SocialMedia DMs — socialmediadms.com and the SocialMedia DMs browser extension.
1. Introduction
This Privacy Policy explains how ScaleUp Works LLC, doing business as SocialMedia DMs ("SocialMedia DMs," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the website at socialmediadms.com and any associated subdomains (the "Site"), the SocialMedia DMs web application, and the SocialMedia DMs browser extension for Google Chrome and other compatible browsers (the "Extension"). The Site, web application, and Extension are referred to together as the "Services."
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.
2. Who we are
| Field | Detail |
|---|---|
| Legal entity | ScaleUp Works LLC |
| Operating brand | SocialMedia DMs |
| Mailing address | 2351 W Atlantic Blvd, Unit 668144, Pompano Beach, FL 33069, USA |
| Privacy contact | privacy at socialmediadms.com |
| Legal notices | legal at socialmediadms.com |
Email addresses on this page are shown in an obfuscated “name at domain” format to reduce automated spam collection. Replace “ at ” with the @ symbol when contacting us.
3. Scope and your role
SocialMedia DMs is a business tool used by professionals to manage outreach on social platforms. This policy distinguishes between two categories of individuals:
- Customers and visitors: people who create an account, subscribe to a plan, install the Extension, or visit the Site. For this information, SocialMedia DMs generally acts as a data controller.
- Recipients and prospects: third parties whose publicly available social profile information is surfaced through the Lead Finder feature, or who receive or exchange messages with our customers through the Services. For this information, the customer who operates the account directs the processing, and SocialMedia DMs generally acts as a data processor on that customer’s behalf (see Section 8).
4. Information we collect
4.1 Information you provide
- Account information: name, email address, business name, and login credentials when you register.
- Billing information: subscription tier and transaction records. Card and bank details are collected and processed directly by our payment processor, Stripe; we do not store full payment card numbers on our own systems.
- Communications: messages you send to support, sales, partnerships, or other inboxes, and your responses to our emails and surveys.
- Content you create: message sequences, templates, campaign settings, saved searches, notes, and other configuration you enter into the Services.
- Subscription and usage records: your plan tier, Lead Credit balances and usage history, billing history, and similar account records.
4.2 Information about connected social accounts
To run outreach on your behalf, the Services connect to the social media account(s) you choose to link (for example, your Instagram account). Depending on the feature you use, this may involve:
- Account and session access: the Extension operates within your own logged-in browser session to act on your linked account. We process the information needed to send and sequence messages, detect replies, and report activity back to your dashboard.
- Conversation data: the content, timing, and status of messages sent, received, and queued through the Services, so you can manage conversations, track replies, and measure booked meetings.
- Profile and engagement signals: limited information about the accounts you target or that respond to you, used to personalize sequences and report performance.
We do not ask for or store the passwords of your linked social accounts. Your linked account remains governed by that platform’s own terms and policies (see Section 11).
4.3 Lead Finder information
The Lead Finder feature helps you build prospect lists by searching publicly available social profile information using criteria such as keyword, hashtag, and location. Information surfaced through Lead Finder may include public profile fields (for example, username, display name, public bio, follower counts, and other openly visible details). Lead Finder returns information that is already publicly accessible on the relevant platform; it is provided to help you identify relevant business prospects.
You are responsible for using Lead Finder results lawfully and in accordance with applicable laws and platform terms, including any consent, anti-spam, and data-protection obligations that apply to your outreach (see Section 8 and our Terms & Conditions).
4.4 Information collected automatically
- Usage and device data: IP address, browser type, operating system, pages viewed, referring URLs, feature usage, and timestamps.
- Cookies and similar technologies: including analytics cookies, advertising pixels, and affiliate-referral cookies. See Section 9.
4.5 Help Center and AI support assistant
Our Help Center (the “SocialMedia DMs Help Center,” located at help.socialmediadms.com) includes an AI support assistant, the “SocialMedia DMs Help Assistant.” When you ask the Help Assistant a question, your question and the most relevant help-article content are sent to a third-party AI provider that generates a response on our behalf. Your conversation with the Help Assistant is stored only within your current browser tab and is cleared when you close that tab. Inputs you provide to the Help Assistant are not used to train general-purpose or third-party AI models. Please do not enter sensitive personal information into the Help Assistant; for account-specific issues, contact support at support at socialmediadms.com.
5. Browser extension privacy practices
To provide our services, the SocialMedia DMs browser extension (the “Extension”) operates within your active, logged-in Instagram session in your own browser. This section describes exactly what the Extension accesses, why, and how that information is used.
5.1 Single purpose
The Extension has one purpose: to power the SocialMedia DMs platform’s direct-message automation, sequencing, reply detection, and dashboard syncing features. Every permission it requests and every category of data it accesses exists to deliver that core functionality.
5.2 Personal communications and lists
To sync your activity to your SocialMedia DMs dashboard and manage your outreach, the Extension reads and transmits:
- Instagram Direct Messages: the contents of direct messages associated with your connected account, including sender and recipient names, message text, and timestamps, so the platform can detect replies, manage conversations, and report results.
- Follower and audience lists: your Instagram follower lists and related audience information, used to build and manage prospect lists and to target and sequence your outreach.
This information is synced securely to your dashboard so you can manage conversations and campaigns in one place.
5.3 Cookies and authentication
The Extension accesses your active Instagram session cookies (such as your session user-identifier and security-token cookies) solely to authenticate your existing logged-in session. This allows the Extension to act on your behalf and sync your data securely without asking you to share or re-enter your Instagram password. We do not request, collect, or store your Instagram password.
5.4 Permissions and local operation
The Extension requests only the permissions it needs to function:
- Host permissions: to interact with supported social media websites while you are using them.
- Storage permission: to save your settings, preferences, and campaign data locally.
- Cookie access: to read your active session cookies for authentication, as described in Section 5.3.
- Additional permissions: requested only when required for a specific feature, and used solely to provide that feature.
How the Extension operates:
- Local vs. transmitted: the Extension runs in your own browser on your device. Some processing happens locally; the data needed for dashboards, reporting, and sequencing is transmitted securely to our servers.
- No unrelated browsing data: the Extension does not read or collect data from websites or browser activity unrelated to the SocialMedia DMs features you actively use.
5.5 How extension data is used — and not used
All data collected through the Extension is used exclusively to provide the core direct-message automation and syncing features of the SocialMedia DMs platform. We do not sell, rent, or share your personal communications or session data with data brokers or any third party for their own purposes. We do not use this data for third-party advertising, to build advertising profiles, or to determine creditworthiness or for lending purposes.
6. How we use information
We use information to:
- Provide, operate, secure, and maintain the Services;
- Authenticate users, process subscriptions, and deliver customer support;
- Run, sequence, and report on outreach campaigns you configure;
- Power the Lead Finder feature and other product functionality;
- Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms;
- Improve and develop the Services, including analytics and product research;
- Communicate with you about updates, security, billing, and (where permitted) marketing; and
- Comply with legal obligations and enforce our agreements.
7. Legal bases for processing (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we process personal data under one or more of these legal bases: performance of a contract (to provide the Services you request); legitimate interests (to secure, improve, and market our Services in a balanced way); consent (for certain cookies and marketing, which you may withdraw); and compliance with legal obligations.
8. Customer-directed processing and prospect data
When you use the Services to find, contact, or message third parties, you determine who is contacted and what is sent. For that activity, you act as the controller of the relevant personal data, and SocialMedia DMs acts as your processor, handling the data only to provide the Services and on your instructions.
As a controller, you are responsible for having a lawful basis for your outreach and for honoring the rights of the people you contact. If a prospect or recipient contacts us directly about data processed on a customer’s behalf, we will refer them to the relevant customer or assist that customer in responding, as appropriate. A data processing addendum is available to customers who require one — contact legal at socialmediadms.com.
11. Third-party platforms
The Services interact with third-party social media platforms (for example, Instagram, which is operated by Meta Platforms, Inc.). SocialMedia DMs is an independent product and is not endorsed by, sponsored by, affiliated with, or otherwise associated with Meta, Instagram, or any other third-party platform.
Your use of those platforms remains subject to their own terms and privacy policies, and we are not responsible for their practices.
12. Data retention
We retain personal information for as long as your account is active and as needed to provide the Services, then for a reasonable period afterward to comply with legal, tax, accounting, and dispute-resolution obligations, or until you request deletion where applicable. Campaign and conversation data may be deleted or anonymized on a rolling basis according to our retention schedule.
13. Your privacy rights
13.1 All users
You may request to access, correct, or delete your account information, and you may opt out of marketing emails using the unsubscribe link or by contacting us.
13.2 EEA/UK (GDPR/UK GDPR)
Subject to conditions, you have rights to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent and to lodge a complaint with your supervisory authority.
13.3 California and other U.S. states
Subject to applicable law, you may have rights to know, access, correct, and delete personal information, to opt out of “sale” or “sharing” of personal information and certain targeted advertising, and to not be discriminated against for exercising these rights. To exercise rights, contact privacy at socialmediadms.com. We will verify your request and respond within the timeframes required by law. You may use an authorized agent where permitted.
14. International data transfers
We are based in the United States and may process information in the U.S. and other countries. Where we transfer personal data from the EEA, UK, or other regions, we use appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
15. Security and children
We use administrative, technical, and organizational measures designed to protect personal information. Sensitive items — including database credentials, payment-processor (Stripe) tokens, and connected-account configurations — are encrypted in transit and at rest. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
The Services are intended for business users aged 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us so we can delete it.
16. Changes and contact
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by additional notice. Your continued use of the Services after an update constitutes acceptance of the revised policy.
Questions or requests:
- Privacy: privacy at socialmediadms.com
- Legal notices: legal at socialmediadms.com
- Mail: ScaleUp Works LLC, 2351 W Atlantic Blvd, Unit 668144, Pompano Beach, FL 33069, USA
Email addresses are shown in an obfuscated “name at domain” format to reduce spam; replace “ at ” with @ when contacting us.