Privacy Policy

1. General Terms

Personal data operator: social.vastny, email: info@vastny.com.

This Policy applies to data processing on the website, in the user workspace, during payment-related interactions, support requests, and use of connected digital product features.

2. Processing Principles

• data is processed lawfully, fairly, and transparently;
• only data necessary for specific purposes is processed;
• the scope of data corresponds to the stated purposes;
• data is stored only for as long as required for the service, contract, or law.

3. Data Categories

The service may process data of registered users, visitors, payers, support contacts, and counterparties.

• identity data: email, name, and information provided by the user;
• account data: user identifier, Social activation date, plan, settings, and login history;
• service data: uploaded videos, posts, drafts, captions, selected platforms, schedule, channel settings, and interface actions;
• integration data: connected TikTok, Instagram, and YouTube account identifiers, basic profile data, OAuth tokens, granted scopes, publication status, and published URLs;
• technical data: IP address, cookies, localStorage, browser, device, and access logs;
• consent data: document version, acceptance date and time, source, IP address, and browser information;
• payment and contract data: selected plan, payment status, requests, and obligation performance;
• communication data: support messages and request handling results.

4. Processing Purposes

• confirming the account and providing access to the Social workspace;
• performing the contract and providing content publishing functionality;
• saving settings, plans, sessions, publications, and integration statuses;
• measuring product usage, improving the service, and diagnosing errors;
• maintaining security and preventing abuse;
• handling support, refunds, and legally significant requests;
• sending service notifications and, with separate consent, marketing communications.

5. Legal Bases

• the user's consent to personal data processing;
• conclusion and performance of a contract;
• compliance with legal obligations;
• legitimate interest in keeping the service secure and reliable.

6. Consent

Before signing in or creating access, the user confirms acceptance of this Privacy Policy and consent to processing data required for the service. The consent record may include the document version, date and time, IP address, browser information, and acceptance source.

If this Policy changes materially, the service may request renewed consent before the user continues working in the workspace.

7. Data Transfers and Processors

Data may be transferred to third parties only when there is a legal basis and only to the extent required for the website and service: hosting, cloud infrastructure, analytics, email delivery, payments, authorization, and social platform integrations, including TikTok, Instagram, and YouTube when selected by the user.

Connected social platforms may receive data needed to upload, publish, schedule, or track user-selected content only after the user's action and within the selected integrations.

8. YouTube API Services

When a user chooses to connect YouTube, social.vastny uses Google OAuth and the YouTube API Services only for the channel that the user selects. Depending on the permissions granted, the service receives and uses the channel identifier and basic channel information, OAuth authorization data, video metadata selected by the user, publication status and URL, and performance metrics for videos published through the workspace.

This data is used to connect the selected channel, upload or manage user-selected videos, display the publication result, and show analytics in the user's workspace. It is not sold or used for advertising. The user's use of YouTube is also subject to the Google Privacy Policy.

Before an action that uploads, updates, shares, or deletes YouTube content, the user selects the relevant channel or video in the workspace. The user may withdraw access at any time by disconnecting YouTube in Social Vastny or through Google Security settings. Disconnecting stops further API access and removes the OAuth authorization data stored for the active connection; it does not itself delete a video that has already been published on YouTube.

To request deletion of YouTube API data held by Social Vastny, email info@vastny.com from the account email and identify the connected channel. We verify the request and delete the associated stored YouTube API data without undue delay, and no later than seven calendar days after verification, unless retention is required by law. YouTube videos can be removed from YouTube only by the channel owner or through an authorized YouTube action.

YouTube API data is retained only for the purpose for which the user authorized it. We refresh or delete stored YouTube API data in line with the applicable YouTube API Services policies; analytics data is shown only while the channel remains authorized for that purpose.

9. Cookies, Analytics, and Local Storage

The website uses cookies, localStorage, and similar technologies for authorization, session storage, analytics, abuse prevention, and marketing scenarios.

10. Retention and Deletion

Data is stored no longer than required for processing purposes, contract performance, limitation periods, and mandatory legal requirements. After the purposes are achieved, data is deleted, anonymized, or blocked unless longer retention is required by law.

11. User Rights

• receive information about personal data processing;
• request correction, blocking, or deletion of inaccurate data;
• withdraw consent to personal data processing;
• object to processing where legally applicable;
• appeal operator actions to an authorized authority or court.

12. Requests and Updates

Requests about data processing, consent withdrawal, data correction, or deletion should be sent to info@vastny.com.

The operator may update this Policy. The new version applies from publication on this page unless stated otherwise in the updated document.