. We do not "share" it for cross-context behavioural advertising within the meaning of the CCPA/CPRA. We do not run advertising pixels.

We disclose personal data to:

• Sub-processors who operate parts of the platform for us — hosting, AI generation, payments, analytics, brand extraction, and email delivery. The full current list, with locations and safeguards, is at Sub-processors.
• Social-media platforms you connect — we transmit the content you have authorised us to publish to Meta Platforms (Instagram, Facebook) and LinkedIn Corporation.
• Professional advisors — lawyers, accountants, auditors, and insurers, under confidentiality.
• Authorities — where required by law, court order, or valid government or regulatory request, or to protect our rights, our users, or the public.
• A successor — in a merger, acquisition, reorganisation, or asset sale, subject to equivalent protections and notice to you.

8. International Transfers

MAGNATEX LLP is in India. Our infrastructure and most sub-processors are in the United States. Where personal data is transferred outside your country of residence — including from the EEA, the UK, or Switzerland to India or the United States — we rely on:

• the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum;
• adequacy decisions where they apply, including the EU–US Data Privacy Framework for participating sub-processors;
• equivalent contractual protections with every processor and sub-processor.

A copy of the safeguards we use is available on request from founder@magnatex.co.

9. Retention

Content already published to your social-media accounts is outside our control. Deleting your SocioGenie Account does not remove published posts. You must delete those from the platform yourself.

10. Your Rights

Depending on where you live, you have some or all of these rights:

• Access — obtain a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — delete personal data, subject to legal retention.
• Restriction — limit how we process your data.
• Objection — object to processing based on legitimate interest, and to direct marketing at any time.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, without affecting prior lawful processing.
• Complain — to your supervisory authority: the Data Protection Board of India, your EU or UK supervisory authority, or the California Privacy Protection Agency.

California residents additionally have the right to know, delete, correct, and limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

Indian Data Principals may nominate another individual to exercise their rights in the event of death or incapacity, and may contact our Grievance Officer (Section 13).

To exercise a right, email founder@magnatex.co from your Account email address. We respond within 30 days, or sooner where the law requires. We may need to verify your identity first.

11. Security

We apply administrative, technical, and physical safeguards including: encryption in transit (TLS 1.2+) and at rest, hashed passwords, scoped role-based access control, secret management for API keys and OAuth tokens, audit logging, least-privilege employee access, and vendor security review.

No system is completely secure. Keep your credentials confidential and contact support@magnatex.co immediately if you suspect unauthorised access.

In the event of a personal-data breach likely to result in risk to your rights, we will notify the relevant supervisory authority and affected users without undue delay, consistent with GDPR Articles 33 and 34, the DPDP Act, and other applicable law.

12. Cookies and Analytics

We use a limited set of cookies and similar technologies for authentication and security, preference storage, and product analytics. Analytics cookies are set only where you have given consent. Full detail, including each cookie and how to change your choices, is in our Cookie Policy.

13. Grievance Officer (India)

Under the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 as amended in 2026, and the DPDP Act, 2023:

• Name: Naman Patel
• Designation: Founder, MAGNATEX LLP
• Email: founder@magnatex.co
• Address: 111, Fortune Business Hub, Sola, Nr. Satyamev Elysium, Ahmedabad, Gujarat 380060, India
• Working hours: Monday – Friday, 09:00 – 18:00 IST

Complaints are acknowledged within 24 hours and resolved within 15 days, or sooner where a shorter statutory timeline applies.

14. Children

The Services are for users aged 18 or over. We do not knowingly collect personal data from anyone under 18. Do not upload images of children. If you believe a child has provided us with personal data, contact founder@magnatex.co and we will delete it.

15. When You Are the Controller

Where you upload material containing personal data of your customers, staff, or other individuals, you are the controller and we process it on your instructions as your processor. You are responsible for having a lawful basis, for providing notice to those individuals, and for the accuracy of the data. Our Data Processing Agreement sets out the Article 28 terms and applies automatically to your use of the Services.

16. Third-Party Platforms and Deletion Requests

The Services integrate with third-party platforms whose privacy practices are governed by their own policies. Review those before connecting an account.

For deletion of data we hold from Meta integrations, see our Facebook Data Deletion Instructions and Instagram Data Deletion Instructions.

17. Payments and Currency

All charges are billed and settled in USD through Dodo Payments Inc., our Merchant of Record. Approved refunds are issued by Dodo to the original payment instrument in USD; the amount credited in your local currency may vary with exchange rates and bank fees. See our Refund Policy.

18. Changes

We may update this Policy. Material changes will be reflected in the "Last updated" date and, where required, notified in-app or by email. Continued use after changes take effect constitutes acceptance.

19. Contact

• Privacy, data requests, grievances: founder@magnatex.co
• General support: support@magnatex.co
• Sales: sales@magnatex.co
• Postal: MAGNATEX LLP, 111, Fortune Business Hub, Sola, Nr. Satyamev Elysium, Ahmedabad, Gujarat 380060, India