Sosh.bio ← Back to sosh.bio

Sosh Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how Actlink LLC, a Delaware company ("Sosh," "we," "us," or "our"), collects, uses, shares, and protects information in connection with Sosh and the sosh.bio website, the creator pages we host, and the links, forms, and tools made available through them (collectively, the "Services").

This Policy covers two groups of people:

  • Creators — individuals and organizations who create an account to build a Sosh page, share links, run petitions, collect subscribers, and access audience insights.
  • Visitors — people who view a Creator's Sosh page, click a link, sign a petition, subscribe, or otherwise interact with content hosted on the Services.

If you do not agree with this Policy, please do not use the Services.

1. Quick Summary

  • We collect the information Creators provide when they sign up and use Sosh, and information Visitors provide when they interact with Creator pages (such as an email address or a petition signature).
  • We automatically collect limited technical information — such as referring page and browser/device information — to operate the Services, measure engagement, and protect against abuse.
  • We use service providers (for example, hosting, database, email delivery, and analytics partners) to run the Services.
  • We may enrich and aggregate contact information to produce audience insights for Creators. These insights are presented to Creators in aggregate form and are not used to reveal new identifying details about an individual Visitor to a Creator.
  • We do not sell your information for money. Certain analytics and audience-insight activities may be considered "sharing" or "selling" under California law; you have the right to opt out (see Section 11).
  • We are not a political committee and do not process donations directly. Donations are handled by third-party fundraising platforms (such as ActBlue or GiveButter) under their own terms and privacy policies.

2. Information We Collect

2.1 Information Creators provide

When a Creator registers or uses the Services, we collect:

  • Account credentials — email address and password (passwords are managed and hashed by our authentication provider; we do not store plaintext passwords).
  • Profile information — display name, handle/username, bio, avatar, and the causes or topics you choose to associate with your page.
  • Connected accounts — if you link a social account (for example, Instagram, TikTok, or YouTube), we receive authorization tokens and the profile/audience metrics those platforms make available (such as follower counts and engagement statistics).
  • Content you create — links, petitions, fundraising configurations, media-kit settings, and other material you publish through the Services.
  • Contact lists you upload or collect — email addresses and associated fields (such as first name, last name, and ZIP code) that you import or that are collected through your petitions and forms. See Section 6 for important responsibilities that apply to lists you provide.

2.2 Information Visitors provide

When a Visitor interacts with a Creator's page, we may collect:

  • Petition signatures — an email address, and (if the Visitor chooses to continue) first name, last name, and ZIP code.
  • Subscriptions — an email address and any optional name fields submitted through a sign-up form.
  • Other form submissions — any information a Visitor enters into a form a Creator has configured.

Form fields are presented at the point of collection. ZIP code, where requested on a petition, helps confirm constituency and support follow-up communications.

2.3 Information we collect automatically

When you use the Services, we and our service providers automatically collect:

  • Engagement events — page views and link clicks, including the path or link involved and the time of the interaction.
  • Technical information — referring URL and browser/device information (user-agent string), and similar request metadata used to deliver and secure the Services.
  • Cookies and similar technologies — see Section 9.

We use this information to operate the Services, produce click and page-view analytics for Creators, prevent fraud and abuse, and improve the product.

2.4 Information from third parties

We may receive information from:

  • Authentication and connected-account providers, when you sign in or link an account.
  • Fundraising platforms (such as ActBlue or GiveButter), which may provide aggregate or campaign-level data about activity attributed to a Creator's links. We do not receive or store payment-card details.
  • Data and analytics partners that help us produce the audience insights described in Section 4.

3. How We Use Information

We use information to:

  • Provide, operate, maintain, and secure the Services.
  • Create and manage Creator accounts and Creator pages.
  • Deliver links, petitions, subscription forms, and fundraising hand-offs.
  • Generate analytics for Creators, such as clicks, page views, and aggregate audience insights.
  • Send transactional and service messages (for example, account, security, and confirmation emails).
  • Detect, investigate, and prevent fraud, abuse, and violations of our Terms.
  • Comply with legal obligations and enforce our agreements.

We will not use information for materially different purposes without providing notice and, where required, obtaining consent.

4. Audience Insights and Aggregation

A core feature of Sosh is helping Creators understand their audiences in aggregate. To do this, we and our partners may match, enrich, and analyze contact information (such as email addresses and ZIP codes) against third-party datasets to derive aggregate characteristics — for example, distributions across geography, generation, and engagement likelihood.

Important limits on this activity:

  • Audience insights are presented to Creators in aggregate form only. Individual-level enriched attributes are not surfaced to Creators about a specific Visitor.
  • Contact-list exports available to Creators are limited to the data the Creator provided or collected (such as email and name) and do not include appended insight attributes.
  • We apply minimums and other safeguards intended to prevent re-identification of individuals from aggregate reports.

Depending on the jurisdiction, enrichment and analytics activities of this kind may be treated as "sharing" or "selling" of personal information. See Section 11 for your choices.

5. How We Share Information

We share information only as described here:

  • Service providers / processors. We use vendors to host and operate the Services, including database and infrastructure hosting, application hosting, email delivery, analytics and data processing, and CRM/operations tooling. These providers may process information only on our behalf and under contractual confidentiality and security obligations. Our current categories of providers include hosting and database infrastructure, an authentication provider, an email-delivery provider, data/analytics platforms, and internal operations tools.
  • Creators. Information a Visitor submits to a Creator's page (such as a petition signature or subscription) is provided to that Creator so they can manage their supporters and communications. The Creator is responsible for its own use of that information.
  • Fundraising platforms. When a Visitor chooses to donate, they are directed to a third-party fundraising platform (such as ActBlue or GiveButter). That platform collects and processes payment and donor information under its own terms and privacy policy. Sosh does not process payments and does not receive payment-card data.
  • Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, and safety of Sosh, our users, or the public.
  • Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not disclose Visitor contact lists to other Creators, and we do not sell personal information for monetary consideration.

6. Creator Responsibilities for Contact Data

Creators who upload, import, or collect contact information through the Services represent and agree that:

  • They have a lawful basis and any necessary consents to collect that information and to have it processed through the Services.
  • They will maintain and honor their own privacy disclosures and applicable opt-out/unsubscribe obligations.
  • They will not upload information they are not permitted to share, and will not use the Services to send unlawful, deceptive, or unsolicited communications.

As between Sosh and a Creator, the Creator is the controller of the contact data it provides, and Sosh processes that data on the Creator's behalf to provide the Services (in addition to Sosh's own permitted uses described in this Policy). Creators are responsible for the legality of the lists they bring to the platform and agree to the indemnification provisions in the Terms.

7. Data Retention

We retain personal information for as long as needed to provide the Services and for the legitimate and lawful purposes described in this Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. Engagement and analytics data may be retained in aggregated or de-identified form for longer periods. When a Creator deletes content or closes an account, we will delete or de-identify associated personal information within a commercially reasonable period, subject to backup cycles and legal retention requirements.

8. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, hashed credentials, and use of reputable infrastructure providers. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting personal information, we will notify affected parties and authorities as required by applicable law.

9. Cookies and Similar Technologies

We use cookies and similar technologies for essential purposes, including keeping Creators signed in (session/authentication cookies) and securing the Services. We may also use limited measurement technologies to understand engagement with Creator pages.

You can control cookies through your browser settings; disabling essential cookies may impair sign-in and other functionality. We honor Global Privacy Control (GPC) and similar opt-out preference signals where required (see Section 11).

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at the address in Section 13 and we will take appropriate steps to delete it.

11. Your Privacy Rights (California / CPRA)

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

11.1 Categories of information

In the past 12 months, we may have collected the following categories of personal information: identifiers (such as name and email); internet/network activity (such as page views, clicks, referrer, and device information); geographic indicators (such as ZIP code); inferences and characteristics used to produce aggregate audience insights; and, for Creators, professional/account information. We collect this information from the sources described in Section 2 and use and disclose it for the purposes described in Sections 3–5.

11.2 Sale / sharing

We do not sell personal information for monetary consideration. However, certain analytics and audience-insight activities described in Section 4 may constitute "selling" or "sharing" under the CCPA/CPRA. You have the right to opt out of such selling or sharing.

11.3 Sensitive personal information

To the extent any information we process is considered "sensitive personal information," we use it only for permitted business purposes and not to infer characteristics about you for purposes that would require an additional right to limit. We do not use or disclose sensitive personal information beyond the purposes allowed under the CCPA/CPRA.

11.4 Your rights

Subject to verification and legal exceptions, California residents have the right to:

  • Know / Access the categories and specific pieces of personal information we have collected.
  • Delete personal information we have collected, subject to exceptions.
  • Correct inaccurate personal information.
  • Opt out of the selling or sharing of personal information.
  • Limit the use of sensitive personal information, where applicable.
  • Non-discrimination — we will not discriminate against you for exercising your rights.

11.5 How to exercise your rights

You may submit a request, including an opt-out of sale/sharing, by emailing privacy@sosh.bio or using our Do Not Sell or Share My Personal Information form. We honor opt-out preference signals such as Global Privacy Control (GPC). You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within the timeframes required by law.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and provide additional notice as required by law. Your continued use of the Services after an update means you accept the revised Policy.

13. Contact Us

Actlink LLC
PO Box 4224, Louisville, KY 40204
Email: privacy@sosh.bio

If you have questions about this Policy or our data practices, please contact us using the information above.