Controller
[company legal name, legal form, registered address, RCS/SIREN — to complete]. Contact: [privacy e-mail — to complete]. Data protection officer: [if appointed — to complete].
Data we process
| Data | Source | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Wallet address, signed actions (EIP-712), AdPool participation | You (wallet) | Run the service, anti-fraud, payouts | Contract | While the account is active; on-chain data is public and permanent |
| Dollar-edition account: e-mail, display name, balance and ledger | You | Sign-in, payments, payouts | Contract; legal obligations (accounting) | While the account is active, then as required by accounting law |
| Linked social accounts (network, handle, how ownership was proven) | You / the network | Prove account ownership, compute rewards | Contract | Until you unlink or delete |
| Connected accounts (see below) | The network, with your consent | Ownership proof, official post statistics, anti-fraud | Contract; consent for the network authorization | See “Connected accounts” |
| Creator directory entries (public handles, follower counts, contact e-mail) | [document the source — to complete] | Let advertisers invite creators | Legitimate interest (opt-out any time) | [to complete] |
| AI Studio inputs (website URL, brief, tone) | You | Generate content | Contract | Not stored beyond the request; sent to Google Vertex AI |
| Technical logs (IP address, user agent, request path, trace id) | Automatic | Security, abuse prevention, debugging | Legitimate interest | 30 days (Cloud Logging) |
| Language preference (cookie satt.locale) | You | Remember your language | Strictly necessary | 1 year |
Connected accounts
You can connect a social account with the network’s own sign-in (OAuth). The network then proves the account is yours, and lets SaTT read — read-only — the statistics of YOUR posts to measure AdPool rewards. You choose to connect; nothing is read before you approve the network’s consent screen.
We never post, comment, like or message on your behalf, never read private messages, and never sell, rent or use this data for advertising. The statistics are used only to validate and pay your AdPool participations and to detect fraud (for example bought views).
| Network | Permissions (scopes) | What we read |
|---|---|---|
| YouTube (Google) | youtube.readonly, yt-analytics.readonly | Channel id, @handle, title, subscriber count; your uploads (title, date, thumbnail); views, likes, comments and shares of your videos |
| instagram_basic, instagram_manage_insights, pages_show_list, pages_read_engagement (Facebook Login for Business) | Professional account id, username, follower count; your recent media (caption, date, thumbnail, link); views, reach, likes, comments, shares, saves | |
| Facebook Pages | pages_show_list, pages_read_engagement, read_insights | The Page you manage (id, name, username, followers); its recent posts; reactions, comments, shares and views |
| TikTok | user.info.basic, user.info.profile, user.info.stats, video.list | open_id, username, display name, follower count; your recent videos (title, date, cover, link); views, likes, comments, shares |
| X | tweet.read, users.read, offline.access | User id, username, follower count; your recent posts; impressions, likes, reposts, quotes, replies, bookmarks |
| LinkedIn (limited) | openid, profile (r_member_social only if LinkedIn approves it) | Member id and name; post statistics only with LinkedIn partner approval |
Connected accounts — storage, retention and revocation
- Access and refresh tokens are encrypted (AES-256-GCM) on our servers in the EU (Google Cloud, Belgium). They never leave our servers and are never shown to anyone, you included.
- Tokens are kept until you disconnect the account (or the network revokes them), then deleted immediately.
- Statistics read from the network are cached for at most 24 hours. The measurement that priced a paid post is kept with the payout record for as long as accounting and dispute rules require [duration — to complete].
- Disconnect any time: Account → Connected accounts → Disconnect. We also revoke the authorization at the network when it offers an API for it (Google, X, TikTok, Facebook, LinkedIn). You can also revoke it in the network’s own settings: Google Account → Security → Third-party connections; Instagram → Settings → Apps and websites; Facebook → Settings → Business integrations; TikTok → Settings → Security → Manage app permissions; X → Settings → Security and account access → Connected apps; LinkedIn → Settings → Data privacy → Permitted services.
- Deleting the data: see /data-deletion. Meta (Facebook/Instagram) deletion requests are processed automatically and give you a confirmation code.
Google and YouTube data
SaTT’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is accessed through the YouTube API Services: see the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy). You can revoke SaTT’s access at https://security.google.com/settings/security/permissions.
Processors and recipients
Google Cloud (hosting in the EU, logging, Vertex AI), Cloudflare (DNS), Stripe (dollar-edition payments and payouts), WalletConnect/Reown (only when you connect a mobile wallet), public blockchain RPC providers, and — for connected accounts — the network you connected (Google/YouTube, Meta, TikTok, X, LinkedIn), which receives our API requests made with your authorization. Transfers outside the EU rely on the European Commission’s standard contractual clauses.
Your rights
Access, rectification, erasure, objection (including to the creator directory), restriction and portability: write to [privacy e-mail — to complete]. You can complain to the CNIL (cnil.fr). On-chain transactions cannot be erased — a public blockchain is permanent by design.