Privacy Policy

This policy explains what information Guard My Social collects, how we use it, who we share it with, and what rights you have over your data.

Effective Date: June 26, 2026  |  Last Updated: June 26, 2026

Guard My Social ("Guard My Social," "we," "us," or "our") is a product of Crafted Visions Ltd. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

If you have questions about this policy, contact us at info@guardmysocial.com.

1. Information We Collect

1.1 Information You Provide Directly

  • Account information: When you create a Guard My Social account, we collect your email address and a password (stored as a one-way cryptographic hash — we never store your plaintext password).
  • Waitlist registration: If you join our waitlist, we collect your email address solely to notify you when the Service launches.
  • Contact form submissions: If you contact us, we collect your name, email address, and the content of your message.
  • Reports you file: When you report an account through the Service, we collect the reported account identifier, the platform it belongs to, your selected report category, and any optional description you provide. Your identity as the reporter is stored internally and is never disclosed to the reported party.

1.2 Information We Collect Through Platform Connections

When you connect a social media account to Guard My Social via OAuth, we receive access tokens and the permissions you authorize. Depending on the permissions granted, we may access:

  • Comments, posts, and interactions on your connected accounts (read-only where not acting on your behalf)
  • Account identifiers of accounts that interact with yours
  • Live broadcast chat streams (when live broadcast protection is enabled)

We do not store the full content of comments or posts beyond what is necessary to perform behavioral analysis and generate alerts. Raw platform content is processed and not retained in its original form longer than necessary for analysis.

1.3 Behavioral Analysis Data

We build and maintain behavioral profiles of external accounts that interact with your connected social media accounts. These profiles contain:

  • Platform account identifiers (not personal names)
  • Interaction frequency, timing, and pattern scores
  • Behavioral classification scores
  • Flag and report history associated with the account

Behavioral profiles of external accounts are used solely to provide the protection features of the Service.

1.4 Threat Registry Data

The Guard My Social Threat Registry is a shared database containing anonymized behavioral fingerprints of flagged accounts. Data contributed to the Threat Registry includes platform account identifiers and behavioral classification scores. The Threat Registry does not contain personally identifiable information about Guard My Social users — only identifiers of external accounts that have been flagged.

1.5 Automatically Collected Information

  • Device information: Device type, operating system, app version.
  • Usage information: Features used, pages visited within the app, alert interactions.
  • Log data: IP addresses, access times, error logs. Retained for a maximum of 90 days.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Detect, analyze, and alert you to threats targeting your social media accounts
  • Build and maintain behavioral profiles of external accounts that interact with your accounts
  • Contribute anonymized threat data to the shared Threat Registry to protect all users
  • Process and evaluate reports you file
  • Detect and prevent abuse of the reporting system (false reporting patterns)
  • Send you alerts, notifications, and account communications
  • Respond to your inquiries and support requests
  • Improve the Service, including improving AI classification accuracy
  • Comply with legal obligations
  • Enforce our Terms of Service

We do not sell your personal information. We do not use your information for advertising purposes. We do not share your information with advertisers.

3. Information Sharing and Disclosure

3.1 We Do Not Share Your Identity as a Reporter

If you report an account through Guard My Social, your identity as the reporter is never disclosed to the reported party, to the social media platform, or to any other third party, except as required by law (see Section 3.4).

3.2 Service Providers

We may share information with trusted third-party service providers who assist in operating the Service — including cloud infrastructure, database hosting, and analytics providers. These providers are contractually bound to use your information only to provide services to us and to protect your information with at least the same level of security we apply.

3.3 Anonymized Threat Registry Data

Aggregated, anonymized threat data (platform account identifiers and behavioral scores, with no user-identifying information) is shared across the Guard My Social user network via the Threat Registry. This sharing is the mechanism that makes community-wide protection possible. No personally identifiable information about Guard My Social users is included in Threat Registry data.

3.4 Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to:

  • Comply with a legal obligation, court order, or valid legal process
  • Protect the rights, property, or safety of Guard My Social, our users, or the public
  • Detect, prevent, or address fraud, security, or technical issues
  • Respond to emergencies involving risk to life

Where legally permitted, we will notify affected users of such disclosures.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and a prominent notice on our website before your information becomes subject to a different privacy policy.

4. Data Retention

  • Account data: Retained for the life of your account plus 30 days after deletion.
  • Alert and action logs: Retained for 2 years to support review, appeals, and legal compliance. You may request earlier deletion subject to legal hold requirements.
  • Behavioral profiles of external accounts: Retained as long as necessary for protection purposes. Profiles with no activity for 24 months are aged and their scores reduced.
  • Threat Registry entries: Retained indefinitely but aged (scores reduced) for entries with no corroborating activity. Entries under active legal investigation are subject to legal hold.
  • Waitlist data: Email addresses on our waitlist are deleted within 30 days of the Service launch or upon your request.
  • Log data: Maximum 90 days.

5. Children's Privacy (COPPA)

Guard My Social is designed to protect children online, including through features specifically built for minor accounts and parental oversight. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

  • Guard My Social accounts may only be created by individuals 13 years of age or older.
  • Minor users (ages 13-17) may have accounts created and managed by a parent or guardian on their behalf through our Family plan.
  • We do not knowingly collect personal information from children under 13 without verifiable parental consent.
  • If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly.
  • Parents and guardians who believe we have inadvertently collected information about a child under 13 should contact us immediately at info@guardmysocial.com.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

You may request a copy of the personal information we hold about you. We will provide this in a commonly used, machine-readable format where technically feasible.

6.2 Correction

You may request correction of inaccurate or incomplete personal information.

6.3 Deletion

You may request deletion of your personal information. We will honor deletion requests subject to our retention obligations (Section 4) and legal hold requirements. Note that deleting your account does not automatically delete your contributions to the anonymized Threat Registry, which contain no personally identifying information.

6.4 Withdraw Consent / Disconnect Accounts

You may disconnect any connected social media account at any time through the app settings. Disconnecting an account revokes our access token and stops all monitoring of that account. You may also revoke access directly through each platform's app settings.

6.5 Opt Out of Non-Essential Communications

You may opt out of marketing and non-essential communications at any time by following the unsubscribe link in any email or by contacting us. You cannot opt out of essential service communications (such as security alerts about your account).

6.6 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination. To exercise these rights, contact us at info@guardmysocial.com.

6.7 EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation including the rights of access, rectification, erasure, restriction of processing, data portability, and to object to processing. Our legal basis for processing personal data is performance of a contract (providing the Service), legitimate interests (security and fraud prevention), and consent where applicable. To exercise your rights, contact us at info@guardmysocial.com.

To exercise any of your rights, contact us at info@guardmysocial.com. We will respond within 30 days.

7. Security

We implement and maintain reasonable technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, and destruction. These include:

  • Encryption of data in transit (TLS) and at rest
  • Access controls limiting employee access to personal data on a need-to-know basis
  • Regular security reviews and assessments
  • OAuth tokens stored encrypted
  • Passwords stored as one-way cryptographic hashes

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

8. Third-Party Platforms and Links

The Service connects to third-party social media platforms (Instagram, Facebook, TikTok) via their official APIs. Your use of those platforms is governed by their respective privacy policies and terms of service. Guard My Social is not responsible for the privacy practices of any third-party platform.

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on our website at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:

Guard My Social / Crafted Visions Ltd
Email: info@guardmysocial.com
Website: guardmysocial.com

We will respond to all privacy inquiries within 30 days.