Social Expert Privacy Policy

Effective date: November 9, 2026.

ForUsApps, LLC operates Social Expert at socialexpert.app and through its APIs and connected chat tools. Contact support@forusapps.com for privacy questions or requests.

Information we process

Google sign-in or email/password registration supplies the identity and email used to link your account, uploads, saved feedback, usage and subscriptions. We process the topics, briefs, audience country and display timezone you provide when requesting TikTok research. An audience country or timezone is a research choice, not a statement of your physical location.

When you explicitly start a video review, we process your video, included audio or speech, upload metadata, processing status and the resulting feedback. Selecting a file in our panel previews it locally before you start analysis. Attachments you send directly to a chat service are also handled by that service under its own policies. Upload only content you have permission to share, including permission from any client you represent.

Stripe processes website subscription payments. We receive customer and subscription identifiers, billing periods, invoices and payment-status information to administer access and support. We do not provide our own payment-card entry form.

We keep account, connection, usage and operational records to provide the service, apply allowances, investigate failures and prevent misuse. Our application request metrics include operation or tool category, outcome or status and elapsed time. Infrastructure providers also process the technical information needed to deliver and secure their services.

Purposes and service providers

We use information to authenticate you, answer your research requests, analyze drafts, retrieve saved feedback, manage allowances and subscriptions, provide support and protect the service. Uploaded videos are used for the analysis you request, not for training or improving AI models.

Providers used to deliver the service include Google for sign-in and Google Ads signup and purchase measurement; Supabase for authentication, password verification, backend functions and databases; Cloudflare for website delivery; AWS SES for authentication email and AWS-hosted ForUsApps services for media and analysis processing; OpenAI for AI processing; and Stripe for website billing. When you connect a chat service, it receives the account information, research and reports needed for your authorized requests. Its handling of conversations, attachments and returned results is governed by its own policies.

These services can process information in countries different from yours. This policy does not promise storage exclusively in your country or zero retention by every infrastructure provider. Contact us with questions about processing locations or applicable privacy safeguards.

Retention and deletion

Uploaded videos and saved reports have a 14-day retention period and are then deleted from the service. Download feedback you want to keep. This period does not set the lifetime of separate account, billing, security or usage records. We retain those records as needed to provide their associated functions, resolve disputes, prevent misuse and meet applicable obligations. Processor backups and information retained separately in your chat history are not the same as an active saved report; account deletion does not promise immediate erasure of every backup or third-party copy.

To prevent repeated free allowances, we retain protected keyed fingerprints derived from verified Google identity or confirmed email addresses and their lifetime usage while needed to enforce the lifetime free allowance. These records survive account deletion and contain no plaintext email, video or report. They are pseudonymous rather than anonymous. Contact us if you want this retention reviewed under applicable privacy rights.

Account settings include account deletion and connection controls. Disconnecting a chat service revokes that connection; it does not delete your Social Expert account or copies already in the chat service. Account deletion and subscription cancellation are separate operations. Billing records and media held by analysis infrastructure may require support to complete a deletion request.

Your choices and requests

Contact support@forusapps.com with the subject “Social Expert privacy request” and your account email to request access, correction, deletion, a copy of your information or another right available under applicable law. We may need to verify your identity. Do not send passwords, tokens or payment-card information. If a request cannot be fully fulfilled, we will explain the applicable limitation. You may also contact your local privacy regulator where that right applies.

Purchase measurement

Purchase measurement runs automatically. If you arrive through a Social Expert ad, we store an opaque ad-click reference in your browser for up to 30 days. We do not install OpenAI's browser tracking pixel. When Stripe confirms your initial paid checkout, our server can send OpenAI the purchase amount, currency, event time, a deduplication ID and the ad-click reference to measure the ad and optimize our campaign. These events do not include your email, phone number, IP address, video, research brief or chat content. OpenAI handles received measurement data under its applicable policies; our local retention limits do not set OpenAI's retention.

For Google Search advertising, we use the Google tag to link eligible ad visits to verified new account signups and confirmed initial Stripe purchases. A signup event is sent only after our server confirms a supported, newly created account; returning logins, unconfirmed registrations and signup-button clicks do not count. Signup events contain an opaque hashed deduplication ID and a new-customer flag, with no assigned revenue or account contact details. As part of automatic measurement, the tag can use advertising cookies and receive the page address, referring site, browser/network information (including the IP address used to contact Google), ad-click identifiers, and confirmed purchase amount, currency and a hashed transaction ID. We remove sign-in callback parameters from measurement context and do not configure enhanced conversions, upload email addresses or phone numbers, or enable advertising personalization. Our Google tag cookie configuration requests a 30-day lifetime without extending it on each visit; browser and provider behavior can affect storage. Google handles received data under its own policies.

To verify a returning checkout, we keep its opaque reference in this browser for up to seven days, scoped to the signed-in account. Our authenticated server checks that the checkout belongs to that account and verifies its paid Stripe receipt. A checkout click or a success-page URL alone never creates a purchase event. The browser sends a Google purchase only after that verification; this may miss purchases when the buyer does not return, blocks the tag, or uses another browser. We retain a local hashed transaction marker for up to 30 days to avoid repeated sends, and Google receives the same transaction ID for deduplication. For signups we also retain an opaque local deduplication marker for up to 30 days. Activity, attribution and advertising measurement run automatically; there is no in-app measurement toggle. Browser Global Privacy Control and previously saved measurement preferences do not disable collection. Browser storage restrictions, blocked scripts and network failures can still prevent delivery. Contact support for privacy requests.

Our server stores an eligible checkout reference until its original 30-day click window expires. Delivery is attempted for no more than seven days after the purchase; the outbox copy of the click reference is cleared after delivery, withdrawal or terminal failure. Minimal delivery records are removed within 30 days. We retain your latest withdrawal timestamp with your account to reject older in-flight attribution requests. Provider credentials remain on our server.

Website analytics

We use first-party analytics to understand which entry pages, referring websites and campaigns lead to signups, chat connections, research, completed video reviews and paid subscriptions. Browser records contain a sanitized entry path, an allowed page section, campaign source/medium/name/content tags and an external referring hostname. We do not collect complete URLs, URL search text, auth codes, emails, raw IP addresses, user-agent strings, research briefs, videos or chat content in these analytics records. Use campaign tags for channel labels, not personal information. A daily keyed network hash is used only to limit abuse and is removed within two days. Signed-in activation observations are collected automatically, independently of channel-attribution and advertising measurement preferences. They record which tool was opened, whether research started, a result was displayed, an available copy/source/expand action was used, or a request failed. They contain bounded tool/action labels, deduplication and request IDs, event timestamps and request duration, rather than research contents or error details. These observations are retained for up to 30 days and removed on account deletion or a completed authenticated deletion request. We retain the latest withdrawal timestamp with the account to reject older in-flight observations. Browser actions are observational signals; completed research and paid subscriptions are verified separately from product and billing records.

We also record clicks on an article’s Claude connection link using the article path and a random visit reference. When you subsequently sign in in the same browser, authenticated ownership checks can link the first and latest pending article clicks to your account so we can compare connections, tool results and return usage by article. These click records follow the visit retention rules below. Blocked storage or a different browser/device can leave clicks unlinked.

A browser visit reference lasts up to 30 days and is associated with your account only after verified sign-in. Unlinked visit records are deleted after 30 days and linked attribution after 90 days. Separate product and billing records follow their existing retention rules. Channel attribution and signed-in activity are collected automatically. Existing browser preference records do not control new collection, and we do not restore attribution records already deleted. Contact support to request deletion or exercise applicable privacy rights. These records do not alter your account, access or billing. We use Supabase to store these records and do not send this analytics feed to an advertising provider.

Website session replay

We use Microsoft Clarity to reconstruct website interactions, including page content, clicks, scrolling, navigation, device/browser information and errors, so we can understand signup and first-use difficulties. Page text and displayed research content can be visible in recordings. Clarity automatically masks form inputs and dropdowns. We exclude authentication callback URLs, account and checkout-return pages, private video/report screens and marked test traffic from this integration; these exclusions can leave gaps in a journey.

For signed-in website sessions we can send an opaque account identifier, entry article and campaign labels, tool categories and action/outcome event names to find related sessions. We do not configure email addresses or names as custom identifiers or tags, or record the contents of Claude conversations. Session replay is separate from our private backend activity records, and a recorded click is not proof of completed research or payment.

Microsoft processes this information under its [Privacy Statement](https://privacy.microsoft.com/en-us/privacystatement). Clarity uses cookies where permitted by its settings and regional requirements; regional consent restrictions, blocked scripts and browser storage controls can limit recording and linking. We do not send a consent-granted signal on your behalf. Ordinary recordings are available for up to 30 days. Individual Clarity recordings cannot currently be deleted separately through our integration; contact support for privacy requests and we will explain the provider's available deletion options. Clarity information is not covered by the account-deletion cascade for our own Supabase records.

Connected chat tool activity

We automatically record account-linked activity for Social Expert tools called through connected chat services. These records include the tool requested, timestamps, coarse client category, connection identifier, completion status, duration, result count and selected bounded tool parameters, such as audience market, display timezone, topic categories, selected trend or sound identifiers, or up to 500 characters of a keyword or hashtag request. Common email addresses, links, phone-like numbers and credential patterns are redacted before storage; redaction may not identify every personal detail. Avoid including sensitive information in research requests.

These are tool-call observations, not a copy of your full Claude, ChatGPT or other chat conversation. We cannot see messages that are not sent to our tools, prove that the chat service displayed a response, or reliably infer why someone stopped. Tool validation failures before a call starts may not appear in the account timeline. We use these records to diagnose friction and understand first useful results, return usage and subscription conversion by acquisition channel. Successful research and payments remain independently verified by product and billing records.

Activity is stored privately in Supabase, available only through authorized administrative access, and retained for up to 30 days with daily cleanup. Account deletion removes these activity records. We do not send this activity feed, request parameters or conversation contents to advertising providers. The separate website analytics section describes browser observations, which do not include research request contents.

Browser storage and security

We use browser storage to maintain your authenticated session, complete sign-in and connection redirects, and avoid repeating an active report handoff. Protect access to your browser, email inbox and sign-in credentials. The service uses HTTPS and account-scoped access controls; no service can guarantee absolute security.

Audience and changes

Social Expert is intended for people aged 18 or older and is not directed to children. Contact us if you believe a child has provided information so we can investigate and handle it appropriately.

We will publish policy updates here with a revised effective date. For material changes, we will provide notice through the service before the change takes effect where required. Privacy contact: support@forusapps.com.