Privacy Policy

This Privacy Policy describes how Viral Digital Dynamics SAS ("Company," "we," "us," or "our") operates the Flaab platform ("Flaab", "Service", or "Platform") accessible at https://flaab.app. Flaab is a content management platform that allows users to store photo/video content and publish to social media platforms including Instagram, TikTok, LinkedIn, and YouTube Shorts.

By accessing or using Flaab, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use Flaab.

Flaab is operated by Viral Digital Dynamics SAS, a company registered in France. For GDPR purposes, we are the data controller responsible for your personal data collected through Flaab.

3.1 Information You Provide

• Account Information: Name, email, profile info via Clerk (auth provider).
• Content: Media files (photos, videos), captions uploading/publishing.
• Social Media Info: Access tokens, profile names, etc. for connected accounts.
• Communications: Support requests and feedback.
• Payment Information: Billing details via third-party processor (we do not store full card numbers).

3.2 Information from Connected Accounts

We receive data via platform APIs when you connect accounts:

• Instagram: Account ID, username, profile picture, publishing permissions.
• TikTok: Account ID, display name, avatar, content-posting permissions.
• LinkedIn: Account ID, username, posting permissions.
• YouTube: Channel ID, name, upload permissions. Adheres to Google API Services User Data Policy.

3.3 Automatically Collected Info

• Device/Browser Data (IP, OS, etc.)
• Usage Data (Features used, timestamps)
• Cookies (Session maintenance, analytics)

Service ProvisionManaging accounts, storing content, and publishing to social media.
AuthenticationVerifying identity via Clerk.
ImprovementAnalyzing usage to fix issues and improve features.
CommunicationSending service notifications and support responses.
SecurityFraud prevention and addressing security risks.
ComplianceMeeting legal obligations.

We process data based on:

• Contract Performance: To provide the requested Service.
• Consent: For specific actions like connecting social accounts (withdrawable).
• Legitimate Interests: Improving service, security, provided not overridden by rights.
• Legal Obligation: Compliance with laws.

We do not sell your personal information.

We share information only for:

• Social Media Platforms: Transmitting content/metadata to platforms you connect (Instagram, TikTok, etc.) per your instruction.
• Service Providers: Trusted third parties like Clerk (auth), cloud hosting, payment processors, and analytics.
• Legal Requirements: Responding to legal process or protecting rights/safety.
• Business Transfers: Mergers or acquisitions (with notification).

Retention: Account data is kept while active. Content is kept until deleted. Social tokens are removed upon disconnection. Usage data is retained up to 12 months.

Security: We use encryption (TLS/SSL), secure token storage, and access controls. However, no internet transmission is 100% secure.

EEA/UK: Rights to restriction, portability, objection, and lodging complaints (e.g., CNIL in France).

California (CCPA/CPRA): Rights to know, delete, opt-out (we don't sell/share), and non-discrimination.

Contact privacy@flaab.app to exercise rights.

We use Strictly Necessary (e.g., auth), Analytics, and Preference cookies. You can manage these in browser settings.

Use of social features binds you to platform terms (Meta, TikTok, LinkedIn, YouTube).

• Children: Service not for under 16s. We do not knowingly collect child data.
• International Transfers: Data may be processed internationally with appropriate safeguards (Standard Contractual Clauses).
• No Sale: We do not sell/share personal info for value or behavioral ads.