Privacy Policy for Risen Social

Last updated: November 2, 2026

This Privacy Policy explains how Risen Social LLC ("Risen Social", "we", "our", "us") collects, uses, shares and protects information when you visit risensocial.com, contact us, become a client, use our client portal, or connect a Shopify store, Google, Meta, TikTok, Klaviyo or other account to our services.

If you have questions, email content@risensocial.com.

1. Who We Are

Risen Social LLC is a content and marketing agency based in Austin, Texas, USA. We are responsible for the personal information described in this policy, except where we process data on behalf of a client (see Section 6).

2. Information We Collect

Information you give us

Contact details, such as your name, email address, phone number, company and role, when you fill out a form, sign up for our newsletter, book a call or email us.
Project and business information you share with us while scoping or delivering work.
Billing details, such as company name, billing contact and invoice history. Payments are handled by our banking and payment providers; we do not store full card or bank account numbers.
Client portal account details, such as your name, work email and login information.

Information collected automatically

Device and usage data, such as IP address, browser type, device type, pages viewed, time on page and the site that referred you.
Cookies and similar technologies used by our website host (Shopify), Google Analytics and embedded video players (Vimeo). See Section 7.

Information from connected platforms

When a client asks us to connect accounts such as Shopify, Google, Meta, TikTok or Klaviyo, we receive business and performance data from those platforms. Section 5 explains what we access on each platform. Section 6 covers data about our clients' customers.

Information from other sources

We may collect business contact details that companies publish on their own websites or professional profiles, so we can reach out about services that may be relevant to them.

3. How We Use Information

To respond to inquiries, book calls and send proposals.
To deliver our services, including content production, social media management, paid media, strategy, reporting and the client portal.
To send invoices and manage our client relationships.
To send newsletters and marketing emails, which you can unsubscribe from at any time.
To understand how our website is used and improve it.
To keep our website, systems and accounts secure and prevent fraud.
To meet legal, tax and accounting obligations.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing a contract with you, our legitimate interests in running and marketing our business, your consent (for example, for certain cookies and marketing emails), and compliance with legal obligations.

4. How We Share Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We share information only with:

Service providers who help us run our business, such as website hosting (Shopify), cloud hosting and storage (Cloudflare, Supabase, Google Workspace), analytics (Google Analytics), video hosting (Vimeo), scheduling (Cal.com), social media publishing (Sprout Social), creator and influencer platforms, email delivery, project management and banking. They may use the information only to provide services to us.
Our clients, when the information belongs to that client's own accounts and is shown to them in reports or the client portal.
Legal authorities, when required by law, subpoena or court order, or to protect our rights and the safety of others.
A buyer or successor, if Risen Social is involved in a merger, acquisition or sale of assets. This policy would continue to apply to your information.

5. Connected Platform Data

Many of our services work by connecting to accounts our clients own, such as their Shopify store, Google accounts, Meta and TikTok accounts, and Klaviyo. A connection is only made when a client asks for it and approves it on the platform's own sign-in or install screen. This section explains what we access, why, and how we protect it.

Rules that apply to every platform

We use connected platform data to provide, operate, maintain and improve our services and our app for the client, including automated reporting, dashboards, the client portal, AI-assisted analysis, and new features we offer to that client.
Under the client's agreement with us, we may make changes in connected accounts as part of delivering the services the client engaged us for, such as launching and optimizing ads, updating store content and settings, building email flows, and fixing tracking. We keep a record of changes we make.
We may create aggregated, de-identified statistics that cannot identify any client, account or person, and use them to measure and improve our services.
Each client's data and access tokens are kept separate and used only for that client. We never combine data across clients.
Clients own their accounts. We work in them as a partner and never move them into our name.
We never sell platform data, transfer it to data brokers, use it for advertising or retargeting, use it to determine creditworthiness, or use it to train generalized artificial intelligence or machine learning models.
Our team looks at platform data only to deliver the services the client asked for, for security purposes, or to comply with the law.
We may use AI tools to summarize platform data into reports for the client. We only use AI providers whose business terms prohibit using that data to train their models.
Access tokens are stored as encrypted secrets and are available only to the systems that need them. Client portal logins cannot read them.
A client can disconnect any platform at any time. See Section 9 for how we delete the data.

Shopify

What we access: store details, products, collections, inventory, orders, refunds, discounts, sales reports, theme and page files, and customer records such as name, email, location and order history.

Why: to report on sales, products, inventory and new versus returning customers in the client's reports and portal, and to run and improve the store as part of our services, such as product listings, theme and page updates, apps, and discount codes.

Customer data: we use a store's customer information only to produce that store's reports, show it only to that client, and do not contact the store's customers. We respond to Shopify's privacy requests: when a store's customer asks for their data or asks for it to be deleted, we provide or delete what we hold within 30 days. When a store uninstalls our app, we delete that store's data within 30 days.

How to disconnect: uninstall the Risen Social app in your Shopify admin under Settings, then Apps.

Meta (Facebook and Instagram)

What we access: Facebook Pages and Instagram professional accounts the client connects, including profile details, posts, reels, stories and their performance insights; ad accounts, including campaigns, ad sets, ads, creative, spend and results; pixel and Conversions API data quality; product catalogs; and custom audiences.

Why: to report on organic and paid performance, to build, upload, launch and optimize ads as part of the paid media services the client engaged us for, to manage product catalogs for shopping ads, and to set up and check conversion tracking.

Audiences: if a client asks us to build a custom audience from their customer list, the list is hashed before it is sent to Meta, and it is used only in that client's ad account.

Messages and comments: our app does not read or reply to direct messages or comments. When we manage community replies for a client, we do it through Sprout Social, under Sprout Social's own access and privacy policy.

How to disconnect: remove Risen Social in Facebook Business settings or in your Facebook account's apps and websites settings, or email us. To request deletion of Meta data, follow Section 9.

TikTok

What we access: TikTok ad accounts through TikTok Business Center, including campaigns, ads, creative, spend and results; Spark Ads authorization codes creators or clients give us; and performance data for the client's TikTok business account.

Why: to report on organic and paid performance, and to build, launch and optimize ads as part of the services the client engaged us for.

How to disconnect: remove Risen Social's access in TikTok Business Center or your TikTok account settings, or email us.

Klaviyo

What we access: email and SMS campaign and flow performance, revenue attributed to email and SMS, list and segment sizes, and subscriber engagement.

Why: to report on email and SMS results, and to build, run and update flows and campaigns as part of our services.

How to disconnect: delete the API key you created for Risen Social in Klaviyo account settings.

Google

Some services ask you to sign in with Google and grant access to your Google accounts. Depending on what you connect, we may access:

Google Analytics: website traffic, conversion and ecommerce reports for the properties you choose. Edit access is used only to set up or fix tracking you have asked us to manage.
Google Search Console: search performance data such as clicks, impressions, queries and pages, and site settings such as sitemap submissions.
Google Ads: campaign, spend and conversion data, and campaign changes we make as part of the services you engaged us for.
Google Drive, Docs, Sheets and Slides: files and folders you share with us, such as brand assets, approved content and reports we build for you.
Your Google account basics: your name, email address and profile picture, to identify you and link the connection to your account.

We use Google user data only to provide and improve the user-facing features of our services and app: your reports, dashboards and portal views, performance analysis and recommendations, and the work you engaged us for. Every rule at the top of this section applies to it.

Limited Use disclosure: Risen Social's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect: remove Risen Social's access from your Google Account permissions page, or email us.

6. Data We Process for Clients

When we connect to a client's store, email platform or ad accounts, we may receive information about that client's own customers, such as orders and email engagement. We handle that information on the client's behalf and under their instructions, as a service provider. We use it only to deliver services to that client and never combine it across clients.

If you are a customer of one of our clients and want to exercise your privacy rights, please contact that brand directly. We will help them respond.

7. Cookies and Analytics

Our website uses cookies that are needed for it to work, plus analytics cookies that show us how visitors use the site. These include cookies set by Shopify, Google Analytics and Vimeo when you play an embedded video.

You can block or delete cookies in your browser settings. Some site features may not work without them.
You can opt out of Google Analytics with the Google Analytics opt-out browser add-on.
We honor Global Privacy Control signals where required by law.
You can also manage your choices on our Your Privacy Choices page.

8. Data Retention

We keep personal information only as long as we need it for the purposes in this policy:

Inquiries and prospects: up to 2 years after our last contact, unless you become a client.
Clients: for the length of our engagement, plus the period needed for legal, tax and accounting records.
Connected platform data and connections: for the full term of our services, and after services end or are paused, so a returning client's reports, history and connections are ready to pick up where we left off. We keep them until the client asks us to delete them or removes our access, and then delete the access tokens and raw platform data as described in Section 9.
Reports, deliverables and work records: we keep copies of the reports, content and records of work we produced for a client, including the results shown in them, as part of our business records.
Aggregated, de-identified statistics: statistics that cannot identify any client, account or person may be kept after an engagement ends.
Newsletter subscribers: until you unsubscribe.

9. How to Delete Your Data

You can ask us to delete your personal information, or a client can ask us to delete all data we hold from a connected platform, at any time.

Email content@risensocial.com with the subject "Data deletion request". Include your name, your company, and the account or platform the request is about.
We confirm the request within 5 business days and may ask you to verify that you own the account.
Within 30 days, we delete the access tokens and the platform data we stored, and we disconnect our access. We then confirm by email.
We may keep invoices and records the law requires, copies of reports and deliverables we produced and records of the work we did, aggregated de-identified statistics, and copies in backups until they expire on their normal schedule.
Removing our access in the platform's own settings stops any new data from reaching us. To also delete what we already hold, send the email above.

10. Data Security

We use reasonable technical and organizational safeguards, including encrypted connections, encrypted storage of access tokens, two-factor authentication on our core systems, and access limited to team members who need it. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

11. Your Privacy Rights

Depending on where you live, including Texas, California and other U.S. states, the EEA and the UK, you may have the right to:

Know what personal information we hold about you and get a copy of it.
Correct information that is inaccurate.
Delete your personal information.
Opt out of marketing emails, sale of personal information and targeted advertising. We do not sell personal information or use it for targeted advertising.
Object to or restrict certain processing, and withdraw consent where we rely on it.
Receive your information in a portable format.

To make a request, email content@risensocial.com. We will verify your identity before acting and respond within 45 days. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision, and we will respond to the appeal within 60 days. We will not treat you differently for exercising your rights. If you are in the EEA or UK, you may also complain to your local data protection authority.

12. Children's Privacy

Our website and services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

13. International Transfers

We are based in the United States, and our service providers may store data in the United States and other countries. Where the law requires, we use appropriate safeguards, such as standard contractual clauses, when transferring personal information from the EEA or UK.

14. Third-Party Links and Services

Our website links to and embeds third-party services, such as Instagram, Vimeo, YouTube and Cal.com. Their own privacy policies govern how they handle your information.

15. Changes to This Policy

We may update this policy from time to time. We will post changes on this page and update the date at the top. If we make a material change to how we use Google user data or other personal information, we will notify affected clients before the change takes effect.

16. Contact Us

Risen Social LLC
Austin, Texas, USA
Email: content@risensocial.com
Website: risensocial.com