Privacy Policy – FlowContent Posztoló

Effective: 2026-10-14

1. Controller

Márk Rescsik, sole proprietor (trading as FlowContent) · 6792 Zsombó, Szegedi út 33., Hungary · VAT/tax no.: 59424215-1-26 · e-mail: rescsik.mark@flowcontent.hu

2. What the service does

FlowContent Posztoló (app.flowcontent.hu) schedules and publishes videos to Facebook Pages, Instagram business accounts, YouTube channels and TikTok accounts that the user connects. It is used by the FlowContent agency and by the clients it invites.

3. Data we process and why

• User account: name, e-mail, password (stored only as a secure hash). Purpose: sign-in. Legal basis: performance of contract.
• Connected social accounts: account/Page/channel ID, name, profile picture URL, and the access and refresh tokens issued by the platform (stored encrypted). Purpose: solely to publish the posts the user scheduled and to check their publishing status.
• Uploaded content: video, cover image, caption, title, time, per-platform settings. Purpose: publishing the post.
• Logs: sign-in, account connection/disconnection, post creation (time, user). Purpose: security and troubleshooting.

We never ask for or store social media passwords. We do not read messages, comments or follower lists, and we do not use the data for advertising, profiling or training AI models. We do not sell data.

4. Platform-specific information

YouTube / Google. This service uses YouTube API Services. By using it you agree to the YouTube Terms of Service; see the Google Privacy Policy for how Google handles data. FlowContent Posztoló's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can also revoke access at any time via the Google security settings page.

Meta (Facebook, Instagram). Data is handled in line with the Meta Platform Terms and Developer Policies. Access can be revoked in Facebook Settings → Business integrations.

TikTok. We use the TikTok Content Posting API under TikTok's developer terms. Before every post the user chooses the visibility and interaction settings. Access can be revoked in the TikTok app (Settings → Security → Manage app permissions).

5. Retention and deletion

• Video and image files are deleted from our server no later than 48 hours after publishing.
• Tokens are deleted immediately when an account is disconnected (and revoked at the platform where supported).
• Post history (caption, time, published post ID) is kept until the user account is deleted; logs for 1 year.
• You can request deletion by e-mail or as described on the Data deletion page; we complete it within 30 days.

6. Processors and storage

Hosting: Sybell Informatika Kft. (Hungary). For publishing, data is sent to the respective platform (Meta Platforms Ireland Ltd., Google LLC, TikTok) on the user's instruction.

7. Security

HTTPS, encrypted token storage (libsodium), hashed passwords, CSRF protection; application code and secrets are kept outside the public web root.

8. Your rights

Access, rectification, erasure, restriction, portability, objection. You may lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu).