Privacy policy

Who we are

SocialDiscovery.ai is operated by Social Discovery Ltd, registered in England and Wales under company number 11692769. Our registered office is 13 St. Swithin's Lane, 2nd Floor, London, England, EC4N 8AL. Social Discovery Ltd is the controller responsible for the personal information described here.

For privacy questions or requests, email info@socialdiscovery.ai.

This notice covers our public website, enquiries and current research prototype. The prototype currently runs locally; public application hosting has not yet been selected. We will update this notice when the service or its providers change.

Information we use and where it comes from

• Artist and brand research. Names, public professional or business information, and research measures we create through our own analysis of artist and brand content and activity. Our model uses 12 archetypes to understand creative behaviour.
• Meta audience measurement. Advertising-interest identifiers and names, markets, targeting specifications, estimated audience sizes and ranges, audience intersections, and derived planning indices. These come from the Meta Marketing API using an ad account we own or are authorised to access. The current reach-estimate workflow returns aggregate estimates, rather than a list of individual audience members.
• Integration information. Ad-account identifiers and API credentials needed to operate the authorised connection. These are not included in public research reports.
• Enquiries. Your contact details and the information you choose to send us, including privacy requests.
• Website visits. Page URLs and query parameters, referring pages, campaign and advertising-click identifiers, timestamps, and visitor and session identifiers. A name or reference supplied in a personalised link may be associated with that visit.
• Engagement and technical information. Time on pages and sections, scrolling, link clicks and destinations, tab visibility, print events and short excerpts of text copied from the page. We also collect browser and device information, screen and viewport settings, language, time zone, connection information and page performance.
• Network information. IP address and IP-derived country, city or region, coordinates, network, organisation and internet-service-provider information. IP-based coordinates are estimates and may not represent your physical location.

Why we use it

We combine our first-party creative-behaviour research with aggregate audience estimates to recommend relevant artist-brand partnerships and assess potential reach, audience relevance and expected effectiveness in particular markets. We cache and reuse estimates to reduce API calls and provide consistent benchmarks.

These outputs support media-planning decisions. They are estimates and research judgements, not observed campaign results or a statement about every person in an audience. The current service does not make decisions with legal or similarly significant effects on individuals.

We use website analytics to understand interest in our work and how the site is read, improve content and performance, and identify automated or abusive traffic. We use enquiry information to respond and manage our business relationships.

Our lawful bases

Where this involves personal data, our interests in professional cultural research, relevant partnership planning, understanding our website readership, maintaining the service and responding to business enquiries are the legitimate interests supporting these activities. You may object to processing based on legitimate interests by contacting us.

We use information where necessary to respond to your request before entering a contract or to perform a contract with you, and where necessary to meet a legal obligation. Where an activity requires consent, that consent must be obtained separately and can be withdrawn. This notice itself does not obtain consent.

Browser storage and website analytics

Our first-party analytics uses browser local storage and session storage to recognise repeat visits and sessions, remember attribution and measure engagement. This can associate visits over time. A basic page-view request is also made when JavaScript is disabled.

You can clear this site's browser storage or block storage and scripts through your browser. Clearing storage does not remove records already held on our server, and blocking scripts may still leave basic server or non-JavaScript visit records. To request deletion of stored information, use the instructions below.

Providers and sharing

Our public website is hosted by Hostinger. The website sends IP addresses to the ipwho.is geolocation service to obtain network and approximate-location information. Geolocation results are cached to reduce repeat requests.

We send selected interests, markets and targeting specifications to Meta to obtain audience estimates. Meta also processes information under its own privacy policy and applicable platform terms.

We do not sell personal information. Research reports use research measures and aggregate audience estimates; website visitor records and API credentials are not included in those reports. We do not send Meta Platform Data or app-user personal data to external AI providers.

We may disclose information where required by law or to establish, exercise or defend legal claims. Service-provider processing may take place outside the UK. Contact us for information about the processing locations and transfer arrangements relevant to your information. Future application and database hosting arrangements remain undecided and will be reflected here before deployment.

How long we keep information

Artist/brand research and stored Meta estimates: our selected retention period is 12 months from collection or creation. The prototype's automated deletion process has not yet been implemented; cache freshness and reuse periods do not themselves delete stored records. You may request deletion through the contact below.

Website analytics: the current server retention setting is 730 days. IP-geolocation cache entries normally remain for seven days before refresh or expiry. Browser identifiers remain until the relevant browser storage is cleared or expires. Separate hosting logs and backups may follow the hosting provider's retention arrangements.

Enquiries, integration records and legal records: we keep these for as long as needed to respond, maintain the authorised connection, meet applicable recordkeeping obligations or resolve a dispute. We remove credentials when they are no longer needed for the connection. Information required for an outstanding legal obligation or claim may need to be retained beyond a normal research period.

Your rights and data-deletion instructions

Depending on the circumstances, you may have rights to access, correct or erase your personal data, restrict processing, object to its use, or receive a portable copy. You may withdraw consent where we rely on it.

1. Email info@socialdiscovery.ai with the subject Data deletion request (or describe another privacy right you want to exercise).
2. Tell us which artist, brand, enquiry, Meta connection or website visit the request concerns. For website visits, an approximate date and page or a visitor identifier, if available, can help locate records. Do not send passwords or access tokens.
3. We may request information reasonably necessary to locate the records and verify your authority. We will explain the outcome, including any information we must retain and why. Personal data that we can identify and are required to erase will be removed from active records; any retained copies will be addressed as part of the request.

Removing an app connection through Meta stops future authorised access but does not itself delete records already stored by us. Please also contact us if you want those records assessed for deletion. Aggregate estimates that cannot identify an individual cannot be searched as a list of audience members.

You can raise a concern with us or complain to the UK's Information Commissioner's Office.

Changes to this notice

We will update this page as the service, providers or data practices change and show the latest update date above.