This Privacy Policy explains how SOQO Platforms Pvt Ltd (“SOQO”, “we”, “us”) handles personal data when you use soqo.com, the SOQO platform and related services (together, the “Services”). We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and rules made under it, and the terms of the platforms you connect to SOQO.
1. Who we are
SOQO is an AI-assisted platform that connects brands, creators and agencies to discover talent, run campaigns, create content and, over time, manage creator finances. For the purposes of the DPDP Act, SOQO is the Data Fiduciary for personal data processed through the Services.
SOQO Platforms Pvt Ltd
No.472/1 Balaji Arcade, A.V.S. Compound, 20th L Cross Road, Ejipura, Koramangala 4th Block, Bengaluru, Karnataka – 560095, India
Privacy requests: privacy@soqo.com
2. Data we collect
Information you give us
- Account and profile data: name, email address, phone number, business or agency name, role (brand, creator or agency), profile photo, bio, niche, location and language.
- Verification (KYC) data: where required, details needed to confirm identity or business status. We collect only what is needed and tell you why when we ask.
- Campaign and content data: briefs, proposals, messages, deliverables, contracts and files you upload or exchange on the platform.
- Support and communications: messages you send us, demo requests, newsletter sign-ups and survey responses.
Information from accounts you connect
If you choose to connect a Google/YouTube or Meta/Instagram account, we receive limited data from that platform as described in sections 3 and 5. You decide whether to connect, and you can disconnect at any time.
Information collected automatically
- Usage data: pages and features used, actions taken, referring pages, timestamps and approximate location derived from IP address.
- Device data: browser type, operating system, device identifiers, language and diagnostic or crash information.
- Cookies and similar technologies: see section 13.
3. Google and YouTube data
Creators may connect their YouTube channel to SOQO using Google’s OAuth consent screen. SOQO requests read-only access, and only after you approve each permission.
| Google API scope | What we access | Why |
|---|---|---|
youtube.readonly | Your channel name, ID, handle, description, thumbnails, subscriber count, public video list and public video statistics. | To verify you own the channel and to build your creator profile. |
yt-analytics.readonly | Aggregated channel analytics you authorise: views, watch time, engagement, and audience demographics, geography and traffic sources. | To show you your performance and, only if you choose to share it, to give brands and agencies verified audience insights for campaign matching and reporting. |
We do not request permission to upload, edit, delete or comment on your videos, and we cannot change anything on your channel. We do not access your Gmail, Google Drive, contacts or other Google services.
Revoking access. You can revoke SOQO’s access to your Google data at any time through your Google Account permissions page, or by disconnecting the channel inside SOQO. When access is revoked or you disconnect, we stop syncing and delete the data we received from Google as described in section 8.
By using SOQO’s YouTube features you also agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.
4. Google API Services User Data Policy: Limited Use
SOQO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, this means that for data we receive from Google APIs:
- We use it only to provide and improve the user-facing features you see in SOQO: channel verification, your creator profile, performance analytics, and campaign matching and reporting you have authorised.
- We do not sell it, and we do not transfer it to third parties except as needed to provide those features, to comply with applicable law, as part of a merger, acquisition or sale of assets after notice to you, or with your explicit consent.
- We do not use or transfer it for serving ads, including personalised, retargeted or interest-based advertising.
- We do not allow humans to read it, unless we have your affirmative consent for specific data, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymised for internal operations.
- We do not use it to develop, improve or train generalised AI or machine-learning models. Any AI assistance in SOQO that uses your Google data operates on your own data to serve you and is not used to train models for others.
- We do not use it for credit-worthiness determinations or for lending purposes.
5. Meta (Facebook and Instagram) data
Creators and brands may connect an Instagram Professional (Business or Creator) account, and the Facebook Page linked to it, through Facebook Login. SOQO requests only the permissions below, and only after you approve them in Meta’s consent dialog.
| Meta permission | What we access | Why |
|---|---|---|
instagram_basic | Your Instagram username, account ID, profile picture, biography, account type, follower count, and your media (posts, reels, captions, timestamps). | To verify your account and build your creator profile. |
instagram_manage_insights | Insights for your account and media: reach, impressions, engagement, saves, shares, and audience demographics and geography. | To show you your performance and, if you choose to share it, to give brands and agencies verified audience insights and campaign reporting. |
pages_show_list | The list of Facebook Pages you manage. | To locate the Page linked to your Instagram Professional account. |
pages_read_engagement | Basic Page information needed to read the linked Instagram account. | To complete the connection between your Page and Instagram account. |
We do not post, comment, message, or change anything on your Instagram or Facebook accounts, and we do not read your private messages. We do not access your personal Facebook profile beyond basic identity returned by Facebook Login.
How we handle Meta Platform Data. We use data received from Meta only to provide the features described above. We do not sell it, license it, or use it for advertising or to build audiences for ad targeting, and we do not use it to make decisions about eligibility for employment, housing, credit or insurance. We apply the Meta Platform Terms and Developer Policies to all such data, and we delete it when you disconnect, ask us to delete it, or when Meta notifies us that you have removed the app.
Revoking access. You can remove SOQO at any time in Facebook under Settings & privacy → Settings → Apps and Websites, or in Instagram under Settings → Website permissions → Apps and websites, or by disconnecting the account inside SOQO. See also our Data Deletion page.
6. How we use personal data
- To create and secure your account, verify identity and prevent fraud and abuse.
- To operate the Services: creator discovery, campaign management, content workflows, analytics and reporting.
- To provide AI-assisted features such as recommendations, briefs and summaries.
- To communicate with you about the Services, respond to support requests, and, where you have opted in, send product updates and marketing, which you can stop at any time.
- To maintain, debug and improve the Services using aggregated or de-identified usage data.
- To comply with legal obligations and enforce our Terms of Service.
Lawful basis. We process personal data on the basis of your consent, which you can withdraw at any time, or for “certain legitimate uses” recognised by the DPDP Act, such as providing a service you requested, complying with law or responding to security incidents. Consent for connected Google and Meta data is requested separately, at the time of connection.
7. Who we share data with
- Other SOQO users, with your control. A creator’s profile and connected-account metrics are visible to brands and agencies only according to the sharing settings you choose or when you apply to, or accept, a campaign. Brands and agencies are responsible for how they use what you share.
- Service providers (data processors) that host infrastructure, send email, provide analytics, customer support, payments or identity verification, under written agreements that limit use to providing the service to us.
- Authorities and advisers where required by law, court order or to protect rights, safety and security, and professional advisers under confidentiality.
- Business transfers. If SOQO is involved in a merger, acquisition or asset sale, data may transfer to the successor, which must honour this policy. We will notify you first.
We do not sell your personal data. Data from Google and Meta APIs is further restricted as described in sections 4 and 5.
8. Retention and deletion
- We keep account data for as long as your account is active and as needed to provide the Services.
- Data received from Google and Meta APIs is kept only while the account is connected. When you disconnect, revoke access, or ask us to delete your data, we stop syncing and delete it within 30 days, unless a longer period is legally required.
- After you close your account we delete or anonymise personal data within 30 days, except records we must keep for tax, accounting, fraud-prevention or legal reasons, which we retain only for the legally required period.
- Encrypted backups are overwritten on their normal rotation cycle.
To request deletion, follow the steps on our Data Deletion page or email privacy@soqo.com.
9. Security
We use reasonable security safeguards, including encryption of data in transit and of access tokens at rest, role-based access controls, logging and monitoring, and least-privilege access for staff. No system is completely secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by law.
10. International transfers
SOQO is based in India, but some service providers may process data on servers outside India. Where we transfer personal data abroad, we do so in line with the DPDP Act and any restrictions notified by the Government of India, and we require our providers to protect it to an equivalent standard.
11. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we process and the parties we share it with.
- Correct or update inaccurate or incomplete data.
- Erase your personal data when it is no longer needed for the purpose it was collected, or when you withdraw consent.
- Withdraw consent at any time. This does not affect processing done before withdrawal.
- Grievance redressal: contact us first, then the Data Protection Board of India if unresolved.
- Nominate another individual to exercise your rights in the event of your death or incapacity.
Email privacy@soqo.com from your registered address. We may ask you to verify your identity before acting on a request, and we aim to respond within 30 days.
12. Children
The Services are intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it. Creators who work with minors must follow applicable law, including verifiable parental consent under the DPDP Act.
13. Cookies and similar technologies
We use essential cookies and local storage to run the site and keep you signed in, and may use analytics cookies to understand how the site is used. You can control cookies in your browser settings; blocking essential cookies may stop parts of the Services from working. We do not use data from Google or Meta APIs for advertising.
14. Changes to this policy
We may update this policy as the Services or the law change. We will post the new version here with a new “last updated” date and, for material changes, notify you by email or in the product. If a change requires fresh consent, we will ask for it.
15. Contact and grievance officer
For privacy questions, requests or complaints:
- Privacy and data requests: privacy@soqo.com
- Grievance Officer, SOQO Platforms Pvt Ltd: grievance@soqo.com
- General support: support@soqo.com
- Postal address: No.472/1 Balaji Arcade, A.V.S. Compound, 20th L Cross Road, Ejipura, Koramangala 4th Block, Bengaluru, Karnataka – 560095, India
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.