Privacy Policy

Last updated: September 2026

What the hub is

Social Lab Connect Hub (sociallabconnect.com), operated by Social Lab (Briefiction), links the business tools a merchant already uses (such as Shopify, Calendly, Google Calendar, Zoho and Stripe) to Social Lab, the merchant's WhatsApp customer messaging platform. It receives events from those tools and, based on rules the merchant sets, sends the merchant's own customers WhatsApp notifications through Social Lab.

Google data we access

• Your Google account email address, to show which account is connected.
• Read-only access to the list of your calendars and to the events on the calendars you choose to sync (title, time, time zone, location, Google Meet link, organizer, attendees and description).

We also create, reschedule and cancel calendar events (with a Google Meet link) on the merchant's behalf, but only when the merchant or their Social Lab agent books, moves or cancels an appointment for one of their customers. We do not change or delete any other events.

How we use it

Calendar events are used only to send meeting confirmations, reminders, reschedule and cancellation notices to the merchant's own customers via WhatsApp through Social Lab. Google data is not sold, not used for advertising, not used to train AI models, and not shared with anyone other than Social Lab for delivering those notifications. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Shopify data we access

When a merchant installs the Social Lab app on Shopify, Social Lab Connect accesses the store's orders, customers and checkouts (customer name, email, phone, address and order details) solely to send order notifications, abandoned-checkout reminders and customer updates through the merchant's own Social Lab (WhatsApp) workspace. Shopify data is not sold and not shared with third parties.

• Shopify access tokens are stored encrypted and readable only by our servers.
• Raw Shopify event payloads are retained for a maximum of 30 days.
• When the app is uninstalled, the access token is deleted immediately and event processing stops.
• All shop data is deleted within 48 hours of uninstall when Shopify sends the shop/redact request.
• A customer's data is deleted when Shopify sends a customers/redact request; customer data requests are answered within 30 days.

Storage and retention

• Google access tokens are stored encrypted and are only readable by our servers.
• Raw incoming events are kept for 30 days, then deleted.
• Processed event summaries and delivery logs are kept while the workspace is active, for auditing.

Disconnecting and deletion

Go to Connections → Google Calendar / Meet → Disconnect. This revokes the hub's Google token via https://oauth2.googleapis.com/revoke and deletes stored tokens immediately. You can also remove access at any time from your Google Account → Security → Third-party access. To delete all workspace data, contact us.

Contact

cs@sociallab.com.sa