1. Who We Are
Socialee ("the Platform," "we," "us," or "our") is an AI-powered marketing automation service operated by:
- Malaysia: Gaman Group Sdn Bhd, a company incorporated in Malaysia
- Thailand: White Ball Company Co. Ltd, a company incorporated in Thailand
For enquiries regarding this Privacy Policy, contact us at: privacy@gaman.one
2. Scope of This Policy
This Privacy Policy applies to all users of the Socialee platform, website, and related services. It governs how we collect, use, store, and protect personal data in compliance with:
- The Personal Data Protection Act 2010 (PDPA) — Malaysia
- The Personal Data Protection Act B.E. 2562 (PDPA) — Thailand
- TikTok Platform Terms of Service and Developer Policies
3. Data We Collect
We collect the following categories of personal data:
- Account Information: Name, email address, business name, country
- TikTok Account Data: TikTok user ID, profile information, and access tokens (obtained via TikTok Login Kit with your consent)
- Facebook & Instagram Account Data: Facebook Page ID, Instagram Business Account ID, page access tokens, and profile information (obtained via Meta OAuth with your consent)
- Content Data: Video scripts, captions, hashtags, and other content generated using our platform
- Performance Data: Post metrics, engagement rates, reach, and follower analytics retrieved via TikTok Research API
- Usage Data: Platform activity logs, session data, IP address, device type, and browser information
- Communication Data: Messages and enquiries submitted to us via email or contact forms
4. How We Use Social Media APIs
Socialee integrates with TikTok, Meta (Facebook and Instagram), and other social media APIs to provide its core functionality. Specifically, we use:
- TikTok Login Kit: To authenticate your TikTok account securely
- TikTok Content Posting API: To publish content to your TikTok account on your behalf, only with your explicit authorisation
- TikTok Research API: To retrieve performance analytics for your own posts to power our improvement feedback loop
- TikTok Commercial Content API: To manage and disclose commercial or branded content where applicable
- Meta (Facebook) OAuth & Graph API: To authenticate your Facebook account, retrieve managed Pages, schedule and publish posts to Facebook Pages on your behalf
- Meta Instagram Graph API: To connect Instagram Business accounts linked to your Facebook Page, and publish Reels, posts, and stories on your behalf
We only access data that you have explicitly authorised across each platform. We do not access data from other users beyond what is permitted under each platform's API terms.
5. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: When you connect your TikTok account or authorise content posting
- Contract: To provide the services you have signed up for
- Legitimate Interests: To improve the platform, detect fraud, and ensure security
- Legal Obligation: To comply with applicable laws in Malaysia and Thailand
6. How We Share Your Data
We do not sell your personal data. We may share data with:
- TikTok: As required to fulfil API-based actions you authorise
- Meta (Facebook & Instagram): As required to fulfil API-based actions you authorise, including page publishing and analytics retrieval
- AI Service Providers: Including Anthropic (Claude API) for content generation — only anonymised content prompts are processed
- Cloud Infrastructure Providers: For hosting, storage, and platform operations
- Legal Authorities: Where required by applicable law in Malaysia or Thailand
All third-party service providers are contractually bound to protect your data in line with applicable privacy laws.
7. Data Retention
We retain your personal data for as long as your account is active or as required to provide services. Upon account deletion:
- Account and profile data is deleted within 30 days
- TikTok access tokens are revoked immediately
- Content and performance data is deleted within 90 days
- Anonymised aggregate analytics may be retained indefinitely
8. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal obligations)
- Withdrawal of Consent: Revoke your TikTok account connection at any time
- Data Portability: Request a portable copy of your data (Thailand PDPA)
- Objection: Object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@gaman.one. We will respond within 30 days.
9. Cookies & Tracking
We use essential cookies to operate the platform (session management, authentication). We may use analytics cookies to understand how users interact with our platform. You may disable non-essential cookies in your browser settings. We do not use third-party advertising cookies.
10. Data Security
We implement industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. However, no system is completely secure. If you suspect a data breach, contact us immediately at privacy@gaman.one.
11. Cross-Border Data Transfers
Your data may be processed in countries outside Malaysia and Thailand (including where our cloud and AI service providers operate). We ensure adequate protections are in place through contractual safeguards consistent with applicable PDPA requirements.
12. Children's Privacy
Socialee is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.
14. Contact Us
For any privacy-related enquiries or to exercise your rights:
- Email: privacy@gaman.one
- Malaysia: Gaman Group Sdn Bhd
- Thailand: White Ball Company Co. Ltd