PruneSocial Start a free preview

Privacy Policy

Effective and last updated: October 23, 2026

This policy explains what information PruneSocial collects, how it's used, and the choices you have. PruneSocial LLC, a Maine limited liability company (“PruneSocial,” “we,” “us”) operates prunesocial.com and the PruneSocial screening tool.

What we collect

When you visit or use PruneSocial, we collect:

When you use the scanning tool, we also process the supported text activity contained in the account exports you choose to submit. Depending on the platform, this can include your posts, comments, replies, recommendations, captions, video titles and descriptions, board and Pin text, group posts and comments, and the bio, About text, or job descriptions from your profile, as well as text from other people's posts you liked or reposted, when the export provides that text. That third-party text is needed to evaluate your like or repost, and it's handled exactly like the rest of your submission. Facebook's export lists the likes and reactions you made without the text of what you reacted to, but it does name the Page or person whose post it was. On your own device we reduce that list to one line per name (the name, how many times you reacted, and the latest date) and send only those names, so they can be screened, for example for a Page that is a hate group. The rest of that file is not sent. A friend's or other person's name can be in that list, and it is handled exactly like the rest of your submission. Export ZIP files you drop into the scan page are opened and read on your own device. The activity files the scan needs are read there, in your browser, and only the text items in them (each with its date, its type, and a link to the item when the export includes one) are sent to us, when you run a free preview or a report. If you tick the box "Also read words inside images I posted" on the scan page (it is off until you do), the scan also reads the words inside images you posted (for example memes, screenshots, and quote cards), and it does this on your own device. The images themselves are never sent to us. Only the words found are sent, each with its date (or a note that the export has no date for it) and the type "Image text", and they are handled exactly like your other text. Images with no readable words produce nothing. We never receive the ZIP itself, your photos or other images, your messages, or posts you've saved. From profile files, only the bio text is sent, never your name, email, phone number, address, or birthday. When you buy a Screening Report, Stripe processes your payment and shares your email address with us so we can deliver it. To prevent abuse of the scanning tool, we record a one-way scrambled fingerprint of your IP address along with a count of recent requests. It can't be turned back into your IP address, and it's deleted within about two days. PruneSocial does not collect private messages, private bookmarks such as posts you saved on Facebook, Instagram, or X, photos or other images (only the words read from images you posted, on your device, as described above), videos, or unsupported export categories. Pinterest works differently: Pins on your non-secret boards are visible to other people, so the text of those Pins is read, including Pins you saved from other people. Secret boards are excluded.

Content-free report statistics. When a report is delivered, we keep a record of counts only: how many items were scored, and how many were Clear, Consider, or Review, broken down by platform, content type, and category, along with how old the flagged items are in broad ranges, whether it was a first or later report from the same purchase, and technical usage figures such as how many AI tokens the report used and what it cost to run. It contains no post text, no email address, no report or payment ID, and only the date (not the time). We use it to measure and improve scoring accuracy and may publish aggregate figures across many reports. We do not try to re-identify these statistics or combine them with other information to identify anyone.

Optional "what are you preparing for" answer and step counts. After you buy a report, you can choose the kind of application you are preparing for, such as a general job search or a public safety application. It is optional, you pick from a fixed list, and we never ask for an employer name. Your answer is added to anonymous counts and is not attached to your order or your email address. For each free preview, we also keep a content-free record of how long it took, how many items it scored and flagged, and what it cost to run, with the date only. We also keep anonymous step counts: that a free preview was started or finished, that checkout was started, or that a purchase was completed. Each count carries only the date, the source you first arrived from, the page you landed on, and your optional answer if you gave one. It contains no email address, no IP address, no payment or report ID, and no post text. We use these counts to learn which guides help people and what to build next, and may publish aggregate figures.

Flag feedback. If you use the "Wrong flag?" link in a report, we receive your report ID, the finding number, the reason you choose, and anything you choose to type in a short optional note. We use it only to improve scoring, and we keep it for up to 90 days, then delete it. Please do not include medical, health, or other sensitive personal information in that form.

Site analytics. We may use Cloudflare Web Analytics, which counts page visits without cookies and without tracking you across other sites. Your browser also remembers how you first arrived and your most recent referral (for example, a search engine, a campaign link, or an ad click identifier added by Google Ads), and if you buy a report, that source is recorded with your purchase so we can learn which channels work. We don't place advertising cookies or third-party tracking code on the site.

Our own visit and click counts. We also count, in our own storage, that a page was opened, that a button leading to the scanner or to our export checklist was clicked, that an export file was read successfully on the scan page, and that you ticked “I requested it” for a platform on the checklist. When an export you ticked is later read on the scan page, we also count roughly how long it took to arrive, as a range such as “one day” or “four to seven days,” never a date. We count that someone returned from a reminder email (with the platform only), and, when a buyer comes back from checkout, which of a few fixed outcomes happened (for example, that their files came back with them). Which platforms you ticked, and when, is also saved in your own browser so the checklist remembers them. It isn’t sent to us beyond that one count, and clearing your browser data removes it. Each count carries only the date, the page, the source you first arrived from, and one fixed label (for example which button, or which platform). It uses no cookies, stores no IP address, and has no ID that could link one visit to another or to you. We do not count anything when your browser sends a Global Privacy Control or Do Not Track signal. We use these counts to see where visitors drop off and what to fix, and may publish aggregate figures. When you run a free preview, we also record counts of how many of your items were likes, comments, posts or other, overall and per platform, as plain numbers with no text, to learn how much of a typical history is likes.

Export-return reminders (optional). If you ask for a reminder to come back for your export, you give us your email address, the platform or platforms you are waiting on, and when you want the reminder. We email you a link to confirm. If you do not confirm, nothing is sent and we delete the request within a day. If you confirm, we send one reminder email at the time you chose, then delete your email address from the reminder system. You can cancel from the link on the confirmation page at any time, which also deletes it. To stop one person's address being used repeatedly, we keep a one-way scrambled code made from the address and platform for about a week. It is made with a secret key we hold, so it can’t be turned back into your address or matched to it without that key. We use the reminder only to send these emails. We do not add you to a mailing list or send marketing from it. Our email provider, Resend, keeps a copy of each email it sends for 30 days, as described below.

Free preview email and follow-up emails (optional). To run the free preview you enter an email address, and each address gets one free preview. We do not email your results. To enforce the one-preview limit we keep a one-way scrambled code made from the address, using a secret key we hold, for about a year. It can’t be turned back into your address. The sample PDF that comes with the preview is made when the preview finishes and is sent straight to your browser. We do not store it or your results. Separately, you can tick an unticked box asking for up to two follow-up emails about finishing your full report. If you do, we also keep your email address, the date, and two counts (how many items the preview scored and how many it flagged, with no post text and no findings) so we can send one email about 3 days after the preview and one about 10 days after it, with a single-use $10 offer. Every email carries an unsubscribe link and our mailing address, and you can also reply to ask us to stop. We delete your address from this list when the second email goes out, when you unsubscribe, or within 30 days at the latest. We do not send these emails to people who have bought a report: when you pay, we keep a one-way scrambled code of the email address on your payment for about 400 days only so that we can skip you. If you use a different email address at checkout than for the preview, we can’t match them. This is separate from the export-return reminders above, which are never used for marketing.

Support email. If you email hello@prunesocial.com, we read your message and reply from a Google Workspace mailbox. We may use Anthropic’s Claude API to help draft a reply, and a person reviews every reply before it is sent. Please don’t send your export files, passwords, or sensitive personal details by email. We keep support emails in our mailbox as long as we need them to help you and for our records, and we delete them on request.

How we use it

Who else sees your data

We use a small number of service providers to operate PruneSocial, Depending on the service, a provider may process information only on our behalf, or may act as an independent controller for limited purposes such as payment processing, fraud prevention, security, or legal compliance:

We do not sell your personal information or disclose your submitted content or report to employers, recruiters, data brokers, or background-check companies, except the service providers necessary to operate PruneSocial, as described above.

How long we keep it

Waitlist emails are kept until you unsubscribe or ask us to delete them. Content submitted for a Screening Report is held briefly in temporary storage on our hosting provider while your report is generated, then deleted as soon as the report is sent, whether generation succeeds or fails. If processing is interrupted before that cleanup can run, an automated cleanup removes the temporary copy within about a day. If you upload files and start checkout but don't complete the purchase, those files are deleted when the checkout expires, about 30 minutes after it starts, and in any case within about 24 hours. Your finished report is stored encrypted for 14 days so you can download it from the private link we email you, then deleted automatically. You can delete it sooner from the download page. The key that opens it is only in your link, after the # sign, which browsers don’t send to servers. We don’t keep that key, so we can’t read the stored copy, and we can’t resend a report. Our email provider, Resend, keeps a copy of the delivery email (the link, not the report) for 30 days. Our AI processor, Anthropic, states that it automatically deletes API inputs and outputs from its systems within 30 days under its standard terms and does not use them for model training, subject to Anthropic's stated exceptions such as usage policy enforcement and legal requirements. You can request deletion of your data at any time by emailing hello@prunesocial.com. We will process verified requests and notify our service providers as required by law, and we will tell you when we have finished or explain any retention period that remains, such as Anthropic's and Resend's standard 30-day retention windows.

Saved in your browser at checkout. If you start checkout with files loaded, the text to be scored is saved in this browser only (not on our servers) for up to 2 hours so your report can start after you pay. It is removed once used, and any expired copy is deleted the next time you open the scan page in that browser. Clearing your browser’s site data removes it sooner.

Comparing your report runs. Each purchase includes more than one report run. So that a later run can show which earlier flags are gone, we keep a scrambled fingerprint of each item flagged in your most recent run, made with a secret key we hold. It contains no text and can't be turned back into your post or matched to it without that key. It is kept with your purchase for up to 70 days after your last run, then deleted.

Notes about an unused purchase. If you buy a report and no report has been run on it a few days later, we may send up to two short service emails (around day 3 and day 10) with the link to your scan page. We use the email address Stripe holds for your purchase and keep only the dates those notes were sent.

Full History, watchlists, and prepaid packs. A report with Full History is scored in several steps, so the ratings for each step, including the text of any flagged items, are also held briefly in temporary storage while the report is built. They are deleted when the report is sent, or if the report fails, and an automated cleanup removes anything left within about a day. A watchlist you enter is used only to search your own submitted content, and is deleted with it. It is matched by our own code, not by the AI scorer, and it can include the names of other people. If you redeem a prepaid pack code, you enter your own email address at checkout like any other buyer. The organization that bought the pack is not told who redeemed a code, and never receives your report or any information about it. We can tell the organization how many of its codes were redeemed, and that is all. The pack buyer gets a private link that shows those counts. A pack's buyer receives the codes by email, and we keep a record of which pack was bought and how many codes it contains. Codes are not tied to any person until they are redeemed.

Health information

The content you submit can include health-related information, including information our automated analysis recognizes or infers from your text. We handle it as described in our Washington Consumer Health Data Privacy Policy and Nevada Consumer Health Data Privacy Policy, and Connecticut Consumer Health Data Privacy Policy, and we ask for your consent, through a separate health information checkbox on the scan page, before anything is sent to us.

Self-review only

PruneSocial is designed and operated solely as a self-review tool. We do not furnish reports to employers, recruiters, background-check companies, or anyone else for employment or any other eligibility decision, and we do not intend to operate as a consumer reporting agency under the Fair Credit Reporting Act. Your report is generated only for you, based on activity from your own social media accounts. We will not confirm, verify, or authenticate a report or its findings for any employer or other third party, and organizations that buy prepaid codes never receive a participant's identity, report, or findings.

Your choices

Children's privacy

PruneSocial is intended for adults evaluating their own employment prospects and is not directed at children. We do not knowingly collect information from anyone under 18.

Where we operate

PruneSocial is a US-based service intended for US users at this time.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page and, where appropriate, notify waitlist members by email.

Contact

Questions about this policy or your data can be sent to hello@prunesocial.com.