1. Introduction
This Privacy Policy describes how Viral Digital Dynamics SAS ("Company," "we," "us," or "our") operates the Flaab platform ("Flaab", "Service", or "Platform") accessible at https://flaab.app. Flaab is a content management platform that allows users to store photo/video content and publish to social media platforms including Instagram, TikTok, Threads, X, LinkedIn, and YouTube Shorts.
By accessing or using Flaab, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use Flaab.
2. Who We Are
Flaab is operated by Viral Digital Dynamics SAS, a company registered in France. For GDPR purposes, we are the data controller responsible for your personal data collected through Flaab.
Contact Email: team@flaab.app
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, email, profile info via Clerk (auth provider).
- Content: Media files (photos, videos), captions uploading/publishing.
- Social Media Info: Access tokens, profile names, etc. for connected accounts.
- Communications: Support requests and feedback.
- Payment Information: Billing details via third-party processor (we do not store full card numbers).
3.2 Information from Connected Accounts
We receive data via platform APIs when you connect accounts:
- Instagram: Account ID, username, profile picture, publishing permissions.
- TikTok: Account ID, display name, avatar, content-posting permissions.
- LinkedIn: Account ID, username, posting permissions.
- YouTube: Channel ID and title, metadata of your published videos, YouTube Analytics reports, and comments on your own videos. Adheres to Google API Services User Data Policy.
- Threads: Account ID, username, profile picture, publishing and insights permissions.
- X: Account ID, username, profile picture, publishing permissions and public post metrics.
3.3 Automatically Collected Info
- Device/Browser Data (IP, OS, etc.)
- Usage Data (Features used, timestamps)
- Cookies (Session maintenance, analytics)
4. How We Use Your Information
5. Legal Basis (EEA/UK)
We process data based on:
- Contract Performance: To provide the requested Service.
- Consent: For specific actions like connecting social accounts (withdrawable).
- Legitimate Interests: Improving service, security, provided not overridden by rights.
- Legal Obligation: Compliance with laws.
6. How We Share Informations
We do not sell your personal information.
We share information only for:
- Social Media Platforms: Transmitting content/metadata to platforms you connect (Instagram, TikTok, etc.) per your instruction.
- Service Providers: Trusted third parties like Clerk (auth), cloud hosting, payment processors, and analytics.
- Legal Requirements: Responding to legal process or protecting rights/safety.
- Business Transfers: Mergers or acquisitions (with notification).
7 & 8. Data Retention & Security
Retention: Account data is kept while active. Content is kept until deleted. Social tokens are removed upon disconnection. Usage data is retained up to 12 months.
Security: We use encryption (TLS/SSL), secure token storage, and access controls. However, no internet transmission is 100% secure.
9. Your Rights and Choices
For all users:
- Access, correct, or delete personal info.
- Disconnect social accounts anytime.
- Withdraw consent.
EEA/UK: Rights to restriction, portability, objection, and lodging complaints (e.g., CNIL in France).
California (CCPA/CPRA): Rights to know, delete, opt-out (we don't sell/share), and non-discrimination.
Contact privacy@flaab.app to exercise rights.
10. Cookies
We use Strictly Necessary (e.g., auth), Analytics, and Preference cookies. You can manage these in browser settings.
11 & 12. Third-Party Terms & YouTube API
Use of social features binds you to platform terms (Meta, TikTok, LinkedIn, YouTube).
YouTube API Specifics
Flaab uses YouTube API Services to publish videos to your channel, to read that channel's analytics, and to read and answer the comments left on your own videos. By using this, you agree to YouTube ToS and Google Privacy Policy.
- What we read: your channel id and title, the metadata of videos your channel published, YouTube Analytics reports for that content, and the comments left on those videos — never another channel's.
- What we write, and only when you ask for it: videos you compose in Flaab, replies you type to a comment, and hiding or unhiding a comment on your own video. Flaab never deletes a comment, and never edits your videos, ratings or captions.
- AI-suggested replies: when you open a comment awaiting an answer, its text and its author's display name are sent to our AI provider so it can draft replies you may edit, use or ignore. Flaab does not use this data to train or improve any model.
- Retention: stored YouTube data is deleted within 30 days, and immediately when you disconnect the channel or delete your account.
- No advertising, no data mining, and no sale of your YouTube data.
- Revoke access at Google Security Settings.
13, 14, 15. Additional Provisions
- Children: Service not for under 16s. We do not knowingly collect child data.
- International Transfers: Data may be processed internationally with appropriate safeguards (Standard Contractual Clauses).
- No Sale: We do not sell/share personal info for value or behavioral ads.