Public Content Notice

Summary

Convosight is a social intelligence business. We analyse content that people have published publicly on social media and other online services, so that brands and their agencies can understand how consumers talk about product categories, brands, creators and trends, and make data-backed decisions about their products, marketing and social strategy. If you have posted publicly, content of yours may have been collected and analysed by us.

We do not read private messages or anything behind a private account. What is visible to us is decided by the platform you post on and by the privacy settings you apply there. Those settings are your most direct control (section 3). You also have legal rights set out in section 7, including the right to ask us to stop using content relating to you.

1. Who this notice is for, and who we are

This notice applies to you if you publish content on publicly accessible social media or other online services that we collect from, such as TikTok, Instagram, YouTube or Reddit. If you are a Convosight customer or an authorised user, our Privacy Policy applies to you instead.

Convosight Analytics Private Limited, of 55, 2nd Floor, Westend Marg, Saidullajab, Near Saket Metro Station, South West Delhi, New Delhi, 110030, and its affiliates ( “Convosight”, “we”, “us”) are the controller — where the law applies, in India the Data Fiduciary — of the personal data described here.

2. What we collect, and where it comes from

Depending on the source and the permissions applying to it, we may collect public videos, images, audio, captions, comments, usernames or handles, profile information, hashtags, timestamps, links and engagement metrics.

We obtain this through authorised platform APIs, licensed data providers, public web pages where access and use are permitted, and other lawful sources. We do not collect private messages or content restricted to private accounts or closed communities.

3. The platforms you post on

Each platform decides what content is publicly visible, to whom, and on what terms. Your relationship with a platform is governed by that platform's own terms of service and privacy policy, and the privacy controls it gives you are the most direct and most effective way to determine who can see what you publish — including us.

Those settings also govern what we are able to collect. We collect only content that is publicly accessible under the settings you have applied and the permissions the platform grants us. If you restrict the audience for a post, make your account private, or delete a post on the platform, that is the most complete remedy available to you, because it applies everywhere at once rather than only to our systems.

This does not replace the rights described in section 7, which you have against us directly and which you can exercise regardless of what you do on the platform.

4. What we use it for, and our legal basis

Our products — including ConvoTrack, ARIA and Persona (the “Services”) — turn what people say publicly on social media into consumer, category, brand and creator insight for the companies that subscribe to them. Those companies use that insight to decide what products to build, how to position them, which conversations and creators matter in their category, and how to plan their social and marketing strategy. Analysing public social content is how we produce that insight, and that is why we collect it.

We analyse this content using automated systems and, where appropriate, human review, to identify themes, sentiment and trends and to produce aggregated research for our customers. This analysis generates probabilistic inferences that may be incomplete or inaccurate and should be read in context. Some outputs include or link to representative public posts, excerpts, transcripts or handles so that authorised users can check the evidence behind an insight.

4.1 EU / EEA and United Kingdom

We rely on legitimate interests — ours and our customers' — in providing and receiving business-to-business market research based on publicly available signals. We assess necessity, your reasonable expectations, sensitivity, potential impact and available safeguards before relying on this basis, and you may object to it.

Public content can reveal, or support inferences about, special categories of personal data such as health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership or sexual orientation. Where we process such information we rely on the condition that it has been manifestly made public by the individual concerned (Article 9(2)(e) of the EU and UK GDPR). We do not use it to make decisions about legally significant opportunities for any individual.

Because we collect this information from public sources rather than from you, this notice is our transparency information for that processing.

4.2 India

Section 3(c)(ii) of the Digital Personal Data Protection Act, 2023 provides that the Act does not apply to personal data that has been made, or caused to be made, publicly available by the individual to whom it relates. Where content has been published publicly by the person it relates to, we treat it as falling outside the Act on that basis. Where that is not so — for example where a public post contains personal data about someone other than the person who published it, or where content reaches us through a route that does not show it was self-published — we treat the data as within scope and handle it accordingly. Personal data we collect directly, such as customer and account information, is covered by our Privacy Policy and the Act applies to it in the ordinary way.

5. Who we share it with

We share this information with our customers and their authorised users through the Services, with service providers and sub-processors that help us operate the Services, with our affiliates, and with public authorities where required by law. Our agreements prohibit customers from using this information to target or profile individuals on the basis of special categories of personal data, to single out individuals for unlawful or discriminatory purposes, or in any manner contrary to applicable law or the source platform's terms.

6. How long we keep it, and where

We keep public content and information derived from it for as long as needed for the research purposes described above, taking account of the sensitivity of the information, the terms of the source platform or licence, and applicable legal requirements. Where a source platform requires a shorter deletion or refresh period, we apply that period. Aggregated and de-identified outputs that cannot reasonably be linked to an identifiable person may be kept for longer.

Information may be stored in or accessed from countries other than the one you are in. Where we transfer personal data out of the European Economic Area or the United Kingdom we rely on appropriate safeguards.

7. Your rights, and how to exercise them

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing, to receive a portable copy, to appeal a refusal, and to complain to your data protection authority.

Under US state privacy laws, information that a business has a reasonable basis to believe an individual lawfully made available to the general public, or that is available from widely distributed media, is excluded from the definition of personal information. We treat public content on that basis, and we do not sell or share personal information as those terms are defined under those laws.

Contact reachus@convosight.com. Please give us enough detail to find the relevant records — usually the platform, the public URL and the username. We may need to verify your identity first.

Because you published the content on a third-party platform, removing it from our systems does not remove it from that platform, and we may encounter it again if it remains public there. Where we hold information on behalf of a customer, we may direct your request to that customer or help them respond.

8. Contact

reachus@convosight.com, or by post to Convosight Analytics Private Limited, 55, 2nd Floor, Westend Marg, Saidullajab, Near Saket Metro Station, South West Delhi, New Delhi, 110030. Grievance Officer (India): Rohit Mahajan, email: rohit@convosight.com