Privacy Policy

Our Commitment to Your Privacy

At 48 Social, we believe technology should empower people, not exploit them.

48 Social is operated by SpiritualTech Systems, a California nonprofit religious corporation and church dedicated to advancing spiritual education, conscious technology, and service.

Our mission is to help creators, entrepreneurs, and organizations amplify their authentic voices and impact through intelligent, responsible technology.

We respect the trust you place in us when sharing your information, connecting your accounts, and creating content through our services.

Our commitments are simple:

• Your creative work belongs to you, subject to applicable law and third-party rights.
• We do not sell your private content, contact lists, or customer databases.
• We access connected accounts only for authorized purposes.
• We seek to use responsible, lawful AI and technology.
• We take reasonable steps to safeguard the information entrusted to us.
• We believe people should understand how their data is used and have meaningful control over it.

This Privacy Policy explains how we collect, use, share, retain, and protect personal information.

1. Scope of This Policy

This Privacy Policy applies to 48 Social's websites, applications, products, and related services, including:

• 48 Social: Our main website at 48social.com.
• 48 Social Studio: Our AI-powered content creation, social media management, scheduling, and automation platform.
• 48 Social Systems: Our branded business management platform, including CRM, websites, funnels, email and SMS communications, scheduling, payments, automations, and related services.

Together, these are referred to as the "Services."

48 Social Systems uses licensed third-party technology, including the HighLevel platform. These underlying providers may independently process personal information under their own agreements and privacy policies.

This Policy covers information handled by SpiritualTech Systems through the Services. Third-party products, social platforms, and customer-operated websites may have separate privacy policies.

2. Information We Collect

The information we process depends on how you interact with 48 Social and which features you use.

A. Account and Contact Information

When you register, subscribe, contact us, or use our Services, we may collect:

• Name, email address, and phone number.
• Business or organization name.
• Account username, profile, and preferences.
• Billing details, subscription information, and transaction records.
• Customer support requests and communications.
• Authentication information needed to maintain your account.

Payment-card details may be processed directly by third-party payment providers. We generally receive transaction and billing information necessary to manage your subscription.

B. Content You Create or Upload

Depending on the features you use, we may process:

• Written content, prompts, and instructions.
• Images, photographs, graphics, and videos.
• Audio files, recordings, and transcripts.
• Documents and other uploaded materials.
• Testimonials, reviews, and promotional content.
• Drafts, captions, social posts, and AI-generated outputs.
• Content schedules, campaigns, and publishing preferences.

We process this content to provide the services you request, including AI-assisted creation, editing, organization, scheduling, and publishing.

C. Connected Social Media Accounts

When you authorize a social media integration, including with Meta platforms, Pinterest, or supported third-party scheduling providers, we may access information permitted by the authorization and the platform's rules.

This may include:

• Account identifiers, profile names, and connected account details.
• Authorized account permissions and access tokens.
• Posts, media, captions, and publishing information.
• Engagement and account performance analytics.
• Relevant comments, messages, or other account interactions where supported by the integration and its permissions.

We use this information to enable the features you authorize.

We do not require your social media password when connecting through supported OAuth authorization flows. We may securely maintain authorization tokens or equivalent credentials necessary for approved account connections.

Access to platform data is subject to the relevant platform's permissions, developer requirements, storage restrictions, and retention policies. We may retrieve certain data when needed rather than retain permanent copies.

D. Business and Customer Data Through 48 Social Systems

48 Social Systems allows customers to collect and manage information relating to their own customers, subscribers, leads, and business contacts.

Depending on the customer's use of the platform, this may include:

• Contact names, email addresses, and phone numbers.
• CRM records and customer relationships.
• Forms, surveys, bookings, and appointment details.
• Email, SMS, and other communications.
• Purchase records, invoices, and transaction information.
• Website interactions and marketing preferences.
• Course, membership, and community information.

Our business customers are generally responsible for deciding why and how they collect this information.

Where applicable, SpiritualTech Systems processes such information on behalf of the customer to deliver the Services. Our underlying providers may act as additional service providers or subprocessors.

Individuals whose information is held by a 48 Social Systems customer should generally contact that business directly about their privacy requests.

E. Website, Device, and Usage Information

When you visit or interact with our Services, we and our service providers may automatically collect:

• IP address and approximate location derived from it.
• Browser and device information.
• Operating system and technical identifiers.
• Pages visited, referral sources, and interactions.
• Login activity, error reports, and security logs.
• Cookie identifiers and analytics information.

We use this information to support functionality, understand website performance, maintain security, and improve the customer experience.

3. How We Use Your Information

We use personal information to:

1. Create, authenticate, and manage accounts.
2. Deliver AI-powered content creation and other requested features.
3. Connect authorized social accounts and facilitate approved publishing.
4. Provide CRM, automation, communication, and business management services.
5. Process subscriptions, payments, and customer support requests.
6. Maintain, troubleshoot, secure, and improve our technology.
7. Understand website usage and measure marketing performance.
8. Send service-related notifications and, where permitted, optional marketing communications.
9. Detect fraud, unauthorized activity, or misuse.
10. Comply with applicable laws and legitimate legal requests.

We may use aggregated or appropriately de-identified information to understand product performance, provided the use is lawful and consistent with applicable third-party restrictions.

Where data protection laws require a legal basis, processing may rely on performance of a contract, compliance with legal obligations, legitimate interests that are not overridden by individual rights, or consent where required.

4. Artificial Intelligence and Third-Party AI Providers

Our Services use third-party artificial intelligence technologies, which may include large language models and related tools from providers such as OpenAI, Anthropic, and other service providers.

When you use AI-enabled features, relevant prompts, instructions, documents, images, audio, video, or other submitted content may be transmitted to these providers to generate the requested results.

We select providers based on considerations such as security, reliability, functionality, and responsible use.

Important information about AI processing:

• AI-generated results may contain inaccuracies or unexpected material.
• Different AI providers may have different data retention, security, and model-training practices.
• Provider processing may occur in different countries.
• We do not guarantee that all third-party AI providers maintain identical privacy settings or training restrictions.
• Users should not submit passwords, financial account credentials, government identification numbers, medical records, or other highly sensitive information unless expressly supported by an appropriate feature and its safeguards.

We do not sell your private creative content to AI training companies.

Our use of AI providers is intended to deliver and support the features you request. Any additional use by an independent provider depends on its applicable agreements, service configuration, and legal obligations.

We encourage users to review AI-generated material before using or publishing it.

5. Social Media Permissions and Publishing

48 Social Studio is designed to keep users in control of their social media presence.

Our standard publishing workflow requires user approval of each post before it is scheduled or published. Once a post is approved and scheduled, it may be published automatically at the approved time without requiring a second approval.

When you connect a social account, you authorize 48 Social and its approved technical providers to perform the actions you select, within the permissions granted by the platform.

Authorized 48 Social personnel may access relevant account information or content when necessary to provide requested services, troubleshoot issues, or perform work you have authorized, subject to applicable platform requirements.

We do not sell connected social account data or use private platform information for unrelated marketing.

You may disconnect supported integrations through the available account settings or directly through the connected platform.

Disconnecting access does not automatically remove information already published to an external social media platform or delete information that must lawfully be retained.

6. Cookies, Analytics, and Advertising

We use or may enable cookies, pixels, and similar technologies for website functionality, security, analytics, and advertising.

These technologies may include:

Essential technologies: Support login sessions, security, and core functionality.

Analytics technologies: Services such as Google Analytics help us understand visits, traffic sources, user behavior, and product performance.

Advertising technologies: Services such as Meta Pixel may help us measure advertising effectiveness, understand conversions, and deliver relevant advertisements or remarketing campaigns.

Depending on the technology, information shared with these providers may include browser identifiers, device details, page interactions, events, and advertising-related information.

These providers may process information according to their own privacy policies and applicable agreements.

We will provide notices, consent mechanisms, and opt-out choices where required by applicable law. Nonessential tracking technologies will be subject to the required permissions in jurisdictions where prior consent is necessary.

You may also manage certain browser cookies through your browser settings and advertising preferences through relevant advertising platforms.

Some disclosures to advertising technology providers may qualify as "sharing" or another regulated disclosure under privacy laws even without monetary payment. We will honor applicable legal rights relating to these practices.

7. How We Share Information

We do not sell customer content, private contact lists, or customer databases to data brokers.

We may disclose information to the following categories of recipients when necessary and legally permitted:

Technology and hosting providers: Organizations that host or maintain software, databases, infrastructure, and related services, including providers supporting 48 Social Systems.

AI providers: Services that process inputs and generate outputs for AI-enabled features.

Social media platforms: Platforms you connect or authorize for publishing, analytics, and other features.

Payment and billing providers: Services that process transactions and manage subscriptions.

Analytics and advertising providers: Providers that measure website performance, conversions, and advertising campaigns, subject to applicable privacy controls.

Authorized personnel and contractors: Individuals who require appropriate access to provide support, maintain the Services, or complete authorized work.

Legal and regulatory recipients: Authorities or other parties where disclosure is legally required or reasonably necessary to protect rights, safety, or security.

We may also share contact information with an independent referral or collaboration partner when you specifically request or authorize an introduction, subject to applicable consent requirements.

We do not automatically enroll customers in unrelated third-party marketing programs merely because they use 48 Social.

8. Data Retention

We retain personal information only for as long as reasonably necessary for legitimate service, business, security, and legal purposes.

Retention depends on factors including:

• Whether your subscription or account remains active.
• Whether information is required to deliver a requested feature.
• Applicable contractual and third-party platform requirements.
• Tax, accounting, legal, and security obligations.
• Whether information is needed to resolve a dispute.
• Backup and disaster recovery schedules.

You may request account deletion or deletion of eligible personal information.

Some information may remain temporarily in backups or be retained where legally required. Data already published to external platforms may remain governed by those platforms' policies.

We will process deletion requests in accordance with applicable law and platform requirements.

9. Information Security

We take reasonable administrative, technical, and organizational steps designed to protect personal information against unauthorized access, misuse, alteration, and disclosure.

Our security approach includes managing access to information, using appropriate authentication and authorization mechanisms, working with established service providers, and limiting personnel access to legitimate purposes.

Users are responsible for protecting their account credentials, choosing strong passwords, and notifying us promptly if they suspect unauthorized account activity.

We encourage customers to enable additional account security features wherever available through 48 Social or connected services.

No online system can be guaranteed completely secure.

If a security incident occurs, we will investigate, respond, and provide notifications as required by applicable laws and contractual obligations.

10. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have rights to:

• Request access to personal information.
• Correct inaccurate information.
• Request deletion of eligible information.
• Request a portable copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent for processing based on consent.
• Opt out of certain advertising-related uses or disclosures.
• Lodge a complaint with an applicable data protection authority.

You may also unsubscribe from promotional email messages using the unsubscribe instructions provided.

To make a privacy request, contact [email protected].

We may need to verify your identity or authority before fulfilling a request. Some requests are subject to legal exceptions.

If your information is held by one of our business customers through 48 Social Systems, we may refer your request to that customer or assist them in responding, as appropriate.

11. International Data Processing

48 Social serves customers internationally.

Information may be processed or stored in the United States and in other countries where our authorized technology providers operate.

These countries may have privacy laws different from those in your country of residence.

Where applicable law requires safeguards for international personal data transfers, we will use appropriate lawful mechanisms or contractual protections.

We respect applicable regional privacy rights and requirements.

12. Children's and Teenagers' Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in connection with their own use of 48 Social.

Users between 13 and 17 must have permission from a parent or legal guardian, and the responsible adult must accept any contractual and payment obligations where required.

Access to particular features or third-party platforms may be subject to higher minimum ages or additional parental consent requirements under applicable law.

If we become aware that we have collected personal information from a child in violation of applicable requirements, we will take appropriate steps to address it.

Parents or guardians may contact [email protected] with concerns.

13. Third-Party Websites and Services

Our Services may link to or integrate with other websites and platforms, including Meta, Pinterest, HighLevel, AI providers, and external payment or scheduling services.

These organizations operate independently and may have their own privacy policies, terms, and data practices.

We encourage you to review their policies before enabling optional integrations.

14. Changes to This Policy

We may update this Privacy Policy to reflect new features, technologies, legal requirements, or operating practices.

When we make material changes, we will provide appropriate notice, which may include an updated effective date, email notification, or notification through the Services.

Where required, we will obtain additional consent before beginning new processing activities.

15. Contact Information

48 Social
Operated by SpiritualTech Systems
California Nonprofit Religious Corporation and Church
Pacifica, California, United States

Privacy and Support: [email protected]
Website: https://48social.com

We welcome questions about our privacy practices, data use, and technology.

Our intention is to create technology that serves people with integrity, transparency, and care.