PRIVACY POLICY

We provide this Privacy Policy to inform you of our policies and procedures regarding the collection, use, protection, and disclosure of Personal Information received from your use of this website, located at https://otoposto.com (“Site”), as well as all related websites including our subdomains, applications, browser extensions, and other services provided by us (collectively, together with the Site, our “Service”), and in connection with our customer, vendor, and partner relationships.

This Privacy Policy also informs you of your rights and choices concerning your Personal Information under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws, and how you can contact us to update your information or ask questions regarding our privacy practices.

Your registration, use, and access to the Service are subject to this Privacy Policy.

INFORMATION WE COLLECT

“Personal Information” refers to any information relating to an identified or identifiable individual.

PROVIDED BY YOU

Registration:
If you wish to access certain restricted sections of the Site or request marketing materials, you may be required to register and submit Personal Information, including your name, email address, password, and city.

Purchases:
When you make payments through the Service, we will collect payment information, such as your billing address and payment method details.

Social Media:
To enable posting on your social media platforms, we will request your username, account IDs, and related credentials.

  • Facebook: Profile image, display name, page ID, access tokens
  • Instagram: Profile image, username, access tokens
  • LinkedIn: Profile image, display name, username/page ID, access tokens
  • Tiktok: Profile image, username, access tokens
AUTOMATICALLY COLLECTED

Log Data:
We automatically collect information like IP address, browser type, pages visited, and timestamps.

  • Usage data: time of login, interactions, preferences
  • Device and browser data: IP address, browser type, operating system
  • Cookies and tracking: only 1 cookie for keeping you log in.

Third-Party Web and Buttons
Third-party features, such as “Link your Instagram/Linkedin account”, may collect certain information.

HOW WE USE YOUR PERSONAL INFORMATION


We may use your Personal Information to:

  • Provide, maintain, and improve the Service
  • Ensure the security of the Service
  • Comply with legal obligations
  • Respond to your inquiries and support needs
  • Communicate with you regarding updates or promotional offers (only where permitted)
  • We store your Personal Information only for as long as necessary for the purposes outlined above, and in accordance with legal requirements.

HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. However, to provide and improve the Otoposto platform, we may share certain types of information with trusted third parties, as outlined below:

SOCIAL MEDIA PLATFORMS

If you choose to connect your social media accounts to Otoposto, we may share information (such as post content, images, scheduling times) with those platforms to enable automated publishing and engagement analytics. This is done strictly based on your authorization and within the scope of your permissions.

SERVICE PROVIDERS (PROCESSORS)

We use third-party service providers to support our operations and deliver key functionality. These providers may access your information only to perform services on our behalf and are contractually obligated to handle your data securely and in accordance with applicable data protection laws. These services include:

  • Cloud hosting (AWS)
  • Image generation and AI processing
  • Paiement processing (Stripe)
  • Analytics and performance tracking tools
  • Email delivery and customer support tools

All processors are contractually bound by Data Processing Agreements (DPAs) to ensure they:

  • Process data only as instructed by us
  • Implement adequate technical and organizational security measures
  • Do not use your personal data for their own purposes
LEGAL REQUIREMENTS AND PROTECTION

We may disclose your information if we believe it is necessary to:

  • Comply with applicable laws, regulations, legal processes, or governmental requests
  • Enforce our Terms of Service or protect the security and integrity of the platform
  • Detect, prevent, or address fraud, security, or technical issues
  • Protect the rights, property, or safety of our service, our users, or others

DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting obligations, or to resolve disputes and enforce our agreements.

DATA SECURITY

We use reasonable administrative, technical, and physical safeguards to protect your Personal Information. However, no system can be completely secure, and we cannot guarantee absolute security.

USER RIGHTS (UNDER THE GDPR)

As we are a company based in the European Union, even if you are not from the EU, you have specific rights under the General Data Protection Regulation (GDPR) regarding the processing of your personal data. We are committed to ensuring that you can easily exercise these rights.

Right of Access (Article 15 GDPR)
You have the right to request access to the personal data we hold about you, including information on how we use it, who we share it with, and how long we store it.

Right to Rectification (Article 16 GDPR)
You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure (“Right to Be Forgotten”) (Article 17 GDPR)
You may request the deletion of your personal data where:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent (where processing is based on consent)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Note: We may retain certain information as required by law or to defend legal claims.

Right to Data Portability (Article 20 GDPR)
Where processing is based on your consent or a contract, and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller where technically feasible.

INTERNATIONAL DATA TRANSFERS

As a company established in the European Union, we store and process most of your personal data within the European Economic Area (EEA). Our servers and main infrastructure are hosted in France or other EU countries, ensuring that your data is handled under strong European privacy standards.

However, in some cases, your personal data may be transferred to and processed in countries outside the EEA, particularly when we use services provided by third parties such as Meta Platforms, Inc. (Facebook/Instagram) or Microsoft, Inc. (LinkedIn) and other providers who may operate globally.

CHILDREN’S PRIVACY

Our service is not intended for use by individuals under the age of 16.

We do not knowingly collect or process personal data from children under 16 years old. By using our platform, you confirm that you are at least 16 years of age. If you are under this age, you are not permitted to use our service, create an account, or provide any personal information.

Because our services may involve payment processing and account registration, we require users to be at least 16 years old to ensure compliance with applicable data protection and financial regulations.

If we become aware that we have inadvertently collected personal data from a person under 16 without proper consent, we will take steps to delete such data as quickly as possible.

If you believe we might have information from or about a child under 16, please contact us.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We encourage you to review it periodically. Your continued use of the Service after an update constitutes your acceptance of the revised Privacy Policy.

Last update 1st of June, 2025.