Privacy Policy

1. Data we collect on this website

Contact and demo requests: if you book a demo or write to us, we receive the details you choose to share (name, email, company, message). Demo bookings are scheduled through Google Calendar's booking page under Google's own terms.

Page view counting: we count page views (page visited, referrer, device type, timestamp) to understand how the site is used. This counting does not use advertising identifiers and this website shows no third party advertising.

Cookies: we count page views anonymously (no IP, no name, no email stored by this site) and set one essential cookie that remembers your cookie choice, plus your language preference. Microsoft Clarity heat maps run only after you press Accept in the cookie banner, and this website contains no advertising scripts of any kind.

2. Data we process for clients (social media services)

When clients connect their social media accounts, we access those accounts solely through the official APIs and authorised tools of Meta Platforms (Instagram, Facebook), TikTok, Google (YouTube), X, LinkedIn and Reddit, with the scopes the client approves, to create and publish content, read and answer comments and messages, and report performance.

In doing so we may process personal data contained in comments, messages and audience statistics on behalf of the client, who remains the data controller of their community data; we act as processor under their instructions.

We do not sell personal data. We do not use platform data for advertising to third parties, profiling unrelated to the contracted service, or any purpose beyond providing the service.

3. YouTube API Services

Where a client connects a YouTube channel, PAPS Studio uses YouTube API Services. By authorising that connection, the client also agrees to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of data is described in the Google Privacy Policy (https://policies.google.com/privacy).

You can revoke PAPS Studio's access to your Google/YouTube data at any time via Google security settings: https://myaccount.google.com/permissions. API data obtained from YouTube is used only to provide the contracted service, is not shared with third parties except as required to provide it, and is refreshed or deleted in line with the authorised scopes and this policy.

4. Meta, TikTok, X, LinkedIn and Reddit platform data

Data received from Meta Platforms, TikTok, X, LinkedIn or Reddit APIs is used only to provide the contracted service to the client who authorised the connection, in accordance with each platform's developer terms.

Deletion: clients and their end users can request deletion of platform data we hold by emailing support@paps.ai. We honour verified requests within thirty days, and clients can additionally revoke our access from each platform's security or connected apps settings at any time, which stops further processing immediately.

5. Legal bases and retention

We process data to perform a contract (service delivery), for our legitimate interest in operating and securing this website (page view counting), or with your consent where required. We keep data only as long as needed for those purposes, for the duration of the client relationship plus statutory retention periods, after which it is deleted or anonymised.

6. Sharing and international transfers

We share data only with processors needed to run the service: hosting and content delivery (Vercel), email and productivity (Google Workspace), and the social platforms named above, each under their own safeguards. Where data leaves your jurisdiction we rely on recognised transfer mechanisms such as standard contractual clauses.

7. Your rights

You may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time, by writing to support@paps.ai. If you are in the EU or EEA you also have the right to complain to your local supervisory authority.

8. Security and children

We apply appropriate technical and organisational measures, including encryption in transit, least privilege access and platform official authorisation flows. Our services and this website are directed at businesses and are not intended for children under 16; we do not knowingly collect their data.

9. Changes and contact

We may update this policy; the current version is always published here with its date. Questions or requests: support@paps.ai.