This policy explains how Cuore Cavalli Repost, operated by A.S.D. Cuore Cavalli (“we”), handles data. Contact: info@cuorecavalli.it.
Who uses the app
Only the association’s administrators use the app, to publish scheduled posts to the association’s own accounts. Partners only connect their Instagram account to authorize the sharing of their posts.
Data we access
Instagram (partners): username, and the media files and caption of the partner’s latest post, read with the partner’s authorization through Meta’s APIs, only to share that post on our accounts.
Facebook / Instagram (our accounts): page and account identifiers and access tokens needed to publish on our own Pages and Instagram accounts.
TikTok (our account): through Login Kit (scope user.info.basic) we read the account’s display name, username and avatar to show which account receives the posts; through the Content Posting API (scopes video.upload, video.publish) we upload videos and photos and read the publishing status. We do not read followers, messages or any other TikTok user’s data.
YouTube (our channel): through the YouTube API Services (scopes youtube.upload, youtube.readonly) we read the channel name and upload videos to our own channel. By using this feature you agree to the YouTube Terms of Service; see also the Google Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access can be revoked at any time at Google security settings.
Telegram (our channel): a bot token used only to post in our own channel.
How we use and store data
Data is used only to publish the scheduled posts and to show their status to our administrators. Access tokens are stored on our server and are never shared. Media files are kept only as long as needed to publish (temporary copies are deleted within one day; local copies are replaced by the partner’s next post). We do not sell data, do not use it for advertising and do not share it with third parties other than the platforms where the post is published.
Your rights and deletion
Partners can disconnect at any time from the link we sent them or by writing to info@cuorecavalli.it; we then delete their tokens and stored media. Under the GDPR you can request access, correction or deletion of your data at the same address.
Italiano – sintesi
Usiamo i dati solo per pubblicare, sui nostri account, i post dei partner che lo hanno autorizzato. Non vendiamo né cediamo dati. Per richieste o cancellazione: info@cuorecavalli.it.