Privacy Policy
Last updated: 31 August 2026
Want to know how we handle your data?
- What data we collect and why?
- What we do with it? Who do we share your data with?
- What are your rights and how to exercise them?
This privacy policy informs you of the data processing carried out by SARL GRAPHIK IMPACT, whose registered office is located at 96 avenue Charles de Gaulle, 08000 Charleville-Mézières, France - Ardennes, registered in the Business Register of Sedan under number 538110040.
1. Preamble
SocialFlow ("We") takes very seriously the privacy of persons who visit its website socialflow.graphik-impact.com (the "Site"), and more broadly, the privacy of persons who transmit their Personal Data (term defined hereinafter) to it on the occasion of contact with its company ("You").
This privacy policy is an integral part of the General Terms and Conditions of Sale. It applies each time you transmit your Personal Data to SocialFlow and to all processing that SocialFlow may perform on this data.
Therefore, you explicitly accept the use of your Personal Data in accordance with this privacy policy, when you contact our customer service, accept commercial communications from us, and more generally when you browse and/or log in to our Site, or interact with SocialFlow in any way.
We reserve the right to modify our privacy policy at any time, in compliance with applicable data protection laws. In the event of a substantial modification, you will be informed by any appropriate means.
2. Who is the Data Controller and what are our commitments?
SARL GRAPHIK IMPACT, whose registered office is located at 96 avenue Charles de Gaulle, 08000 Charleville-Mézières, registered in the Business Register of Sedan under number 538110040, is responsible for the processing of your Personal Data ("SocialFlow" or "We").
We commit to processing your Personal Data securely and in compliance with the regulations applicable in France and the European Union in the field of personal data protection ("Applicable Regulations"), including in particular:
- Law No. 78-17 of 6 January 1978, as amended, on data processing, files and freedoms, and its possible updates;
- Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data (the "GDPR") and any subsequent text including its implementing texts;
- texts adopted within the European Union and local laws applicable to Personal Data, where applicable;
- texts and decisions from supervisory authorities, in particular the National Commission for Data Protection and Freedoms (CNIL).
To ensure compliance with Applicable Regulations and the provisions of this privacy policy, we have designated a data protection officer.
This officer can be contacted for any questions related to your Personal Data by sending your request by email to the following address: contact@graphik-impact.com
3. What Personal Data do we collect?
The term "Personal Data" means any information about you that makes you directly or indirectly personally identifiable.
We collect the following data:
- your title, name and first name;
- postal address and phone number;
- email address;
- correspondence by email, contact form or via social media, and/or phone exchanges with customer service, as well as any other data enabling the follow-up of the commercial relationship;
- cookies and other trackers including the data mentioned in the section WHAT IS OUR COOKIE MANAGEMENT POLICY?, IP address and other information that enables your identification and that you make available to us at any time;
- any other information that enables your identification and that you make available to us at any time (via social media, contact form…).
Data marked with an asterisk (*) in our forms is mandatory. If you refuse to provide this information, we will not be able to process your request or provide you with the services concerned.
4. When do we collect your Personal Data?
We may collect your Personal Data when you:
- visit the Site;
- log in or create a customer account on the Site;
- use the contact form or send us an email;
- subscribe to our newsletter;
- send a complaint, ask a question or share your feedback;
- interact with us via our official social media accounts;
- provide us with your Personal Data on the Site or by any other means.
We also use cookies and other trackers. For more information, please refer to the section WHAT IS OUR COOKIE MANAGEMENT POLICY?
5. Why do we collect your Personal Data?
On the basis of the contract that binds us, a legal obligation, our legitimate interest, or after obtaining your consent, we process your Personal Data to fulfill the following purposes:
| Processing Purposes | Legal Bases |
|---|---|
| Management of customer relationship (response to requests, follow-up of exchanges, account creation) | Contract Execution / Legitimate Interest |
| Management of complaints or questions relating to products or our brand | Legitimate interest of SocialFlow |
| Management of requests related to the exercise of your rights | Legal Obligation |
| Sending newsletters and commercial communications by electronic means (email, notifications, social media) | Consent |
| Sending commercial offers regarding products and services by postal mail | Consent |
| Measurement of site traffic and analysis of behavior on the Site | Consent (non-essential cookies) / Legitimate Interest (exempt analytical cookies) |
| Management and improvement of the customer account, including offering new features or new services | Legitimate interest of SocialFlow to improve service |
| Management of customer satisfaction through customer reviews on products and customer service performance | Legitimate interest of SocialFlow to improve products and services |
| Statistical operations, analysis, selection and segmentation of customers to improve customer knowledge | Legitimate interest of SocialFlow to better understand its customers and adapt its offers |
| Improvement of the Site and our services | Legitimate Interest |
| Provision of social media sharing tools | Consent |
| Analysis of customer behavior on the Site and their reactions to marketing campaigns to improve and personalize products and services | Consent |
| Personalization of the browsing experience on the Site and advertisements offered, on our behalf or on behalf of our partners, based on your preferences | Consent |
6. Newsletter
Directly on the Site, when placing an order or by contacting us, you can subscribe to the newsletter and choose to be regularly informed of offers and news from SocialFlow.
You can unsubscribe at any time by clicking on the unsubscribe link located at the bottom of each newsletter or by sending your request by email to the following address: contact@graphik-impact.com
7. Who do we share your Personal Data with?
We may be led to transmit all or part of your Personal Data to the following entities:
- to the various departments and possible subsidiaries of SocialFlow, who may use your Personal Data only to the extent strictly necessary to accomplish their missions;
- to certain of our service providers who, on our behalf and according to our instructions, process your Personal Data to help us provide the following services:
- Site hosting and storage of all your Personal Data;
- technical maintenance and development operations on the Site and our information systems;
- sending commercial prospecting emails and notifications;
- analysis of your use of the Site, to improve its quality and efficiency;
- collection of customer reviews;
- personalization of the Site according to your preferences.
The entities to which we transmit your Personal Data are contractually bound to confidentiality and compliance with Applicable Regulations concerning the protection of your Personal Data.
8. Where do we transfer your Personal Data?
Your Personal Data is stored in France where the servers of our Site and our ERP/CRM are hosted. It may also be hosted in the European Economic Area ("EEA", namely the member states of the European Union, as well as Norway, Iceland and Liechtenstein).
Some of the service providers or subcontractors to whom we transfer your Personal Data, as indicated in the section WHO DO WE SHARE YOUR PERSONAL DATA WITH?, are established outside the EEA, and sometimes in countries not recognized by the European Commission as providing an adequate level of protection. In this case, in accordance with Applicable Regulations, we commit to:
- entering into a cross-border data transfer agreement with these companies, in accordance with the European Commission's standard contractual clauses, or
- working with companies that have Binding Corporate Rules (BCR) allowing cross-border transfers.
You can obtain more details on this subject and, where applicable, obtain a copy of the cross-border transfer agreements concluded with our partners, by sending your request by email to the following address: contact@graphik-impact.com
9. How do we ensure the security of your data?
We have implemented internal procedures to ensure the security of your Personal Data during their use, transfer and storage. We also maintain the procedures in place to ensure their compliance with Applicable Regulations.
These security procedures include in particular:
- the commitment of our service providers and subcontractors, when we use their services, particularly to make the Site and its content available to you, or to process your orders, to comply with their contractual obligations to ensure adequate protection of the Personal Data to which they have access;
- limiting access to your Personal Data to employees subject to a confidentiality obligation, and whose access to your Personal Data is necessary to provide you with products and services and/or justified within the scope of their duties;
- implementing precautionary measures to protect your Personal Data against their destruction, loss or alteration, and preventing any unauthorized access to your Personal Data;
- storing your Personal Data on servers that provide all security guarantees. Data is retained, in accordance with Applicable Regulations, within the periods mentioned in the section HOW LONG IS YOUR PERSONAL DATA RETAINED?
Data Collected via Third-Party APIs
When you connect a third-party social media account to the SocialFlow Platform, specific data is collected and processed by the Publisher. This section details, for each integration, the data collected, its purpose, and its retention period.
Data Collected via TikTok API
| Data | Purpose | Retention |
|---|---|---|
| TikTok user ID (open_id) | Identify the connected account in the Platform | Until disconnection by the User |
| TikTok union ID (union_id) | Reliably link the same account to its successive statistical records | Stored with the daily records: 24 months |
| Avatar and display name | Display in the SocialFlow dashboard | Until disconnection by the User |
| Profile statistics (followers, likes, views, videos) | Monthly client performance reports | 24 months |
| Public video list with metrics (views, likes, shares, comments) | Monthly client performance reports | 24 months |
| Local copy of public media: video file, cover thumbnail and account avatar | The URLs provided by TikTok are signed and expire within 24 hours. A local copy is required to display a post preview and to produce reports beyond that period | 24 months, same as the associated post · deleted immediately upon request |
| OAuth tokens (access_token, refresh_token) | Authentication of API calls | Until expiration or revocation |
The Publisher does NOT collect or store: your TikTok password, your private messages or DMs, or your personal contact information beyond your public profile.
Public media from your account (video file, thumbnail, avatar) are, however, copied locally, as stated in the table above. This copy is never made public nor shared with any third party: it is used solely for display within the Platform and for the reports delivered to the account holder.
Data Collected via Meta APIs (Facebook and Instagram)
| Data | Purpose | Retention |
|---|---|---|
| Facebook Page and Instagram account identifiers | Identify managed assets in the Platform | Until disconnection by the User |
| Page and profile metadata (name, avatar, category) | Display in the dashboard | Until disconnection by the User |
| Posts with engagement statistics (reach, impressions, reactions, shares, comments) | Monthly performance reports and editorial planning | 24 months |
| Page access tokens (encrypted) | Authentication of API calls and publishing | Until expiration or revocation |
Data Collected via LinkedIn API
| Data | Purpose | Retention |
|---|---|---|
| LinkedIn organization URN (Company Page) | Identify the managed Company Page | Until disconnection by the User |
| Page information (name, industry, size) | Display in the dashboard | Until disconnection by the User |
| Organic posts and their statistics (impressions, clicks, reactions, shares, comments) | Monthly performance reports | 24 months |
| OAuth tokens (access_token, refresh_token) | Authentication of API calls | Until expiration or revocation |
Data Collected via Pinterest API
| Data | Purpose | Retention |
|---|---|---|
| Pinterest user ID | Identify the connected account | Until disconnection by the User |
| Username, avatar, Business profile information | Display in the dashboard | Until disconnection by the User |
| Boards and pins list with metrics (impressions, saves, clicks, engagement) | Monthly performance reports and editorial planning | 24 months |
| Pinterest Ads advertiser account data (campaigns, ad groups, ads, analytics) | Advertising management and reporting | 24 months |
| OAuth tokens (access_token, refresh_token) | Authentication of API calls | Until expiration or revocation |
Right to Erasure of Integration-Related Data
The User may at any time:
- Disconnect an integration from their SocialFlow dashboard: OAuth tokens are then immediately revoked, and associated data is marked for deletion within 30 days.
- Request complete erasure of all their data by email to contact@graphik-impact.com. The Publisher commits to processing this request within 30 days in accordance with Article 17 of the GDPR.
- Revoke access directly from the third-party platform settings (TikTok, Meta, LinkedIn, Pinterest), which automatically invalidates the tokens on the SocialFlow Platform side.
10. What are your rights and how to exercise them?
In accordance with Applicable Regulations, you have the right to exercise the following rights:
- the right to access your data;
- the right to rectification and the right to erasure of your data (right to be forgotten);
- the right to restrict processing of your data;
- the right to data portability;
- the right to object to the processing of your data;
- the right to withdraw your consent at any time, when processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
- the right to set directives concerning the fate of your data after your death.
To exercise these rights, you can contact us using one of the following means:
- by email: contact@graphik-impact.com
- by postal mail, accompanied by a copy of an identity document: SocialFlow, 96 avenue Charles de Gaulle, 08000 Charleville-Mézières
We undertake to respond to your request within one month of receipt.
You also have the right to lodge a complaint with CNIL: www.cnil.fr.
In accordance with Articles L.223-1 et seq. of the Consumer Code, you can register free of charge on the national opt-out list for telephone solicitation at www.bloctel.gouv.fr.
11. What is our cookie management policy (trackers)?
When you visit the Site, we may place small pieces of information on your device known as "cookies", which will be stored by your browser. These cookies allow us in particular to:
- ensure the proper functioning of our Site and improve your browsing experience;
- analyze our traffic and optimize the performance of our Site;
- offer personalized content tailored to your interests;
- display targeted advertisements on our Site and beyond, including on social media;
- enable connection to our Site through social media or other third-party sites.
What cookies do we use?
We use the following cookies:
- Technical cookies related to Site functionality (mandatory): These cookies are essential for the proper functioning of our Site and cannot be configured. They allow you to browse the Site, use its features and save your preferences such as language, account access, and to secure our Site against potential fraud.
- Site analytics cookies: These performance cookies allow us to measure Site traffic (number of visits, pages viewed, traffic sources…), analyze your navigation on the Site and your reactions to the content we offer, in order to optimize performance. They collect information about the visitor's browsing on the Site, to help us improve the ergonomics and features of the site. By accepting these cookies, you contribute to the improvement of our Site.
- Preference cookies (experience and relationship): When you browse the Site, it memorizes your preferences. This simplifies, facilitates and personalizes your browsing experience to best meet your expectations. These cookies allow us to offer you recommendations for content, products or relevant services in line with your preferences. Without these cookies, your use of the Site may be slowed down and the relevance of recommendations limited.
- Targeting or advertising cookies (marketing and social media): These cookies are used to display advertisements that interest you on our Site and beyond, including on social media. To this end, we may transmit your email address in encrypted format to our partner social media platforms. These cookies limit the number of times you see an ad and help us measure the effectiveness of our advertising campaigns. If you disable these cookies, advertisements will continue to be displayed during your browsing but will not take into account your interests and will therefore be less relevant.
- Social media cookies: These cookies are used to allow you to connect to our Site through social media such as Facebook, Google, and other third-party sites.
How to accept or refuse cookies?
The recording of cookies on your device depends on your choice, except for functionality and security cookies which are necessary for the proper functioning of our Site. Cookies are stored for a maximum period of 13 months in accordance with CNIL recommendations.
On your first visit, a consent banner allows you to accept or refuse non-essential cookies. You can change your preferences at any time by clicking on the "Cookie Management" link available in the footer of the Site.
You can also disable cookies independently by adjusting your browser settings. Instructions are available on the help pages of each browser:
Please note that we do not control the use of cookies by third parties.
12. How long is your Personal Data retained?
We retain your Personal Data for the following periods:
- Personal Data relating to customers: duration of the contractual relationship, plus legal limitation periods, i.e. 5 years;
- Data relating to non-customer prospects: 3 years from the last active contact;
- Cookies and browsing data: maximum 13 months;
The deletion of your Personal Data from our active database will be followed by an intermediate archiving period for certain personal data to satisfy our legal, accounting and tax obligations, and also to manage your claims and potential warranty requests, within the applicable limitation periods.
In the event that your Personal Data is subsequently archived, it will be automatically and irreversibly anonymized.
13. Contact
For any questions relating to this privacy policy or the processing of your data:
- by email: contact@graphik-impact.com
- by mail: SocialFlow, 96 avenue Charles de Gaulle, 08000 Charleville-Mézières, France - Ardennes
Last updated: 11/06/2026