Privacy Policy

1. Controller

Tommy Schlenker
Stieberstr. 40A
02625 Bautzen
Germany
Email: contact@iplayscout.com

2. Overview

This policy explains how we process personal data when you visit our website or use our content upload automation service (e.g., TikTok / YouTube / Instagram / Facebook uploads). We do not sell personal data.

3. Website Visits (server logs)

When you access our website, our hosting provider may automatically process server log data (e.g., IP address, date/time, requested URL, user agent). This is typically necessary to deliver the website securely and reliably.

• Purpose: security, abuse prevention, error analysis, and reliable delivery
• Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure operation)
• Recipients: hosting provider / infrastructure providers (processors)
• Retention: generally up to 14 days unless longer retention is required for security incidents

4. Cookies and analytics

We do not use tracking cookies, advertising cookies, or analytics tools on this website. If we introduce such tools in the future, we will update this policy and, where required, implement consent mechanisms.

5. Contacting us

If you contact us (e.g., by email), we process the information you provide to handle your request.

• Purpose: communication and request handling
• Legal basis: Art. 6(1)(b) GDPR (pre-contract/contract) or Art. 6(1)(f) GDPR (legitimate interest)
• Retention: as needed to handle the request; longer if legal obligations require it

6. Content upload automation service (OAuth + uploads)

If you use our upload automation service, you authorize our application to interact with your social media accounts. We use this authorization only to perform the actions you request (e.g., upload/publish content).

6.1 Data categories

• OAuth tokens / credentials: used to maintain authorization
• Account identifiers: basic identifiers needed to select the correct channel/page/account
• Uploaded content & metadata: files you provide (video/image), captions, timestamps, upload status
• Service logs: minimal technical logs for troubleshooting and abuse prevention

6.2 Purposes and legal bases

• Providing the service (uploads/publishing): Art. 6(1)(b) GDPR
• Security and abuse prevention: Art. 6(1)(f) GDPR
• Compliance with legal obligations (if applicable): Art. 6(1)(c) GDPR

6.3 Platforms and permissions (examples)

We request only what is necessary for uploads. The exact permissions depend on the platform and your use case.

TikTok

• user.info.basic – identify your account
• video.upload – upload video files
• video.publish – publish or create drafts

YouTube

• youtube.upload – upload videos to your channel
• youtube.readonly – read basic channel info to confirm the correct account

Instagram

• instagram_basic – basic profile info
• instagram_content_publish – publish photos/videos

Facebook

• pages_read_engagement – identify your page
• pages_manage_posts – create/publish posts

6.4 Recipients / processors

• Social platforms (TikTok / Google / Meta) receive the data necessary to perform uploads.
• Hosting/infrastructure providers (processors) may process data to operate the service.

6.5 International transfers

Some providers/platforms may process data outside the EU/EEA (e.g., in the United States). Where required, transfers are based on appropriate safeguards such as Standard Contractual Clauses (Art. 46 GDPR) and/or other applicable transfer mechanisms.

6.6 Retention

• OAuth tokens: stored until you revoke access or we delete them upon request; may be retained longer if required to defend legal claims.
• Video files: processed temporarily and deleted within 48 hours after upload (unless you request otherwise).
• Upload metadata/logs: retained up to 30 days for troubleshooting, then deleted or anonymized.

7. Your rights (GDPR)

You may have the following rights, depending on the circumstances:

• Access (Art. 15), rectification (Art. 16), deletion (Art. 17)
• Restriction (Art. 18), portability (Art. 20), objection (Art. 21)
• Withdraw consent at any time (Art. 7(3)) where processing is based on consent

To exercise rights, contact: contact@iplayscout.com

8. Complaints

You have the right to lodge a complaint with a supervisory authority. For Germany, you may contact your competent state authority. A directory is available at: bfdi.bund.de

9. Security

We implement appropriate technical and organizational measures to protect personal data (e.g., access controls, least privilege, and secure storage practices). No online service can guarantee absolute security.

10. Changes

We may update this policy from time to time. The “Last updated” date indicates the current version.