Privacy Policy

1. Controller / Business Information

Business Name: VASTech Technologies
Website Name: Social Connect
Website URL: https://socialconnect.itelc.org
Business Address: 35-K, LOWER GROUND, COMMERCIAL AREA, PHASE 1, DHA, Lahore, Pakistan
Country: Pakistan

For any privacy-related questions, you can reach us through any of the following methods:

• By email: privacy@socialconnect.itelc.org
• By visiting a page on our website: https://socialconnect.itelc.org/contact
• By phone number: +92 300 1234567
• By sending post mail to the business address above

2. Services Covered

This privacy policy covers all services operated by VASTech Technologies under the name Social Connect (available at https://socialconnect.itelc.org). Social Connect is a social media management platform that enables you to manage, schedule, publish, and analyze content across multiple social media platforms from a single dashboard.

3. Overview of Data Processing

3.1 What Personal Information We Collect

We collect the following types of personal information:

• Email Address – for account creation, authentication, and communication.
• First name and last name – for personalizing your account.
• Social Media Profile Information – when you connect accounts via Sign in with Google, Connect with Facebook, Instagram, LinkedIn, TikTok, YouTube, Google Business Profile, Pinterest, Threads, Bluesky, Mastodon. This includes profile name, profile picture, email (where provided), and platform-specific identifiers.
• Payment Information – when you pay for our products/services (processed securely by our payment provider; we do not store full payment details).
• Usage Data – scheduled posts, content drafts, platform interactions, API calls.
• Technical Data – IP address, browser type, operating system, referring URL.
• Communication Data – content of emails or messages you send to us.

3.2 How We Use Your Data

We process your personal data for the following purposes:

• Providing, maintaining, and improving Social Connect services.
• Authenticating your identity via Google Sign-In and other social login providers.
• Managing your account, including monitoring usage.
• Managing, scheduling, publishing, and editing content on connected social media platforms on your behalf.
• Communicating with you about your account, service updates, support requests, and sending emails you have opted into.
• Ensuring security, fraud prevention, and abuse detection.
• Analytics – using tools such as Google Analytics to understand how visitors interact with our website.
• Remarketing – using remarketing services to advertise our business to you on other websites after you visit us.
• Complying with legal obligations.

3.3 Legal Basis for Processing (for international users)

Where required by applicable law (e.g., for users in certain regions), we process your data based on:

• Contract performance – to provide our service to you.
• Legitimate interests – security, service improvement, remarketing.
• Consent – for marketing emails and certain data collection.
• Legal obligations – where required by law.

4. Hosting and Server Log Files

Our website and services are hosted on cloud infrastructure (AWS). When you access our website or API, our hosting provider automatically collects server log files including IP address, date/time, requested URL, HTTP status, browser type, and referring URL. This data is retained for a limited period (up to 30 days) for security and service stability.

5. Analytics and Tracking

Yes, we use tracking and analytics tools such as Google Analytics. These tools use cookies or similar technologies to collect information about your use of our website (pages visited, time spent, interactions). This data is used in aggregated or pseudonymized form to improve our website and service. You can configure your browser to refuse cookies or use Google's opt-out browser add-on.

6. Payment Processing

When you pay for our products/services, your payment information is collected and processed by our secure third-party payment processor. We do not store full credit card details on our servers. The processor handles your data according to their own privacy policy and security standards.

7. Social Media Platform Data Processing

Social Connect allows you to connect various social media accounts (Facebook, Instagram, LinkedIn, TikTok, YouTube, Google Business Profile, Pinterest, Threads, Bluesky, Mastodon). When you connect an account via OAuth, we request specific permissions to access data on your behalf, solely to provide the management features you have authorized (e.g., posting content, viewing analytics, managing comments). We do not use your connected social media data for any other purpose, and we do not sell it to third parties.

7.1 Google API Services (including Sign in with Google, YouTube, Google Business Profile)

Social Connect uses Google API Services. When you sign in with Google, we access your basic profile information (name, email address, profile picture) to create and manage your account. When you link YouTube or Google Business Profile, we request permissions to view, edit, and manage your content on those platforms. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time via Google Security Settings or within Social Connect.

8. Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

• Hosting providers (AWS) – for infrastructure.
• Payment processors – to handle subscriptions securely.
• Analytics providers (e.g., Google Analytics) – to understand website usage.
• Remarketing services – to advertise our business to you on other websites.
• Social media platforms (Google, Meta, LinkedIn, etc.) – when you authorize us to act on your behalf via their APIs.
• Email service providers – to send you service and marketing emails.

We do not sell your personal data to third parties.

9. Your Privacy Rights (including CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know – You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete – You may request deletion of your personal information that we have collected from you, subject to certain exceptions (e.g., to complete a transaction or comply with a legal obligation).
• Right to Correct – You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale/Sharing – We do not sell your personal information. However, we do use cookies and remarketing services that may constitute "sharing" for cross-context behavioral advertising. You can opt out of such sharing by using an opt-out preference signal (e.g., Global Privacy Control) or by contacting us.
• Right to Limit Use of Sensitive Personal Information – We do not use sensitive personal information for purposes other than those permitted by law.
• Right to Non-Discrimination – We will not discriminate against you for exercising any of your privacy rights.

To exercise your rights under CCPA/CPRA, please contact us using the information in Section 1. We will verify your identity before responding to your request. Authorized agents may submit requests on your behalf with proper written permission.

10. Data Retention

We retain your personal data only as long as necessary:

• Account data: Retained for the duration of your account and deleted within 90 days of account closure, unless longer retention is required by law.
• Connected social media data: Retained while your account is active and the connection is authorized. Upon disconnection or account closure, this data is deleted within 30 days.
• Usage logs: Retained for up to 12 months for service monitoring and billing.
• Server logs: Retained for up to 30 days.
• Communication data: Retained as necessary to resolve your inquiry and for up to 3 years thereafter.

11. Cookies and Tracking Technologies

Our website uses cookies – small text files stored on your device. Some cookies are essential (e.g., session cookies for authentication). Others, including analytics cookies (Google Analytics) and remarketing cookies, help us analyze usage and advertise to you. You can configure your browser to refuse cookies or alert you when cookies are being sent. Note that some features may not function properly if cookies are disabled.

12. Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted transmission (TLS/SSL), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

13. International Data Transfers

We are based in Pakistan. Our service providers (including AWS, Google, analytics, and remarketing services) may process data in other countries, including the United States. When we transfer data internationally, we take steps to ensure appropriate safeguards are in place.

14. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

15. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically.

16. Contact Information