Privacy Policy — GSocial

1. Introduction

GSocial is an AI-powered social media management platform operated by G6 Labs Asia Sdn. Bhd. (Company Registration No. [Reg. No.]), a company incorporated in Malaysia (‘we’, ‘us’, ‘our’). Our registered business address is [Registered Address], Malaysia.

This Privacy Policy explains how we collect, use, store, disclose, and protect information about you when you use the GSocial platform, website (gsocial.asia), mobile applications, APIs, and related services (collectively, ‘Services’).

This Policy applies to all users of GSocial, including agency administrators, team members, client-side users, and any individual who accesses the platform on behalf of a business. If you use GSocial on behalf of an organisation, you represent that you have authority to bind that organisation to this Policy.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA) and any applicable subsidiary legislation.

2. Information We Collect

2.1 Account & Registration Information

When you register for a GSocial account or create an Agency Workspace, we collect:

Full name and professional title
Business email address and phone number
Company or agency name and registered address
Billing information (processed securely via our payment processor; we do not store full card details)
Username and encrypted password
Country, time zone, and language preferences

2.2 Social Media Platform Data

To provide scheduling, publishing, and analytics services, we access data from connected social media platforms (Facebook, Instagram, TikTok, LinkedIn, X, Threads) on your behalf, including:

Platform access tokens and credentials (stored in encrypted form)
Page, profile, and account information from connected platforms
Content you create, schedule, or publish through GSocial
Engagement and analytics data returned by platform APIs
Aggregated audience demographic data (as provided by platform APIs)

Access to platform data is governed by each platform's terms and API policies. We access only the permissions you explicitly grant.

2.3 Usage & Technical Data

We automatically collect certain technical and usage information when you interact with GSocial:

IP address and approximate geolocation (country/city level)
Device type, operating system, and browser version
Session duration, pages visited, features used, and navigation paths
Error logs, crash reports, and performance diagnostics
API request logs and response data

2.4 Content & Communications Data

We collect content you create, upload, or transmit through the Services, including:

Social media captions, images, videos, and creative assets uploaded for scheduling
AI Caption Writer inputs, prompts, and generated outputs
Approval comments, internal notes, and workflow messages
Support tickets and communications with our team
Survey responses and product feedback

2.5 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to maintain session state, personalise your experience, and gather analytics. Cookie preferences are manageable through your browser settings. Our Cookie Policy is available at gsocial.asia/cookies.

3. How We Use Your Information

3.1 Performance of Contract

To create and manage your account and Agency Workspace
To provide scheduling, publishing, and analytics services
To process payments and issue invoices
To connect to and operate integrations with social media platforms
To deliver AI-generated captions and content recommendations
To manage approval workflows and team collaboration features

3.2 Legitimate Interests

To improve, maintain, and develop platform features and performance
To detect, prevent, and investigate fraud, abuse, or security incidents
To generate anonymised analytics for product research
To send service-related communications, updates, and security alerts
To enforce our Terms and Conditions and protect our legal rights

3.3 Consent

To send marketing emails, newsletters, and promotional communications (you may withdraw consent at any time via the unsubscribe link)
To use non-essential cookies (managed via our Cookie Consent banner)
To use testimonials or case studies with your explicit permission

3.4 Legal Obligation

To comply with applicable Malaysian law, including the PDPA 2010
To respond to lawful requests from regulatory authorities or courts
To maintain records as required by accounting and tax regulations

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share information in the following limited circumstances:

4.1 Service Providers & Sub-Processors

We engage trusted third-party providers to operate our infrastructure, process payments, and deliver services. These providers are contractually obligated to process data only for specified purposes. Key categories include cloud hosting, payment processors (PCI-DSS compliant), email delivery, customer support, and error monitoring platforms.

4.2 Social Media Platforms

When you publish content via GSocial, data is transmitted to the relevant platform API. This is governed by that platform's own privacy policies, which we encourage you to review.

4.3 Within Your Organisation

Data shared in an Agency Workspace is visible to authorised users based on role permissions set by the account administrator. We are not responsible for internal data access decisions made within your organisation.

4.4 Legal & Safety Disclosures

We may disclose information where required by law, court order, or regulatory authority, or where reasonably necessary to protect the safety, rights, or property of GSocial, users, or the public.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your data may transfer to a successor entity. Affected users will be notified in advance where required by law.

5. Data Retention

We retain personal data for as long as your account is active or as necessary to provide the Services. Key retention periods:

Account data: retained for the duration of your subscription and for 12 months following account closure
Billing and transaction records: retained for 7 years in accordance with Malaysian financial regulations
Published content and media: retained for 24 months post-publication unless earlier deletion is requested
Support and communications records: retained for 3 years
Usage logs: retained for 12 months in identifiable form; aggregated data may be retained indefinitely

Upon account closure or verified deletion request, we will delete or anonymise your personal data within 30 days, subject to legal retention obligations.

6. Data Security

We implement industry-standard technical and organisational security measures, including:

Encryption of data in transit using TLS 1.2 or higher
Encryption of sensitive data at rest, including access tokens and credentials
Role-based access controls and least-privilege principles for internal staff
Regular security audits and vulnerability assessments
Multi-factor authentication available for all accounts
Incident response procedures and breach notification protocols

No method of internet transmission or electronic storage is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

7. International Data Transfers

GSocial is operated from Malaysia. Your data may be processed on servers in Malaysia and, where sub-processors are engaged, in other jurisdictions including Singapore and the United States. Where data is transferred outside Malaysia, we implement appropriate safeguards including contractual clauses and data processing agreements with sub-processors.

8. Your Rights Under the PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the following rights:

Right of Access — to request a copy of the personal data we hold about you.
Right of Correction — to request correction of inaccurate or incomplete data.
Right to Withdraw Consent — to withdraw consent for consent-based processing at any time.
Right to Cease Processing — to request that we cease or limit processing where it causes damage or distress.
Right to Complain — to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 21 days. Identity verification may be required before processing requests.

9. Children's Privacy

GSocial is a professional B2B platform intended for users aged 18 and above. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with data, please contact [email protected] and we will take prompt steps to delete such information.

10. Third-Party Links & Integrations

GSocial may link to or integrate with third-party services. This Privacy Policy applies solely to data processed by GSocial. We are not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of any third-party services you connect through GSocial.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and/or a prominent notice within the GSocial platform at least 14 days before changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy. The current version is always available at gsocial.asia/privacy.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy, please contact:

Data Controller: G6 Labs Asia Sdn. Bhd.

Privacy Email: [email protected]

General Enquiries: [email protected]

Website: gsocial.asia/privacy

Effective Date: 1 June 2025

This Privacy Policy was produced by G6 Labs Asia Sdn. Bhd. for GSocial (gsocial.asia). Version 1.0 — June 2025.