Privacy Policy

1. Scope of This Policy

This policy explains how Upload Post Skill (the "Service") handles personal data and authorization data when users connect social platform accounts and request media publishing.

2. Data We Process

• Account binding identifiers (for example platform account ID/open ID and display name when available).
• OAuth authorization artifacts required to perform user-authorized actions.
• Operational metadata (request time, status, error logs, publish IDs, platform response references).
• Media transfer data only when needed for upload execution.

3. How We Use Data

• Establish and maintain authorized account connections.
• Execute user-requested direct-post and creator-controlled draft upload tasks through official APIs.
• Provide task status updates and troubleshoot failures.
• Protect service integrity, prevent abuse, and satisfy legal obligations.

4. Credential Handling and Access Boundary

• OAuth credentials are stored server-side and protected with encryption and access controls.
• Client secrets and refresh tokens are never exposed in user-facing skill responses.
• The skill returns execution results (for example status or post ID), not raw authorization credentials.

5. Data Sharing

We do not sell personal data. We share data only when necessary with:

• Connected platforms to execute authorized uploads/posts.
• Infrastructure and security providers that operate this service under confidentiality controls.
• Authorities when required by law.

6. Retention

• Authorization records are retained while a connection remains active.
• Users may revoke authorization on the platform side or request disconnection.
• Operational logs are retained only as needed for security, reliability, and compliance.

7. International Processing

Depending on platform and infrastructure routing, data may be processed in multiple jurisdictions. Appropriate safeguards are applied according to applicable law.

8. User Rights and Controls

• Users can revoke platform authorization at any time.
• Users can request account unlinking and related data handling actions where applicable.
• Users can contact us for privacy inquiries or deletion requests.

9. Security

We implement technical and organizational safeguards, including encrypted transport, server access restrictions, and operational monitoring.

10. Policy Updates

We may update this Privacy Policy from time to time. Continued use of the Service after updates constitutes acceptance of the updated policy.

11. Contact

For privacy requests, contact: contact@virtuallive.shop