1. About Our App and Service
This privacy policy applies to our social media management application ("the App") that helps content creators publish and schedule posts across multiple social media platforms including Instagram, YouTube, and TikTok.
Google Services and Privacy:
Our Service uses Google API Services, including YouTube API. Your use of Google services through our platform is also governed by the Google Privacy Policy. Please review Google's privacy policy to understand how Google collects and processes your data when you use our YouTube integration features.
TikTok Services and Privacy:
Our Service uses TikTok's Content Posting API to publish content to your TikTok account. Your use of TikTok services through our platform is also governed by the TikTok Privacy Policy. Please review TikTok's privacy policy to understand how TikTok collects and processes your data when you use our TikTok integration features.
App Functionality
Our app provides the following features:
- Content creation tools for social media posts
- Scheduling and automated publishing to connected platforms
- Account management for multiple social media platforms
- Analytics and performance tracking
- Media library for organizing content assets
Data Controller
The controller for data processing on this website is:
2. Data We Collect and Why
2.1 Personal Information - Required for Core App Functionality
We collect the following personal information to provide our social media management services:
- Account information (name, email address): Required to create and manage your user account, send important notifications, and provide customer support
- Profile information: Used to personalize your experience and display your content preferences
- Social media account access tokens (encrypted): Essential for publishing content to your connected Instagram, YouTube, and TikTok accounts on your behalf
- Content you create: Stored to enable scheduling, publishing, and content management features
2.2 Technical Information - For App Performance and Security
- IP address and device information: Used for security, fraud prevention, and to ensure proper app functionality
- Browser type and version: Helps us optimize the app experience for your device
- Usage data and analytics: Collected to improve app performance and identify popular features
- Cookies and session data: Required to keep you logged in and maintain your preferences
Why we need social media access: Our app requires permission to post content to your social media accounts. We only use these permissions to publish content you explicitly create and schedule through our platform. We never access your private messages, personal posts, or other account data beyond what's necessary for content publishing.
3. How We Use Your Data
We use your personal data for the following purposes:
- Providing and maintaining our social media management service
- Publishing content to your connected social media accounts
- Improving our service and developing new features
- Communicating with you about your account and our service
- Ensuring security and preventing fraud
- Complying with legal obligations
4. Legal Basis for Processing
We process your personal data based on:
- Contract performance: To provide our social media management services
- Legitimate interests: To improve our service and ensure security
- Consent: For marketing communications and analytics (where required)
- Legal obligation: To comply with applicable laws and regulations
5. Data Sharing and Third Parties
We share your data only in the following specific circumstances:
- Social Media Platforms (Instagram, YouTube, TikTok): We share only the content you explicitly choose to publish through our app. This includes posts, captions, hashtags, and media files you've created for publishing.
- Google/YouTube Services: When you use our YouTube integration, we use Google API Services to publish content to your YouTube channel. Your data processed through Google services is subject to the Google Privacy Policy. We only access and use the specific YouTube data you authorize through OAuth permissions (video upload and channel information).
- TikTok Services: When you use our TikTok integration, we use TikTok's Content Posting API to publish content to your TikTok account. Your data processed through TikTok services is subject to the TikTok Privacy Policy. We only access and use the specific TikTok data you authorize through OAuth permissions, including:
- Video upload and publishing
- Your TikTok profile information (username, avatar)
- Privacy settings and interaction preferences (comments, duets, stitches)
We do not access your private messages, followers list, or other personal TikTok data beyond what's necessary for posting content on your behalf. You maintain full control over your TikTok account and can revoke our access at any time through TikTok's privacy settings. - Essential Service Providers: We use trusted third-party services for cloud hosting (data storage), analytics (app performance), and security services. These providers are contractually bound to protect your data and use it only for providing services to us.
- Legal Requirements: We may disclose your information only when required by law, court order, or to protect our rights and the safety of our users.
Important: We never sell, rent, or trade your personal data to third parties for marketing purposes. Your content and personal information remain under your control.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access and disclosure
- Accidental or unlawful destruction
- Loss, alteration, or damage
Your social media account tokens are encrypted and stored securely.
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit the processing of your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Where processing is based on consent
To exercise these rights, please contact us at contact@theholygrailcompany.com
How to Delete Your Data and Revoke Access
Option 1: Delete Data Through Our App
- Log into your Viral Assistant account
- Go to Settings → Account Settings
- Click "Delete Account" to permanently remove all your data
- This will delete all stored content, preferences, and account information
Option 2: Revoke Access to Google/YouTube Data
You can revoke our app's access to your Google/YouTube data at any time through Google's security settings:
- Visit https://security.google.com/settings/security/permissions
- Find "Viral Assistant" in the list of apps with access to your account
- Click "Remove Access" to revoke our permissions
- This immediately prevents our app from accessing your YouTube data
Option 3: Request Data Deletion via Email
Contact us at contact@theholygrailcompany.com with the subject line "Data Deletion Request" and we will delete your data within 30 days.
Important: When you revoke access through Google's security settings or delete your account, we will immediately stop accessing your Google/YouTube data. Any data we have stored will be deleted within 30 days, except where we are legally required to retain it.
8. Data Retention
We retain your personal data only for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.
9. International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.
10. Permissions and Access Scopes
Our app requests specific permissions from social media platforms to function properly:
Instagram Permissions
- instagram_basic: Access basic account information
- instagram_content_publish: Publish photos, videos, and stories to your Instagram account
- pages_show_list: Access your connected Facebook pages (required for Instagram Business accounts)
YouTube Permissions
- youtube.upload: Upload videos to your YouTube channel
- youtube.readonly: View your channel information
Revoking YouTube Access: You can revoke our access to your YouTube data at any time by visiting Google's security settings and removing Viral Assistant from your connected apps. See Section 7 for detailed instructions.
TikTok Permissions
- video.publish: Publish videos to your TikTok account
- user.info.basic: Access basic profile information
Permission Transparency: We only request the minimum permissions necessary to provide our content publishing service. You can revoke these permissions at any time through your social media platform settings or by disconnecting your accounts in our app.
11. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your login session
- Remember your preferences
- Analyze usage patterns
- Improve our service
You can control cookies through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes:
- We will notify you via email (if you have an account with us)
- We will post a notice in the app
- We will update the "Last updated" date at the top of this policy
- For significant changes, we may request your renewed consent
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
13. Contact Us and Data Protection Officer
If you have any questions about this Privacy Policy or our data practices, please contact us: