Crepo Application Privacy Policy

1. Overview & Purpose

The Crepo application facilitates multi-platform social media publishing, post scheduling, media asset management, and analytics monitoring across supported networks, including TikTok, Meta (Facebook, Instagram, Threads), Google / YouTube, LinkedIn, X (Twitter), and Pinterest.

We respect your privacy and enforce strict data isolation. This policy details how Crepo accesses, handles, stores, and protects data received via third-party developer APIs.

2. Data Collected & Processed by Crepo

When you authorize Crepo to connect to your social media accounts, we collect and store only the minimal technical data required to execute your automated scheduling and publishing tasks:

• OAuth Tokens & Account Identifiers: Encrypted OAuth 2.0 access and refresh tokens, unique channel/profile IDs, and account display names. Crepo never asks for, views, or stores your social media account passwords.
• User-Submitted Content & Media: Post captions, scheduled publishing dates/times, images, and video files uploaded by you to our secure server storage solely for dispatch to your authorized channels.
• Performance & Analytics Data: Read-only engagement metrics (such as post views, impressions, likes, and comment counts) pulled from official APIs to populate your Crepo analytics dashboard.
• Technical System Logs: Web server request timestamps, IP addresses, and API response status codes necessary for audit logging, diagnostics, and service uptime.

3. Platform-Specific Compliance & Disclosures

A. TikTok API Services

• Crepo utilizes official TikTok Developer APIs (including Content Posting API and Display API).
• Permissions requested (such as video.upload, video.publish, user.info.basic) are strictly utilized to publish videos authorized by you and display account connection status.
• We do not share, sell, or monetize any user data obtained via TikTok APIs, nor is it transferred to third-party data brokers.

B. Google & YouTube API Services

• Crepo utilizes official YouTube Data API v3 and YouTube Analytics API services.
• By connecting your YouTube channel, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
• Google API Limited Use Disclosure: Crepo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not sell, rent, or transfer YouTube user data to third parties, nor do we use YouTube data for advertising or training artificial intelligence models.

C. Meta Platforms (Facebook, Instagram & Threads)

• Crepo accesses Facebook Pages, Instagram Professional accounts, and Threads via official Meta Graph APIs adhering strictly to Meta Platform Terms.
• Permissions granted (e.g., pages_manage_posts, instagram_content_publish, threads_content_publish) are utilized exclusively to publish posts created by you and fetch engagement metrics.

D. LinkedIn, X (Twitter) & Other Channels

• Distribution of content to LinkedIn and X is conducted strictly according to their developer terms and data licensing agreements.

4. Data Storage & Security Standards

Crepo operates on isolated, hardened server infrastructure managed by Crevira:

• All communications between your browser, Crepo, and external APIs are strictly encrypted using TLS 1.3 / HTTPS.
• OAuth tokens and confidential credentials are stored encrypted at rest in an isolated PostgreSQL database with no direct public internet exposure.
• Uploaded media is stored in protected local volumes accessible only by Crepo background workers during upload operations.

5. Revocation of Access & Data Deletion

You maintain 100% control over your connected accounts at all times:

• Revoking Access in Crepo: You can disconnect any channel at any time within your Crepo dashboard settings, which permanently deletes the stored OAuth token from our database.
• Revoking Access via Third-Party Portals:
  • TikTok: Navigate to TikTok App > Settings > Security & Permissions > Apps and Services, and remove Crepo.
  • Google/YouTube: Visit the Google Security Permissions Page to revoke Crepo access.
  • Meta: Manage connected business apps via Facebook Business Integrations.
  • LinkedIn: Manage permissions in LinkedIn Account Settings > Data Privacy.
• Requesting Full Account Deletion: You may submit an instant deletion request via our Crepo Data Deletion Instructions Page or email info@crevira.com. Upon receipt, all stored credentials, tokens, and media files are purged within 48 hours.

6. Changes to this Agreement

We may update this Crepo Application Privacy Policy to reflect updates in our features or changes in social platform API policies. Any revisions will be published immediately on this page with an updated effective date.