Privacy Policy

1. Overview & Scope

This Privacy Policy explains how GenX LLC ("GenX", "SocialHeat", "we", "us", or "our"), having its principal office at 3241 Beach Blvd., Ste 326, collects, processes, stores, and protects personal and corporate data in connection with the SocialHeat AI Social Listening & Intelligence Platform (the "Service").

This policy applies to all users of our websites, SaaS dashboard, REST APIs, and related enterprise solutions. By accessing or using SocialHeat, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We classify the data processed through our platform into two distinct categories:

A. Customer Account & Billing Data

When you register for an account, request a demo, or subscribe to our enterprise plans, we collect:

• Contact Information: Full name, business email address, corporate phone number, and job title.
• Company Details: Company name, team size, industry sector, and billing address.
• Authentication Credentials: Passwords (salted and hashed with bcrypt), single sign-on (SSO) tokens, and API authentication keys.
• Payment Information: Credit card and banking transactions processed securely via certified third-party payment gateways (we do not store raw card numbers).

B. Public Social Media Data (Platform Service Data)

To provide social listening, fanpage benchmarking, and sentiment analytics, SocialHeat collects and aggregates publicly available data from authorized social networks and digital sources:

• Public posts, comments, captions, and hashtag metrics.
• Public page engagement metrics (likes, reactions, comment counts, share volumes).
• Author usernames and public profile metadata (where explicitly made public by the user).
• Timestamp, source URL, language, and regional classification.

Important: SocialHeat does not collect, crawl, or store private direct messages, closed group posts, or non-public profile records.

3. How We Use Data

GenX LLC utilizes the collected data strictly for the following operational and product purposes:

• Service Delivery: Providing real-time keyword tracking, competitive benchmarking, and AI sentiment scoring.
• AI Model Training & Accuracy: Training natural language processing (NLP) models on anonymized public text for Southeast Asian language sentiment detection.
• Customer Support & SLA Fulfillment: Assisting customers, resolving technical issues, and monitoring system availability.
• Billing & Security Audits: Processing subscription invoices, enforcing rate limits, preventing unauthorized access, and maintaining audit logs.

4. Legal Bases for Processing (GDPR)

For individuals located in the European Economic Area (EEA) and United Kingdom, GenX LLC processes personal data pursuant to the following lawful grounds under Article 6 of the General Data Protection Regulation (GDPR):

5. Security & Storage Standards

GenX LLC maintains rigorous technical and organizational security measures to protect customer data:

• Encryption: AES-256 encryption for all data at rest; TLS 1.3 encryption for all data in transit.
• Infrastructure: Tier-4 cloud infrastructure hosted on AWS with multi-zone automated backups.
• Compliance Frameworks: Audited under SOC 2 Type II trust criteria and aligned with ISO/IEC 27001 information security management standards.
• Air-Gapped Deployment: For regulated industries (banking, finance, government), we provide on-premise deployments where 100% of data remains inside your own private perimeter.

6. Your Rights under GDPR

If you reside in the European Economic Area (EEA), you possess comprehensive rights regarding your personal data:

• Right of Access: Request confirmation and copies of personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data from our active systems.
• Right to Restriction & Objection: Object to processing based on legitimate interests or request processing restrictions.
• Right to Data Portability: Obtain your account data in a structured, machine-readable JSON format.

To exercise any of these rights, email our Data Protection Officer at hi@SocialHeat.net.

7. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures and privacy controls:

• Right to Know: You may request the categories of personal information collected, sources, and business purposes.
• Right to Delete: You may request deletion of personal information collected directly from you.
• Right to Correct: You may request correction of inaccurate personal records.
• No Sale or Sharing of Personal Information: GenX LLC does not sell or share personal information for cross-context behavioral advertising as defined by California law.
• Non-Discrimination: We will not deny services, charge different prices, or provide a lower quality of service for exercising your CCPA rights.

8. Data Retention & Purging

Customer account data is retained for the active duration of the customer subscription plus a 90-day grace period following termination for export convenience. Public social data indexes are retained in accordance with social platform developer policies and automatically purged after specified lifecycle thresholds.

9. Cookies & Tracking Technologies

We use session and analytical cookies to ensure platform functionality, remember user preferences, authenticate sessions, and monitor performance. You can manage or disable cookie preferences via your browser settings at any time.

10. Contact GenX LLC

If you have questions, feedback, or legal inquiries concerning this Privacy Policy, please contact our legal and data protection team: