Privacy Policy

1. What SocialShield Does

SocialShield is a social media post analyzer. Its single purpose is to analyze text you provide — either by typing it into the web app or through the Chrome extension — and return a viral potential score, a risk level, and an AI-generated interpretation.

The Chrome extension injects a "Analyze" button into compose boxes on supported social platforms. When you click it, the text in the compose box is sent to our API for analysis. No other data is accessed or transmitted.

2. Data We Collect

Web App

• Post text you submit for analysis
• Analysis results (viral score, risk level, interpretation) stored to your account history if you're signed in
• Account data if you create an account: email address, bcrypt-hashed password
• Usage counts to enforce free tier limits
• Anonymous session data for users without accounts (rate limiting)

Chrome Extension

• Post text from the compose box you explicitly click "Analyze" on — sent to our API, not stored locally beyond the active session
• The extension does not read your browser history, other tabs, cookies, or any content outside the compose box you activate it on
• The extension does not collect your identity or social media credentials
• No data is stored on-device via chrome.storage in the current version

3. How We Use Your Data

• Post text is sent to our AI API (hosted infrastructure) to generate analysis results
• Analysis results may be stored in your account history to let you review past analyses
• Email addresses are used only for account authentication — no marketing without explicit opt-in
• We may use aggregated, anonymized usage patterns to improve the service

We do not sell your data. We do not share your post content with third parties except as required to operate the service (e.g., our AI inference API).

4. Data Retention

• Signed-in users: Analysis history is retained until you delete your account or request deletion
• Anonymous analyses: Not stored beyond the HTTP response
• Extension session data: Cleared when the browser tab is closed
• Account data: Retained until account deletion, then purged within 30 days

5. Permissions (Chrome Extension)

The SocialShield extension requests the following permissions:

• activeTab — required to detect which social media platform you're on and show the extension status in the popup
• Host permissions for Twitter/X, LinkedIn, Facebook, Instagram — required to inject the "Analyze" button into compose boxes on these platforms
• Host permission for socialshield.polsia.app — required to send post text to our analysis API and receive results

These are the minimum permissions required for the extension to function. No other permissions are requested.

6. Security

• All data is transmitted over HTTPS
• Passwords are hashed with bcrypt — we never store plaintext passwords
• Our database uses parameterized queries to prevent SQL injection
• We do not store payment card data — payments are processed by Stripe

7. Third-Party Services

We use the following third-party services that may process data on our behalf:

• Neon PostgreSQL — database hosting (your analysis history and account data)
• Render — web hosting and application server
• Polsia AI proxy — routes requests to AI inference infrastructure for post analysis
• Stripe — payment processing for premium subscriptions (we do not store card data)
• Meta Pixel (web app only) — anonymous analytics for understanding user flow

8. Your Rights

You can:

• Request a copy of your stored data
• Request deletion of your account and all associated data
• Opt out of any future email communications
• Uninstall the Chrome extension at any time — it leaves no persistent data on your device

To exercise any of these rights, email privacy@polsia.app.

9. Children's Privacy

SocialShield is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data to our service, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as the product evolves. Material changes will be noted at the top of this page with an updated effective date. Continued use of SocialShield after changes constitutes acceptance of the revised policy.