1 2 3<!DOCTYPE html> 4<html> 5 6<head> 7 <meta charset="utf-8"/> 8 <title>What's Social Intents EU GDPR compliance - Social Intents Knowledge Base</title> 9 <meta name="viewport" content="width=device-width, maximum-scale=1"/> 10 <meta name="apple-mobile-web-app-capable" content="yes"/> 11 <meta name="format-detection" content="telephone=no"> 12 <meta name="description" content="The European Union General Data Protection Regulation (GDPR) is a regulation that aims at unifying EU member state data privacy regulations into a single regula"/> 13 <meta name="author" content="Social Intents"/> 14 <link rel="canonical" href="https://help.socialintents.com/article/83-whats-social-intents-eu-gdpr-compliance"/> 15 16 17 18 <meta name="twitter:card" content="summary"/> 19 <meta name="twitter:title" content="What's Social Intents EU GDPR compliance" /> 20 <meta name="twitter:description" content="The European Union General Data Protection Regulation (GDPR) is a regulation that aims at unifying EU member state data privacy regulations into a single regula"/> 21 22 23 24 25 26 <link rel="stylesheet" href="//d3eto7onm69fcz.cloudfront.net/assets/stylesheets/launch-1790408915649.css"> 27 28 <style> 29 body { background: #f8fafc; } 30 .navbar .navbar-inner { background: #ffffff; } 31 .navbar .nav li a, 32 .navbar .icon-private-w { color: #585858; } 33 .navbar .brand, 34 .navbar .nav li a:hover, 35 .navbar .nav li a:focus, 36 .navbar .nav .active a, 37 .navbar .nav .active a:hover, 38 .navbar .nav .active a:focus { color: #000000; } 39 .navbar a:hover .icon-private-w, 40 .navbar a:focus .icon-private-w, 41 .navbar .active a .icon-private-w, 42 .navbar .active a:hover .icon-private-w, 43 .navbar .active a:focus .icon-private-w { color: #000000; } 44 #serp-dd .result a:hover, 45 #serp-dd .result > li.active, 46 #fullArticle strong a, 47 #fullArticle a strong, 48 .collection a, 49 .contentWrapper a, 50 .most-pop-articles .popArticles a, 51 .most-pop-articles .popArticles a:hover span, 52 .category-list .category .article-count, 53 .category-list .category:hover .article-count { color: #585858; } 54 #fullArticle, 55 #fullArticle p, 56 #fullArticle ul, 57 #fullArticle ol, 58 #fullArticle li, 59 #fullArticle div, 60 #fullArticle blockquote, 61 #fullArticle dd, 62 #fullArticle table { color:#585858; } 63 </style> 64 65 <link rel="apple-touch-icon-precomposed" href="//d33v4339jhl8k0.cloudfront.net/docs/assets/589c78fadd8c8e73b3e9710e/images/65f868b6c7af9d69c480b313/blue-white-logo.png"> 66 <link rel="shortcut icon" type="image/png" href="//d33v4339jhl8k0.cloudfront.net/docs/assets/589c78fadd8c8e73b3e9710e/images/66043a0a33daf174e5b72698/favicon.png"> 67 <!--[if lt IE 9]> 68 69
69<script src="//d3eto7onm69fcz.cloudfront.net/assets/javascripts/html5shiv.min.js"></script>
69 70 71 <![endif]--> 72 73
73<script type="application/ld+json"> 74 {"@context":"https://schema.org","@type":"WebSite","url":"https://help.socialintents.com","potentialAction":{"@type":"SearchAction","target":"https://help.socialintents.com/search?query={query}","query-input":"required name=query"}} 75 </script>
75 76 77
77<script type="application/ld+json"> 78 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Social Intents Knowledge Base","item":"https://help.socialintents.com"},{"@type":"ListItem","position":2,"name":"Support & Policies","item":"https://help.socialintents.com/collection/273-support-policies"},{"@type":"ListItem","position":3,"name":"What's Social Intents EU GDPR compliance","item":"https://help.socialintents.com/article/83-whats-social-intents-eu-gdpr-compliance"}]} 79 </script>
79 80 81 82 <meta http-equiv='content-language' content='en-us'> 83<link rel="shortcut icon" href="https://www.socialintents.com/favicon-32x32.png">
84<script src="//www.socialintents.com/api/chat/socialintents.1.4.js#402881ca479973440147997a99b00000" async="async"></script>
84 85<style> 86#fullArticle a { 87 text-decoration: underline; 88} 89.underline { 90 text-decoration: underline; 91} 92 93footer {display:none;} 94 95#fullArticle p, #fullArticle ul, #fullArticle ol, #fullArticle li, #fullArticle div, #fullArticle blockquote, #fullArticle dd, #fullArticle table { 96 font-size: 16px; 97 } 98@media screen and (max-width: 768px) { 99 #main-content { 100 margin: 20px 0 0; 101 } 102} 103#sidebar .nav-list a { 104 font-size: 16px; 105 line-height: 26px; 106} 107 108#searchBar button { 109border: 1px solid #0E71EB; 110background-color: #0E71EB; 111} 112#searchBar button:hover { 113background: #0E71EB; 114} 115</style> 116<link rel="preconnect" href="https://fonts.googleapis.com"> 117<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> 118<link href="https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap" rel="stylesheet"> 119 120<!-- Google tag (gtag.js) -->
vendor: 64 bytes, lines 120-121
120 121<script async src="https://www.googletagmanager.com/gtag/js?id=
121G-SZCVBEC6LS
vendor: 13 bytes, lines 121-122
121"></script> 122
123<script> 124 // Initialize dataLayer and gtag function 125 window.dataLayer = window.dataLayer || []; 126 function gtag(){dataLayer.push(arguments);} 127 128 // Set default consent with regional overrides 129 gtag('consent', 'default', { 130 'ad_storage': 'denied', 131 'ad_user_data': 'denied', 132 'ad_personalization': 'denied', 133 'analytics_storage': 'denied', 134 'region': [ 135 // Europe 136 'AT','BE','BG','CH','CY','CZ','DE','DK','EE','ES','FI','FR','GR','HR', 137 'HU','IE','IS','IT','LT','LU','LV','MT','NL','NO','PL','PT','RO','SE', 138 'SI','SK', 139 140 // South America 141 'AR','BO','BR','CL','CO','EC','GY','PE','PY','SR','UY','VE', 142 143 // United States 144 'US' 145 ] 146 }); 147 148 // Initialize Google Analytics after consent config 149 gtag('js', new Date()); 150 gtag('config', 'G-SZCVBEC6LS'); 151</script>
151 152 153<!-- CookieScript banner (must have Consent Mode integration enabled in dashboard) -->
154<script type="text/javascript" charset="UTF-8" src="//cdn.cookie-script.com/s/a24e63a2a1ef4d1870fa6e1329911d5b.js"></script>
154 155 156<!-- Meta Pixel Code --> 157
157<script>
vendor: 435 bytes, lines 157-166
157 158 !function(f,b,e,v,n,t,s) 159 {if(f.fbq)return;n=f.fbq=function(){n.callMethod? 160 n.callMethod.apply(n,arguments):n.queue.push(arguments)}; 161 if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0'; 162 n.queue=[];t=b.createElement(e);t.async=!0; 163 t.src=v;s=b.getElementsByTagName(e)[0]; 164 s.parentNode.insertBefore(t,s)}(window, document,'script', 165 'https://connect.facebook.net/en_US/fbevents.js'); 166 fbq('init', '
1661140283836439828
vendor: 38 bytes, lines 166-168
166'); 167 fbq('track', 'PageView'); 168
168</script>
168 169 <noscript><img height="1" width="1" style="display:none" 170 src="https://www.facebook.com/tr?id=1140283836439828&ev=PageView&noscript=1" 171 /></noscript> 172 <!-- End Meta Pixel Code --> 173 174<style> 175#docsSearch{background: #f8fafc !important;border-bottom:none;} 176.category-list .category{background:#ffffff;border-radius:15px;} 177#docsSearch h1 {font-size:48px;font-weight:bold;} 178.container-fluid {max-width:1200px;} 179</style> 180 181</head> 182 183 <body> 184 185<header id="mainNav" class="navbar"> 186 <div class="navbar-inner"> 187 <div class="container-fluid"> 188 <a class="brand" href="https://www.socialintents.com"> 189 190 191 <img src="//d33v4339jhl8k0.cloudfront.net/docs/assets/589c78fadd8c8e73b3e9710e/images/6970e6886e3a834a4b3a61d0/socialintents-logo-80.png" alt="Social Intents Knowledge Base" width="230" height="75"> 192 193 194 195 </a> 196 197 <button type="button" class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> 198 <span class="sr-only">Toggle Navigation</span> 199 <span class="icon-bar"></span> 200 <span class="icon-bar"></span> 201 <span class="icon-bar"></span> 202 </button> 203 204 <div class="nav-collapse collapse"> 205 <nav role="navigation"><!-- added for accessibility --> 206 <ul class="nav"> 207 208 <li id="home"><a href="/">Home <b class="caret"></b></a></li> 209 210 211 212 <li id="start-here"><a href="/collection/260-start-here">Start Here <b class="caret"></b></a></li> 213 214 <li id="messaging-integrations"><a href="/collection/267-messaging-integrations">Messaging Integrations <b class="caret"></b></a></li> 215 216 <li id="ai-chatbots"><a href="/collection/317-ai-chatbots">AI Chatbots <b class="caret"></b></a></li> 217 218 <li id="install-customize-optimize"><a href="/collection/291-install-customize-optimize">Install, Customize, & Optimize <b class="caret"></b></a></li> 219 220 <li class="active" id="support-policies"><a href="/collection/273-support-policies">Support & Policies <b class="caret"></b></a></li> 221 222 <li id="best-practices"><a href="/collection/297-best-practices">
222Best Practices <b class="caret"></b></a></li> 223 224 225 226 227 </ul> 228 </nav> 229 </div><!--/.nav-collapse --> 230 </div><!--/container--> 231 </div><!--/navbar-inner--> 232</header> 233 <section id="contentArea" class="container-fluid"> 234 <div class="row-fluid"> 235 <section id="main-content" class="span9"> 236 <div class="contentWrapper"> 237 238 239 <article id="fullArticle"> 240 <h1 class="title">What's Social Intents EU GDPR compliance</h1> 241 242 <a href="javascript:window.print()" class="printArticle" title="Print this article" aria-label="Print this Article"><i class="icon-print"></i></a> 243 <p><span style="font-weight: normal;">The European Union General Data Protection Regulation (GDPR) is a regulation that aims at unifying EU member state data privacy regulations into a single regulation, enforced on the EU single market. This article describes the GDPR compliance status of Social Intents.</span></p> 244<p><img src="//d33v4339jhl8k0.cloudfront.net/docs/assets/589c78fadd8c8e73b3e9710e/images/5e28a5b22c7d3a7e9ae69c73/file-LTk2zx5fr8.png"></p> 245<p>If your company needs to ensure it is GDPR-compliant, it also needs to ensure its providers (ie. Social Intents) are also GDPR compliant. Social Intents is GDPR-compliant, and strictly enforces the regulation as to protect the user data we store. The list of our providers (ie. Data Processors) is available, and kept up to date, in our Data Processing Agreement (DPA).</p> 246<h3>Social Intents and GDPR</h3> 247<p>Here at Social Intents, we believe that strong privacy practices are good for both your customers and your business. We are committed to supporting your compliance with applicable data and privacy regulations, and to providing you with relevant, accurate information about Social Intents data and privacy practices. </p> 248<p><strong></strong>The GDPR regulation can be reduced to the following important points. For each point, we explain how Social Intents handles its compliance. If we did not answer your questions in this article, you can still email or chat with us. 249 <br> 250 <br> 251 Also, please note that all Social Intents data processor providers have been checked to be all GDPR-compliant ( <a href="https://aws.amazon.com/compliance/gdpr-center/?sc_ichannel=ha&sc_icampaign=acq_awsblogsb&sc_icontent=security-resources" target="_blank">Amazon Web Services</a>, <a href="https://support.stripe.com/questions/stripe-and-european-data-transfers">Stripe</a>, <a href="https://www.paypal.com/us/webapps/mpp/gdpr-readiness-requirements" target="_blank">PayPal</a>). 252 <br> 253 <br> 254 All Social Intents data is held on servers hosted in the United States. Servers are hosted by Amazon Web Services. 255 <br> 256 <br> 257 <strong>1. Data Controller</strong></p> 258<p><strong></strong>Social Intents, LLC acts as the data controller for the personal data collected and processed through our SaaS platform.</p> 259<p><strong>2. Awareness</strong> 260 <br> 261 <br> 262 All employees responsible of software development & infrastructure maintenance of Social Intents are fully aware of the GDPR requirements. 263 <br> 264 <br> 265 Also, code reviews are performed by the Data Protection Officers (as listed in this article), before any code deployment to the platform. This ensures security breaches and bad practices are not implemented by eg. a third party temporary contractor or a Social Intents employee, even if aware of GDPR requirements. 266 <br> 267 <br> 268 <strong>3. Types of Personal Data Collected</strong> 269 <br> 270 Social Intents stores data on 2 kinds of parties: 271 <br> 272 <br> 273 Our customers (ie. the operators using the Social Intents dashboard or Teams integrations replying to their users) 274 <br>
275 Our customers end-users (ie. the users of our customers) 276 <br> 277 <br> 278 Social Intents does not share, or resell, any kind of user data (whether data described in point 1 or 2 above). The data is not used for advertising (both 1 and 2) or analytics (on 2). Our business model is solely based on paid subscriptions (ie. the user is not the product). 279 <br> 280 <br> 281 <strong>3.1. Information held on our users</strong> 282 <br> 283 <br> 284 Social Intents collects account information for each user, including: 285 <br> 286 <br> 287 User first and last name, and profile picture 288 <br> 289 User payment details (includes invoicing information, eg. company address and country â the credit card number and payment information is stored by either Stripe or PayPal) 290 <br> 291 <br> 292 We don't log user activity, except for system logs including IP, user agents and time of connection. They are solely used for debugging and lawful purpose and retained maximum 1 week. 293 <br> 294 <br> 295 <strong>3.2. Information held on our users' end-users</strong> 296 <br> 297 <br> 298 Information held on our users' end-users include: 299 <br> 300 End-user email address 301 <br> 302 End-user phone number 303 <br> 304 End-user name 305 <br> 306 End-user message exchanges 307 <br> 308 End-user last activity date and time 309 <br> 310 <br> 311 The information stored on our users' end-users is solely the responsibility of our users (ie. the individual websites using Social Intents). Our users can optionally turn off the storing of transcripts, so that no end user data is store in our database and systems. It is the responsibility of our users to manage the data they hold in their Social Intents accounts, and to remove sensitive data if someone happens to share it with them. It is our responsibility to secure access to this data (ie. only website operators can access it and have the right to rectification and deletion). </p> 312<p><strong>3.3. Purposes of Data Processing</strong></p> 313<ul> 314 <li>Facilitating live chat communication between users and our customer support team.</li> 315 <li>Identifying users and providing personalized support.</li> 316 <li>Responding to inquiries, resolving issues, and delivering requested services.</li> 317 <li>Improving the functionality and user experience of our live chat service.</li> 318</ul> 319<p><strong>4. Data Processing Principles</strong></p> 320<p>We adhere to the following principles when processing personal data:</p> 321<ul> 322 <li>Lawfulness, fairness, and transparency: Personal data is processed lawfully, fairly, and transparently in accordance with GDPR requirements.</li> 323 <li>Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.</li> 324 <li>
324Data minimization: We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.</li> 325 <li>Accuracy: We take reasonable steps to ensure that personal data is accurate, complete, and up-to-date.</li> 326 <li>Storage limitation: Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.</li> 327 <li>Integrity and confidentiality: We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.</li> 328 <li>Accountability: We maintain records of data processing activities and take responsibility for compliance with GDPR requirements.</li> 329</ul> 330<p><strong>5. </strong><strong>Data Security Measures:</strong> We implement the following technical and organizational measures to ensure the security of personal data:</p> 331<ul> 332 <li>Encryption: Personal data is encrypted both in transit and at rest to prevent unauthorized access.</li> 333 <li>Access controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.</li> 334 <li>Regular security assessments: We conduct regular security assessments and audits to identify and address potential vulnerabilities.</li> 335</ul> 336<p><strong></strong> 337 <br> 338 <strong>6. Communicating privacy information</strong> 339 <br> 340 <br> 341 Social Intents customers and users privacy terms are clearly communicated in our <a href="https://www.socialintents.com/privacy.html">Privacy Policy</a>. 342 <br> 343 <br> 344 <strong>7. Individualsâ rights </strong> 345 <br> 346 <br> 347 Social Intents customers rights regarding to GDPR are considered and enforced, including: 348 <br> 349 <br> 350 Right to be informed: we clearly inform our users about the use that will be made of their data 351 <br> 352 Right of access: our users can access all their data, without restriction 353 <br> 354 Right of rectification: it's as simple as contacting us, we'll process all your rectification queries 355 <br> 356 Right of erasure: it's as simple as contacting us, we'll process all your erasure queries 357 <br> 358 Right to restrict processing: we don't process the data of our customers (and our customers end-u
358sers) 359 <br> 360 Right to data portability: our users may contact us anytime if they wish to get an export of their data 361 <br> 362 Right to object: we handle all requests on this matter from our users and users' end-users 363 <br> 364 Right not to be subject to automated decision-making including profiling: we don't do that (and never will) 365 <br></p> 366<p><strong>8. International Data Transfers</strong></p> 367<p>To facilitate international data transfers, we incorporate EU Standard Contractual Clauses (SCCs) into our contractual agreements with relevant parties involved in the processing of personal data. These SCCs ensure that adequate safeguards are in place for the protection of personal data transferred outside the European Economic Area (EEA) to countries that do not provide an adequate level of data protection.</p> 368<p><strong>9. Subject access requests </strong> 369 <br> 370 <br> 371 Social Intents replies to all access requests in under 2 weeks. We offer this free of charge for our customers. 372 <br> 373 <br> 374 <strong>10. Consent </strong> 375 <br> 376 <br> 377 Consent is provided by our users explicitly when the data consent checkbox is enabled on the pre-sales form. 378 <br> 379 <br> 380 Social Intents allows its customers to submit user data in an automated way, via a frontend JavaScript API and backend REST API, for instance assigning an email to a chat session, when the chat session user is already identified to their customer website account. This data must have been provided by the customer user in a consented way, as it will get propagated to Social Intents in an automatic way (if the customer implemented such API in their source code). 381 <br> 382 <br> 383 <strong>11. Children </strong> 384 <br> 385 <br> 386 Social Intents does not offer online services to children, due to the nature of the service provided (business-to-business). Thus, we did not identified it as relevant to control the age of users signing up for services. 387 <br> 388 <br> 389 Children might still be able to use the Social Intents chat services, from the website or apps of a Social Intents customer. To this extent, the Social Intents customer is responsible for checking against their own users and activities regarding children regulations. 390 <br> 391 <br> 392 <strong>12. Data breaches </strong> 393 <br> 394 <br> 395 Our team closely monitors any unauthorized system access, and has put in place multiple preventive measures to reduce the attack surface on our systems and services. 396 <br> 397 <br> 398 Security researchers and users can submit a security report to our email [email protected]. 399 <br> 400 <br> 401 Here are a few measures we take to reduce any attack surface: 402 <br> 403 Leverage Amazon Web Services infrastructure to maintain security throughout the app</p> 404<p>Aggressive use of firewalls and network isolation in our infrastructure </p> 405<p>We monitor any security flaw in any library we may use in our running backends, and patch them as soon as an update is issued </p> 406<p>Isolate data stores and sensitive backends on different servers </p> 407<p>Social Intents will notify their users of any data breach, 24h maximum after knowing about it and fixing the flaw. It is then the responsibility of our users to report this data-breach to their end-users in due time. 408 <br> 409 <br> 410 <strong>13. Data Protection Officers </strong> 411 <br> 412 <br> 413 Social Intents has designated a Data Protection Officer. You can contact us for details. 414 <br> 415 <br> 416 <strong>14. International </strong> 417 <br> 418 <br> 419 Social Intents, LLC is based in the United States.</p> 420<p>Address: </p> 421<p>Social Intents, LLC 422 <br> 423 Address: 4880 Lower Roswell Rd, Suite 165-112, Marietta, GA 30068 424 <br> 425 Email: [email protected] 426 <br> 427 Phone: 404-669-6609</p> 428 </article> 429 430 431 <section class="articleFoot"> 432 433 434 <time class="lu" datetime=2025-06-22 >Last updated on June 22, 2025</time> 435 </section> 436 437 </div><!--/contentWrapper--> 438 439 </section><!--/content--> 440 <aside id="sidebar" class="span3"> 441 442 443<form action="/search" method="GET" id="searchBar" class="sm" autocomplete="off"> 444 445 <input type="hidden" name="collectionId" value="68571984ffa535446584ee35"/> 446 <input type="text" name="query" title="search-query" class="search-query" placeholder="Search" value="" aria-label="Search" /> 447 <button type="submit">
448 <span class="sr-only">Toggle Search</span> 449 <i class="icon-search"></i> 450 </button> 451 <div id="serp-dd" style="display: none;" class="sb"> 452 <ul class="result"> 453 </ul> 454 </div> 455 456</form> 457 458 459 <h3>Categories</h3> 460 <ul class="nav nav-list"> 461 462 463 <li ><a href="/category/276-slack-setup-installation">Common Issues <i class="icon-arrow"></i></a></li> 464 465 466 467 <li ><a href="/category/277-slack-features">Integration Specific Fixes <i class="icon-arrow"></i></a></li> 468 469 470 471 <li class="active" ><a href="/category/278-slack-issues">Compliance & Privacy <i class="icon-arrow"></i></a></li> 472 473 474 </ul> 475 476 </aside><!--/span--> 477 </div><!--/row--> 478 <div id="noResults" style="display:none;">No results found</div> 479 <footer> 480 481 482<p>© 483 484 <a href="https://www.socialintents.com">Social Intents</a> 485 486 2026. <span>Powered by <a rel="nofollow noopener noreferrer" href="https://www.helpscout.com/docs-refer/?co=Social+Intents&utm_source=docs&utm_medium=footerlink&utm_campaign=Docs+Branding" target="_blank">Help Scout</a></span> 487 488 489 490 491</p> 492 493 </footer> 494 </section><!--/.fluid-container--> 495 496 497
497<script src="//d3eto7onm69fcz.cloudfront.net/assets/javascripts/app4.min.js"></script>
497 498
499<script> 500// keep iOS links from opening safari 501if(("standalone" in window.navigator) && window.navigator.standalone){ 502// If you want to prevent remote links in standalone web apps opening Mobile Safari, change 'remotes' to true 503var noddy, remotes = false; 504document.addEventListener('click', function(event) { 505noddy = event.target; 506while(noddy.nodeName !== "A" && noddy.nodeName !== "HTML") { 507noddy = noddy.parentNode; 508} 509 510if('href' in noddy && noddy.href.indexOf('http') !== -1 && (noddy.href.indexOf(document.location.host) !== -1 || remotes)){ 511event.preventDefault(); 512document.location.href = noddy.href; 513} 514 515},false); 516} 517</script>
517 518 519 </body> 520</html> 521 522
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.