Last updated 18 July 2026

Privacy Policy

Social Tribbe ("we", "us", "our") provides an omnichannel social media management, CRM, and marketing automation platform ("the Service"). This policy explains what data we collect when you or your organization use the Service, why we collect it, and the choices you have. It applies to organization accounts, the people who use them, and the end customers those organizations communicate with through the Service.

1. Information we collect

Account & organization data. Name, email, phone number, password (stored as a salted hash, never in plain text), company name, and role, provided when you or your organization sign up.

Contacts & CRM data. When your organization uses the CRM, it may store information about its own customers or leads (name, email, phone, company, notes, deal history). We process this data on the organization's behalf and instructions - if you're one of those end customers, your own organization's privacy policy governs how they use your data; ours governs how we handle it as their processor.

Messages & calls. Content sent and received through connected channels (WhatsApp, SMS, Facebook, Instagram, X/Twitter, LinkedIn, TikTok), plus voice call recordings, transcripts, and metadata (duration, timestamps, caller ID) when call recording is enabled by the organization.

Payment & billing data. Card payments are processed directly by Paystack; we never receive or store full card numbers. We do store wallet balances, transaction references, invoices, and usage records (e.g. messages/minutes sent) needed to bill accurately.

Connected platform data. When an organization connects a third-party account (Meta, X, LinkedIn, TikTok, Google), we receive the access tokens and profile/page data needed to publish content, send messages, or authenticate sign-in, limited to what that platform's permission scopes actually grant.

Technical data. IP address, browser/device information, product usage analytics, and error data collected automatically via PostHog to keep the Service reliable and to understand how it's used.

2. How we use this data

  • To operate the Service: deliver messages, route calls, publish posts, run automations, and generate analytics.
  • To bill accurately for usage-based services (SMS, voice minutes, WhatsApp messages).
  • To provide customer support and respond to requests.
  • To detect, prevent, and investigate fraud, abuse, or security incidents.
  • To improve the Service's reliability and features.

We do not sell personal data, and we do not use organizations' customer data to train third-party AI models.

3. Who we share data with

We share data only with the service providers needed to run the platform, each bound by their own data-processing terms:

  • Africa's Talking - delivers SMS, voice calls, and airtime.
  • Meta, X, LinkedIn, TikTok - the social/messaging platforms your organization chooses to connect.
  • Paystack - processes card payments.
  • Amazon Web Services (AWS) - hosts our infrastructure and sends transactional email (SES).
  • PostHog - product analytics and error tracking.

We disclose data to law enforcement only when legally required to do so.

4. Meta Platform Data

Where an organization connects Facebook, Instagram, WhatsApp, or Threads, any data we receive from Meta ("Platform Data") is used solely to provide the features that organization enabled (e.g. publishing posts, sending/receiving messages) and is not used for any other purpose, shared with data brokers, or used for advertising. Platform Data is retained only as long as needed to provide the Service or as the connected organization configures, and is deleted on request - see Section 6.

5. Data retention

We retain account and messaging data for as long as an organization's account is active, plus a limited period afterward for legal, tax, and dispute-resolution purposes. Call recordings and message content are retained per the connected organization's own retention settings where configurable.

6. Your rights & data deletion

You can request access to, correction of, or deletion of your personal data by emailing [email protected]. If you connected to us via Meta (Facebook/Instagram/WhatsApp) and removed our app from your Meta account, we also receive an automated deletion request - track its status at /data-deletion-status.

7. International data transfers

Our infrastructure is hosted with AWS. Depending on the region selected, data may be processed outside the country where you or your organization are located. Where required, we rely on standard contractual safeguards from our providers for any such transfer.

8. Security

We use encryption in transit (TLS) for all traffic, bcrypt-hashed passwords, and access-controlled infrastructure. No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we work to protect data appropriate to its sensitivity.

9. Children's privacy

The Service is intended for business use and is not directed at children under 18.

10. Changes to this policy

We'll update the date at the top of this page when this policy changes and, for material changes, notify account owners by email.

11. Contact

Questions about this policy: [email protected] or +254 790 175 477.