Privacy Policy for Potapio

1. Introduction

Potapio is an ecosystem of tools for bloggers and experts that helps them run their business online: manage social networks, publish videos, send email and messaging campaigns, accept payments, and use related services under one account. This Privacy Policy explains what information we collect, how we use it, and your rights when you use https://potap.io, Potapio ID, and other Potapio products and subdomains.

By using Potapio, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1. Information You Provide

• Account Data: When you register or sign in with Potapio ID — name, email, password (stored hashed), language preference, and optional profile picture.
• Social Account Connection Data: Account identifiers, email, and basic profile information through platform authentication (Google OAuth for YouTube, Facebook Login for Instagram, TikTok Login Kit, and similar flows).
• Channel / Content Data: Channel or page IDs, usernames, and content metadata needed to publish, show analytics, or run campaigns you start.
• Business Content: Videos, media, audience lists, message texts, and other materials you create or upload.
• Payment-related Data: Billing identifiers and transaction status through payment providers. We do not store full card numbers on our servers.

2.2. Information Collected Automatically

• Auth Tokens: Access and refresh tokens to keep your Potapio session and connected platforms active.
• Log Data: IP address, browser type, timestamps, and requested pages for security and debugging.

3. How We Use Your Information

• Identity and SSO: sign you in once across Potapio products via Potapio ID.
• Social management and publishing: connect channels and publish content when you request it.
• Campaigns and messaging: newsletters and communications you create.
• Payments: invoicing and accepting payments where available.
• Service operation: provide, maintain, secure, and improve Potapio.
• Communication: support requests and critical service alerts.

We do not use your data for advertising or unrelated profiling.

4. YouTube API Services and Google Data

Where a Potapio product uses YouTube API Services, connecting YouTube may grant scopes such as:

• youtube.upload – publish videos
• youtube.readonly – upload status and basic channel info
• yt-analytics.readonly – viewing statistics

Use of Google API data follows the Google API Services User Data Policy, including Limited Use. We do not sell Google user data or use it for advertising.

5. Instagram (Meta) Data

If you connect Instagram, we may use Instagram Graph API / Facebook Login with permissions needed to publish and read engagement you request. Use complies with Meta Privacy Policy and Meta Platform Terms. Revoke via Instagram app permissions.

6. TikTok Data

If you connect TikTok, we may use scopes such as video.publish and user.info.basic. Handling complies with TikTok Privacy Policy and TikTok Developer Terms. Revoke by removing Potapio from TikTok authorized apps.

7. Data Retention and Deletion

We retain data only as long as needed to provide Potapio or as required by law. Temporary media is removed when no longer needed.

You can revoke platform access anytime (Google, Instagram, TikTok permission pages). For full deletion see Data Deletion Instructions or email support@potap.io (within 30 days).

8. Data Sharing

We do not sell personal information. We may share data only with platform APIs you use, payment providers, and hosting infrastructure under confidentiality obligations.

9. Security

HTTPS in transit, protected storage of sensitive tokens, and restricted access to production systems.

10. Your Rights

You may request access, correction, or deletion of your data, and withdraw consent by disconnecting accounts or deleting your Potapio account. Contact support@potap.io.

11. Changes

We may update this policy; the date at the top will change when we do.

12. Contact

• Email: support@potap.io
• Website: https://potap.io