PRIVACY Policy
Social Jam Ltd
Privacy & Data Protection Policy
Website: socialjam.ie & Web Application
Version 1.0 | Effective Date: 30/03/2026 | Last Updated: 08/04/2026
1. Introduction & Who We Are
Social Jam Ltd (“Social Jam”, “we”, “us”, “our”) is a company incorporated in Ireland, providing an AI-powered social media automation platform for businesses in the tourism, retail, and professional services sectors.
We are committed to protecting the personal data of our users, website visitors, and all individuals whose information we process. This Privacy and Data Protection Policy explains how we collect, use, store, share, and protect your personal data in accordance with:
- The General Data Protection Regulation (EU) 2016/679 (GDPR)
- The Data Protection Acts 2018 (Ireland)
- The ePrivacy Regulations (SI No. 336 of 2011, as amended)
Data Controller: Social Jam Ltd
Registered Address: ATU iHub Mayo, Westport Road, Knockaphunta, Castlebar, Co. Mayo F23 K162
Contact Email: helen@socialjam.ie
2. Scope of This Policy
This policy applies to:
- All visitors to our website at socialjam.ie
- All users of the Social Jam web application
- All individuals who sign up to our waitlist or early access programme
- All business customers and their authorised account users
This policy covers personal data processed through our website, our web application, and any related communications such as waitlist emails, onboarding communications, and subscription management.
3. Personal Data We Collect
3.1 Data You Provide Directly
When you register, subscribe, or interact with our platform, we may collect:
- Full name and job title
- Business name and business address
- Email address
- Phone number (if provided)
- Billing information (processed securely via Stripe — we do not store full card details)
- Social media account credentials and access tokens (via OAuth — we do not store your passwords)
- Content you create, upload, or schedule through the platform (posts, captions, images, brand assets)
- Content the platform creates, uploads, or schedules (posts, captions, images, brand assets, analytics)
- Communications you send to us (support requests, feedback, emails)
3.2 Data Collected Automatically
When you visit our website or use our web application, we automatically collect:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent, and navigation behaviour
- Referring URLs and traffic sources
- Device identifiers and screen resolution
- Cookie data (see Section 9 for full details)
3.3 Data from Connected Social Media Platforms
When you connect your social media accounts to Social Jam via OAuth, we collect and process data from those platforms on your behalf. This may include:
- Account profile information (name, handle, profile image, follower counts)
- Page and account performance metrics (reach, impressions, engagement)
- Published and scheduled post data
- Comments, messages, and community interactions (for management features)
- Audience demographic data (where provided by the platform API)
Platforms you may connect include: Instagram, Facebook, LinkedIn, X (Twitter), TikTok, and Google Business. Each platform’s own terms of service and privacy policy also apply to data accessed through their APIs.
3.4 Waitlist & Early Access Data
When you register for our waitlist or early access programme, we collect your name, email address, and business details. This data is used solely to manage your place in the queue, communicate launch and onboarding information, and provide early access pricing details.
4. Legal Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
Contractual necessity: Processing required to deliver our subscription service, manage your account, and fulfil our obligations to you as a customer.
Legitimate interests: Improving our platform, preventing fraud, ensuring security, and analysing usage patterns — where these do not override your rights.
Legal obligation: Complying with applicable laws including tax, financial reporting, and regulatory requirements.
Consent: For non-essential cookies, marketing communications, and any processing where we have explicitly asked for your consent.
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
5.1 Providing & Managing the Service
- Creating and managing your Social Jam account
- Processing subscription payments via Stripe
- Connecting and managing your linked social media accounts
- Generating, scheduling, and publishing social media content on your behalf
- Delivering AI-generated content suggestions and analytics
- Providing customer support and responding to queries
5.2 Communications
- Sending transactional emails (account setup, billing, password reset)
- Waitlist and early access onboarding communications
- Platform updates, feature announcements, and service notifications
- Marketing communications (only where you have given consent or where permitted under soft opt-in rules)
5.3 Security & Fraud Prevention
- Detecting and preventing unauthorised access or fraudulent activity
- Monitoring for abuse of our platform or API integrations
- Maintaining audit logs for security purposes
5.4 Analytics & Improvement
- Understanding how users interact with our website and platform
- Improving product features, user experience, and performance
- Conducting internal research and product development
6. AI Processing of Your Content
Social Jam uses artificial intelligence technology to generate and optimise social media content on your behalf. This is a core feature of our service and is carried out under our contractual relationship with you.
Your content — including brand information, captions, images, and account data — may be processed by third-party AI providers to generate content suggestions, schedule optimisation recommendations, and performance insights. We work only with reputable AI providers who are contractually bound to process your data solely for the purposes of delivering our service, and who maintain appropriate technical and organisational security measures.
We do not use your content to train third-party AI models without your explicit consent. Where AI providers process your data, appropriate data processing agreements are in place.
If you have questions about which specific AI technologies are used to process your data, you may contact us at helen@socialjam.ie.
7. Third-Party Data Processors & Sharing
We do not sell your personal data. We share data only with trusted third-party processors necessary to deliver our service, under GDPR-compliant data processing agreements. These include:
Stripe: Payment processing and subscription management. Stripe processes billing data securely and is PCI-DSS compliant. See stripe.com/privacy.
Google Analytics: Website and application analytics. Data may be transferred to the USA under standard contractual clauses. You can opt out via Google’s opt-out tools.
Meta (Facebook Pixel): Website behaviour tracking for advertising and analytics purposes. Subject to your cookie consent preferences.
AI Technology Providers: Content generation and optimisation features. Data processing agreements are in place with all AI providers.
Social Media Platforms: Instagram, Facebook, LinkedIn, X (Twitter), TikTok, Google Business — data is exchanged via official APIs under each platform’s terms.
Email Service Provider: Transactional and marketing email delivery. Google Workspace (Gmail). Used for transactional and marketing email delivery. Subject to Google’s own data processing terms.
Cloud Hosting Provider: Secure hosting of our web application and data storage. All hosting is subject to appropriate data processing agreements.
We may also disclose personal data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Social Jam, our users, or others.
8. International Data Transfers
Some of our third-party processors are based outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other lawful transfer mechanisms under GDPR Chapter V
You may request details of the specific safeguards in place for international transfers by contacting helen@socialjam.ie.
9. Cookies & Tracking Technologies
We use cookies and similar tracking technologies on our website and web application. Cookies are small text files stored on your device that help us provide and improve our services.
9.1 Types of Cookies We Use
Essential Cookies
These are strictly necessary for our website and application to function. They cannot be disabled. They include session management, security, and authentication cookies.
Analytics Cookies
We use Google Analytics to understand how visitors use our site. These cookies collect anonymised information about pages visited, time spent, and traffic sources. These are only placed with your consent.
Marketing & Tracking Cookies
We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising and to enable retargeting. These cookies are only placed with your explicit consent.
9.2 Managing Your Cookie Preferences
When you first visit our website, you will be presented with a cookie consent banner. You can accept all cookies, accept essential cookies only, or customise your preferences.
You can also manage or withdraw your cookie consent at any time through your browser settings or by contacting us at helen@socialjam.ie. Please note that disabling certain cookies may affect the functionality of our website.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:
Active account data: Retained for the duration of your subscription plus 13 months following account closure.
Billing & financial records: Retained for 7 years in accordance with Irish Revenue requirements.
Support & communication records: Retained for 3 years from the date of the last interaction.
Waitlist & early access data: Retained until onboarding is complete or until you request deletion.
Analytics data: Aggregated and anonymised data may be retained indefinitely; identifiable data retained per Google Analytics default settings.
Security & audit logs: Retained for up to 12 months.
When data is no longer required, it is securely deleted or anonymised in accordance with our data retention and deletion procedures.
11. Your Data Protection Rights
Under GDPR, you have the following rights in relation to your personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification: You have the right to request that inaccurate or incomplete data is corrected.
Right to Erasure: You have the right to request deletion of your personal data, subject to certain legal exceptions.
Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller.
Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.
To exercise any of these rights, please contact us at helen@socialjam.ie. We will respond within one month of receiving your request. We may need to verify your identity before processing your request.
12. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using TLS/HTTPS
- Encryption of sensitive data at rest
- Secure OAuth-based authentication for social media integrations (no passwords stored)
- Access controls and role-based permissions within our systems
- Regular security reviews and vulnerability assessments
- Contractual security obligations with all third-party processors
While we take every reasonable precaution, no system is completely secure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the Data Protection Commission as required by GDPR within 72 hours of becoming aware of the breach.
13. Children’s Privacy
Social Jam is a business-to-business platform intended for use by adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data.
14. Changes to This Policy
We may update this Privacy and Data Protection Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email (where we hold your email address) and/or by posting a prominent notice on our website, with an updated effective date at the top of this document.
We encourage you to review this policy periodically. Your continued use of our website or application after any changes take effect constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests relating to this policy or the way we handle your personal data, please contact us:
Data Controller: Social Jam Ltd
Address: ATU iHub Mayo, Westport Road, Knockaphunta, Castlebar, Co. Mayo F23 K162
Email: helen@socialjam.ie
Website: socialjam.ie
If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
DPC Website: www.dataprotection.ie
DPC Phone: +353 (0)57 868 4800
Social Jam Ltd | Registered in Ireland | socialjam.ie | helen@socialjam.ie
This document is Version 1.0. Please ensure you are reading the most current version at socialjam.ie/privacy-policy