Privacy Policy

Last updated: October 10, 2026

This Privacy Policy explains how Connector Social ("Connector Social", "we", "us") collects, uses, shares and protects information when businesses use our platform and when they connect third-party accounts such as TikTok, Instagram, Facebook, WhatsApp and Google (Google Calendar, Google Sheets, Google Business Profile, Google Ads and YouTube). Connector Social is a business tool: our customers are companies ("Customers") and the people they authorize to use the platform ("Users").

1. Information we collect

• Account information: name, email address, company name and settings provided when a Customer or User creates an account.
• Connected social accounts: when a User connects a social account using the official login of the network (for example "Log in with TikTok" or Instagram Business Login), we receive an access token and the data covered by the permissions the User approves, such as: account ID, username, display name, profile picture, follower counts; posts and videos of the account and their metrics (views, reach, likes, comments, shares, saves); comments on the account's own posts; direct messages sent to the business account (where the network provides them); and, for advertising accounts the User authorizes, campaign structure and performance reports.
• Content you provide: captions, images and videos that Users upload to publish, and replies they write to messages and comments.
• Usage and technical data: log data, IP address, browser type and actions taken in the platform, used for security and to operate the service.

2. How we use information

• To provide the features the Customer requested: show messages and comments in the inbox, send replies written by Users, publish content chosen by Users, display analytics and ad reports.
• To keep the service secure, prevent abuse and troubleshoot problems.
• To communicate with Customers about their account and the service.

We do not sell personal information. We do not use data received from TikTok, Meta or other platforms to build advertising profiles, and we do not share it with data brokers. Data received from a platform is used only to provide the Customer's own features, in accordance with that platform's terms and policies.

3. How information is shared

• With the Customer: data of a connected account is visible only to the Users of the Customer that connected it.
• With the platforms themselves: when a User publishes content or sends a reply, we send it to the corresponding network through its official API.
• Service providers: hosting, storage and email providers that process data on our behalf under confidentiality obligations.
• Legal reasons: when required by law or to protect rights and safety.

4. Data retention

We keep data while the Customer's account is active and the social account remains connected. When a social account is disconnected or its authorization is revoked, we stop accessing it and delete the stored access tokens. Customers can ask us to delete their data at any time; we complete deletion within 30 days, except where we must keep information to comply with legal obligations.

5. Your choices and data deletion

• Disconnect a social account at any time in Settings > Connections.
• Revoke access directly in the network: TikTok (Settings and privacy > Security > Manage app permissions), Instagram (Settings > Website permissions > Apps and websites) or Facebook (Settings > Apps and websites).
• Request access, correction or deletion of your data by writing to privacy@uni6.net. See also Data deletion instructions.

6. Google user data

When a User chooses to connect a Google account, Connector Social requests only the permissions needed for the feature the User is enabling, and uses the data only to provide that feature inside the Customer's own account:

• Google Calendar (calendar): read the calendars the User selects and create, update or cancel the appointments the Customer's team schedules in the platform, so the two agendas stay in sync.
• Google Sheets and selected Google Drive files (spreadsheets, drive.file): read and write rows in spreadsheets the User chooses to use with the platform, for example to import contacts or record new leads. Users can provide a spreadsheet link or select a file through Google Picker where configured. The drive.file permission applies only to files selected or used with the app; new connections do not request read access to the entire Google Drive.
• Google Business Profile (business.manage): list the business locations the User manages, show and reply to customer reviews, publish posts on the profile and display performance metrics.
• Google Ads (adwords): list the advertising accounts the User can access and read campaigns, ad groups, ads and performance metrics, including impressions, clicks, cost and conversions, to display campaign dashboards and reports.
• YouTube (youtube.upload, youtube.readonly, yt-analytics.readonly): identify the connected channel, show its videos and channel statistics, upload videos explicitly selected by the User with the title, description and visibility the User chooses, and retrieve channel analytics for the reporting period requested by the User. Connector Social uses YouTube API Services. Google handles information according to the Google Privacy Policy. Users can revoke access through their Google security settings and request deletion of data stored by Connector Social using the contact in section 5. Deleting data stored by Connector Social does not delete videos or other content stored on YouTube.
• Basic profile (userinfo.email, userinfo.profile): identify which Google account was connected and show its name and email on the connection.

Google user data is stored on our servers, encrypted in transit, and is visible only to the Users of the Customer that connected the account. We do not sell Google user data, we do not use it for advertising or to build profiles, we do not transfer it to third parties except service providers that host the platform on our behalf, and we do not allow humans to read it unless the Customer asks for support, it is necessary for security purposes or it is required by law. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.

Connector Social's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A User can disconnect the Google account at any time in Settings > Connections (or in the corresponding integration page), which deletes the stored tokens, and can also revoke access at myaccount.google.com/permissions. Data imported from Google is deleted on request as described in section 5.

7. Security

We use encryption in transit (HTTPS), access controls and monitoring to protect information. Access tokens are stored on our servers and are never shown to other Customers.

8. Children

Connector Social is intended for businesses and is not directed to children under 13 (or the minimum age in their country). We do not knowingly collect data from children.

9. International transfers

Our servers are located in Brazil. By using the service, Customers understand that information may be processed in Brazil and in the countries where our providers operate, with appropriate safeguards.

10. Changes

We may update this policy. We will post the new version on this page and update the date above.

11. Contact

Questions about privacy: privacy@uni6.net.