Privacy Policy

Social Ninja and getsocial.ninja are trading names owned and operated by Lumoza Limited, a company incorporated in Ireland (company registration number 808628), with its registered office at 1 McElwain Terrace, Newbridge, Kildare, W12 C434, Ireland, and trading address at 77 Camden Street Lower, Dublin, D02 XE80, Ireland. Lumoza Limited is the data controller for personal data processed through the Service.

This policy explains what personal data we collect when you use Social Ninja, why we collect it, who processes it on our behalf, and the rights you have over it.

1. Data we collect

• Account data. Your email address, a hashed password (managed by our authentication provider), and any profile fields you fill in during onboarding.
• Content data. Anything you create or import — posts, drafts, hooks, voice samples, talking points, strategy answers, intelligence notes, and the URLs you point us at.
• AI usage data. The prompts and responses generated when you ask Social Ninja to draft, score, or rewrite content.
• Billing data. If you subscribe, Stripe collects payment details directly. We store a customer reference and subscription status — never card numbers.
• Technical data. IP address, user-agent, request logs, and basic telemetry needed to operate the service.

2. How we use your data

• To run your account and provide the features you signed up for.
• To generate, score, and improve drafts in your voice — the entire point of the product.
• To support you, debug issues, and keep the service safe and available.
• To handle billing and prevent abuse.
• To send service emails (account, billing, security). Marketing emails only if you opt in.

We do not sell your data, and we do not train any shared AI model on your content.

3. AI processing and sub-processors

Social Ninja sends your prompts to large-language-model providers in order to generate drafts and scores. Today those providers are:

• Anthropic (Claude family models) — under their commercial terms, which prohibit training on customer prompts.
• OpenAI (GPT family models) — under their API data-usage policies, which exclude API traffic from training by default.

Other sub-processors that handle data on our behalf: an EU-hosted database, authentication, and storage provider (eu-west-1); Stripe for payments; Rewardful for affiliate and referral programme management (getrewardful.com); and our hosting provider for the application. A current named sub-processor list is available on request — email privacy@getsocial.ninja.

4. Where your data is stored

Account, content, and metadata are stored in our EU-hosted backend database (eu-west-1). Prompt traffic to AI providers is processed in the regions those providers operate. Backups and logs may be retained for up to 30 days.

5. Your rights

If you are in the UK, EU, or another jurisdiction with comparable data-protection laws, you can:

• Access the personal data we hold about you.
• Correct it, export it, or have it deleted.
• Withdraw consent for processing where consent was the basis.
• Lodge a complaint with your local supervisory authority (in the UK, the ICO).

You can delete most of your content from inside the product. To delete your account or exercise the rights above, email privacy@getsocial.ninja.

6. Cookies

We use first-party cookies to keep you signed in and to support basic site functionality. If you arrive via an affiliate referral link, we also set a referral-tracking cookie operated by our affiliate platform Rewardful (getrewardful.com) to attribute any resulting subscription to the referring affiliate. Rewardful is a sub-processor under our DPA. We do not use advertising trackers.

7. Retention

We keep your data for as long as your account is active. After deletion, residual data may persist in encrypted backups for up to 30 days before being purged on rotation.

8. Security

Data in transit is encrypted with TLS. Data at rest is encrypted with provider-managed keys. Row-level security is enforced on every table containing user content.

9. Changes

We’ll update this page when our practices change and bump the “last updated” date above. Material changes will also be communicated by email.

10. Contact

Privacy questions: privacy@getsocial.ninja

Data controller: Lumoza Limited (Irish company registration number 808628). getsocial.ninja and Social Ninja are trading names of Lumoza Limited.
Registered office: 1 McElwain Terrace, Newbridge, Kildare, W12 C434, Ireland.
Trading address: 77 Camden Street Lower, Dublin, D02 XE80, Ireland.