Privacy Policy

SUPERSOCKS COMPANIE, SIREN 103 280 947, SIRET 103 280 947 00013, 50 rue du Colisée, 75008 Paris, France, is the controller for ReachSlot marketplace, account, campaign, website and X Analyzer processing described here.

This Policy applies to visitors, invited users, creators, sponsor representatives and people who contact us. It does not govern the independent practices of X, sponsors, creator destinations, payment providers or other linked services.

Privacy contact: privacy@reachslot.com. This address must be activated and monitored before public launch.

When a creator chooses “Connect with X”, ReachSlot uses X OAuth with tweet.read and users.read permissions to import the verified identity and public profile fields. The X access token is used for that import and is not persisted by the current product. Temporary OAuth state and verifier cookies expire after approximately ten minutes.

After express opt-in, X Analyzer may refresh permitted public information and produce derived signals such as recent momentum, median post performance, posting regularity, content themes and brand fit. It does not infer health, political belief, religion, sexual orientation or other sensitive traits. X metrics do not prove profile visits, sponsor clicks or sales.

We use X data subject to X’s Developer Policy and Privacy Policy. We will update or remove stored X content when required by X, the account owner or applicable law. If X access or permissions change, features may be reduced or withdrawn.

Where we rely on legitimate interests, we assess necessity and impact on individuals. Where consent is the basis, it may be withdrawn prospectively without affecting earlier lawful processing. We do not use personal information for unrelated advertising.

An opted-in creator profile may display the creator’s name, handle, images, bio, public X counts, topics, public-content performance summaries, availability, accepted campaign information and aggregated ReachSlot clicks. A sponsor campaign may display sponsor name, approved destination, price, duration, status and measured results.

We label the source and nature of metrics where practical: public X data, information supplied by a user, estimates or ReachSlot-measured results. Private sponsor analytics, tax information, payment details, contact information and fraud signals are not public unless disclosure is legally required.

We disclose only what is reasonably needed to:

• the creator and sponsor counterparties to evaluate and perform a Campaign Order;
• hosting, database, security, communications and support providers operating under contract;
• payment, identity, KYC/KYB, invoicing and tax providers when these capabilities are activated;
• X when you initiate OAuth or where platform compliance requires communication;
• professional advisers, insurers, auditors and transaction counterparties under confidentiality;
• courts, regulators, tax authorities and law enforcement where legally required or necessary to protect rights and safety.

ReachSlot does not sell personal information. It does not share personal information for cross-context behavioural advertising and does not use X data to target individuals with advertising outside X.

ReachSlot is controlled from France. Providers or campaign counterparties may process information outside France, the EEA or the UK. Where transfer rules apply, we use an adequacy decision, the European Commission Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another lawful mechanism, with supplementary measures where appropriate.

You may request information about the relevant transfer safeguard. Public creator information remains globally accessible by its nature, but public availability does not remove our data-protection duties.

We may keep information longer where required for law, tax, litigation, fraud prevention or enforcement, and may retain irreversibly aggregated statistics that no longer identify an individual.

The private pilot uses essential cookies only: a ReachSlot access-session cookie for up to seven days and short-lived X OAuth state and PKCE verifier cookies. These are required for security and requested authentication and are not used for advertising.

If optional analytics, advertising pixels, embedded X widgets or other non-essential storage are introduced, this Policy and the consent interface must be updated before activation in countries where notice or consent is required.

X Analyzer may calculate descriptive or predictive signals about an opted-in creator’s public content performance. Sponsors use those signals to compare inventory, and creators use them to understand their account. The creator—not the ranking—chooses the winning sponsor.

ReachSlot does not currently make a solely automated decision that produces legal or similarly significant effects on a person. Fraud or eligibility signals may trigger human review, and affected users may request correction or contest a decision.

Depending on your location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; opt out of sale, sharing or targeted advertising where applicable; and receive equal service when exercising a right. You may also ask us to remove a public creator profile or correct its source and date.

Send requests to privacy@reachslot.com. We may verify identity and authority before acting. Some information must be retained for active contracts, tax, security, freedom of expression or legal claims. You may lodge a complaint with your local authority; in France, the lead authority is the CNIL.

These notices are a global baseline, not a claim that every local privacy regime applies to the private pilot. We assess additional localisation, representative, registration or consent requirements before opening a country publicly.

We use proportionate technical and organisational safeguards, including restricted access, short-lived authentication material, encryption in transit, data minimisation, provider controls and incident response. No system is perfectly secure, and users must protect their own accounts.

ReachSlot is a professional service for adults and is not directed to children. We do not knowingly create accounts for people under 18. If you believe a minor’s information is present, contact us for review and removal.

We may update this Policy when the product, providers, law or data practices change. We will post the new effective date and give appropriate notice for material changes. New incompatible uses will not be applied retroactively without a valid legal basis.

Questions and requests: privacy@reachslot.com. Postal contact: SUPERSOCKS COMPANIE, 50 rue du Colisée, 75008 Paris, France. Legal terms are available at reachslot.com/terms.