Privacy Policy
Data controller
Thomas Piot, trading as Situs — 55 rue de la Duchesse d'Uzès, 78120 Rambouillet, France — thomaspiot78@gmail.com.
Data we process
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address, name, password (stored hashed), language, time zone | Create and secure your account | Performance of contract | Until the account is deleted |
| Connected accounts: ID, username, display name, profile picture, access tokens (encrypted) | Publish to the accounts you connected | Performance of contract | Until the account is disconnected or your account is deleted |
| Videos, captions and post settings | Schedule and publish your videos | Performance of contract | Videos: automatically erased 30 days after their last use, or as soon as you delete them. Captions and settings: until the post or your account is deleted |
| Post history (date, status, link, error message) | Show you what was published | Performance of contract | Until the post or account is deleted |
| IP address and technical logs | Security, abuse prevention | Legitimate interest | 12 months at most |
We do not access your private messages, followers or analytics. We sell no data and run no targeted advertising.
Data received from TikTok, Instagram and YouTube
When you connect an account, the platform only sends us the information covered by the permissions shown on its sign-in screen:
- TikTok (
user.info.basicandvideo.publishscopes): account ID, display name, profile picture, username, and the creator’s posting settings (allowed visibility levels, maximum duration, comments, duets and stitches). - Instagram (
instagram_business_basicandinstagram_business_content_publishpermissions): ID, username, name, profile picture and account type. - YouTube (
youtube.uploadandyoutube.readonlyscopes): channel ID, name and image, and the processing status of videos uploaded through Conducteur.
This data is only used to display the account in the app and to publish the videos you schedule. It is never used for any other purpose or shared with any third party other than the platform concerned.
Conducteur uses YouTube API Services. Conducteur’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is also processed in accordance with the Google Privacy Policy. You can revoke Conducteur’s access to your Google account at any time on the Google security settings page.
When you disconnect an account in Conducteur, we immediately revoke the access with the platform and erase that account’s data on our side. If you remove access from the platform itself, we detect it at the next check and erase the account’s data within 30 days. Stored profile information (name, picture) is refreshed at least every 30 days. Videos already published stay on TikTok, Instagram or YouTube: to remove them, delete them on the platform.
Recipients
Your videos and captions are only sent to the platforms you choose, at the time you set: TikTok, Meta (Instagram) and Google (YouTube). These companies then process that content under their own policies and may transfer it outside the European Union. Our hosting provider stores data on our behalf as a processor. The server is located in the United Kingdom (OVHcloud data centre in Erith). The UK benefits from a European Commission adequacy decision, renewed in December 2025, which allows this transfer.
Security
All traffic is encrypted (HTTPS). Platform access tokens are encrypted with AES-256-GCM, passwords are hashed with scrypt, and API keys are stored as fingerprints. The links that let Instagram fetch a video are signed and expire after 24 hours.
Cookies
We use a single, strictly necessary cookie that keeps you signed in. No advertising or analytics cookies, no third-party trackers, no fonts or resources loaded from other sites.
Your rights
You can access, correct, export (Settings → Export my data) or erase (Settings → Delete my account) your data at any time, and object to or restrict processing, by writing to thomaspiot78@gmail.com. We reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Detailed deletion instructions, including for requests received through Instagram, are on the Data deletion page.
Minors
The service is reserved for people aged 15 and over.