Privacy Policy

1. General

This Privacy Policy (the “Policy”) governs the processing and protection of information a User provides when using the Social Graphs website, Telegram bot, and related services (the “Service”).

By using the Service, the User agrees to this Policy. If the User does not agree, they must stop using the Service.

2. Information we collect

The Service may collect the minimum information needed to operate it, including:

• account identifiers, such as a login, email address, ID, username, and other account details;
• technical information, such as an IP address and browser, device, and operating system details;
• the User’s interaction history with the Service, including actions and requests.

The Service does not require passport details, identity documents, photographs, or other personal information except what is minimally necessary to operate it. A User may choose to upload content or request processing of profile data; those details are described in the additional provisions below.

3. Use of information

The Administration uses collected information solely to:

• operate the Service and its features;
• communicate with the User, including notices and support;
• analyze and improve the Service.

Within these purposes, operating the Service includes authentication, account and session management, report generation, project storage, payment processing, and abuse prevention; communication includes support replies and operational notices; analysis and improvement include diagnostics and performance monitoring.

4. Sharing information with third parties

The Administration does not share collected data with third parties unless required by law, necessary to fulfill obligations to the User (including payment systems and Service infrastructure), or authorized by the User.

When a User connects a third-party service or creates a public report link, this is treated as the User’s request for the data exchange or report access necessary for that feature.

Infrastructure and payment providers receive only the data needed to provide the relevant service and may use it only to fulfill their obligations to the Administration.

5. Data storage and security

Data is stored for the period needed to achieve the purposes of processing.

The Administration takes reasonable measures to protect data but cannot guarantee absolute security when information is transmitted over the internet.

6. Disclaimer

The User understands and agrees that transmitting information over the internet involves risks.

To the extent permitted by applicable law, the Administration is not responsible for loss, theft, or disclosure of data caused by third parties or the User.

7. Changes to this Policy

The Administration may change this Policy without prior notice. The current version is published on the website.

Continued use of the Service after changes are published means the User accepts the revised Policy.

Additional provisions from the current version

Who we are

Social Graphs is a software project operated by an independent developer team (the "Operator").

We are not a registered business entity in any particular country at this time. You can contact us using the details in the Contact section.

What the Service does (high-level)

Social Graphs is a tool for visual and analytical work with graphs (networks):

• Social network graph reports (e.g., "ego graphs") built from social profile data (e.g., VK and Instagram) and their connections (friends/followers/subscriptions), including visualizations, clustering, and metrics.
• A graph editor where you can upload your own graph files, create graphs, modify nodes/edges, and save versions.
• Optional sharing features (e.g., share links) depending on the product configuration.

Definitions

• "Account Data" means information associated with your account (e.g., email, authentication identifiers).
• "Source Data" means data you ask us to process from third-party sources (e.g., social networks) or data you upload (e.g., a graph file).
• "Report" means the output produced by the Services (e.g., a generated interactive graph and analytics).
• "User Content" means content you submit to the Services, including links you provide, graph files, notes, labels, comments, configuration settings, and any text you enter.

Information we collect

We may collect information about you and how you use the Services.

Information you provide directly

• Account and profile information: email address, username, hashed password (if you register by email), and optional profile settings.
• Telegram information (if you use the Telegram bot): Telegram user identifier (e.g., tg_id), username (if available), and bot interaction metadata.
• Third-party authentication data (if you use OAuth or similar): limited information from the identity provider (for example, an ID, profile name, avatar URL), and an access token if required to perform the requested function.
• Support and communications: the content of messages you send to us (e.g., support requests, bug reports).

Source Data you ask us to process (social networks and uploads)

When you request a report by providing a social profile link or otherwise instructing the Services to analyze a profile, or when you upload a graph file, we may process Source Data that can include (depending on the platform, your permissions, and the profile’s settings):

• Profile identifiers, names, usernames/handles, profile photos/avatars, bios/descriptions.
• Social connections (e.g., friend/follow relationships), mutual connections, and structural network data (nodes/edges).
• Publicly visible metrics (e.g., counts), and metadata available through the platform or your authorized access.
• Any other attributes that are included in your uploaded file or publicly available/authorized data you instruct the Services to fetch.

IMPORTANT: Source Data may include personal data of people who are not our users ("third parties"). You are responsible for ensuring you have a lawful basis and the necessary rights/permissions to instruct us to process Source Data (see the Third-Party Data section).

Automatic data (collected when you use the Services)

• Log data and device data: IP address, timestamps, pages/actions, browser type, operating system, language, and error logs.
• Usage data: feature usage, performance metrics, and diagnostics.
• Approximate location derived from IP (not precise GPS unless you explicitly provide it).

Cookies and similar technologies

We may use cookies and similar technologies for login, security, preferences, and analytics. You can control cookies through your browser settings. If you disable cookies, parts of the Services may not function.

If you maintain a separate cookie notice page, you may reference it here:

Payment and transaction data (crypto)

If you purchase credits, reports, or subscriptions using cryptocurrency (directly or through a payment processor), we may process:

• Transaction metadata (amount, currency/network, timestamp, transaction hash).
• Wallet addresses involved in the payment (note: blockchain records are public by design).
• Internal purchase records, credit balance, and entitlement status.

We do not collect or store your private keys or seed phrases.

Legal bases (where applicable)

Where required by applicable law (such as the EEA/UK GDPR), we process personal data under one or more of these bases:

• Contract: to provide the Services you request.
• Legitimate interests: to secure, operate, and improve the Services and prevent abuse.
• Consent: where you choose to enable optional features (you may withdraw consent where applicable).
• Legal obligations: to comply with lawful requests and other legal requirements.

Data retention

We retain information only as long as reasonably necessary to:

• Provide the Services and maintain your account and Reports.
• Comply with legal obligations and enforce our Terms.
• Maintain security, prevent fraud, and keep necessary logs.

You may be able to delete certain Projects/Reports in the Services. If you request account deletion, we will take reasonable steps to delete or anonymize your Account Data and User Content from active systems, but we may retain limited information in backups and logs for a limited period and as required by law.

Security

We use reasonable technical and organizational measures designed to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International data transfers

We may process and store information in multiple countries depending on where our service providers operate. If you access the Services from a country with data transfer restrictions, you understand that your information may be transferred to and processed in other locations.

Your privacy rights

Depending on where you live, you may have rights such as:

• Access: request a copy of your personal data.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data.
• Objection/restriction: object to or restrict certain processing.
• Portability: request data in a portable format where applicable.
• Withdraw consent: where processing is based on consent.

To exercise rights, contact us through the Contact section. We may need to verify your identity. Some rights may be limited by law.

Important note about third-party data (your responsibility)

We act as a tool provider. You are solely responsible for how you use the Reports and Source Data.

• You have a lawful basis and the necessary rights/permissions to provide Source Data or instruct us to collect/process it.
• Your use of the Services complies with all applicable laws (including privacy/data protection laws) and third-party platform rules.
• You will not use the Services for unlawful surveillance, harassment, stalking, or discriminatory purposes.

Children

The Services are not intended for children. If you are under 18, do not use the Services. We do not knowingly collect personal information from children.

Contact

If you have questions about this Privacy Policy or your privacy rights, contact: