Privacy Policy

1. Controller and contact

Deep Sweden AB is the controller for personal data processed through Deep Social Studio, except where a third-party platform acts as a separate controller under its own privacy policy.

2. Data we process

Account and contact data

Your name, email address, workspace membership, support messages and account settings.

Connected social account data

When you authorize a platform such as TikTok, we may receive the identifiers, display name, profile image, granted scopes, access token and refresh token made available through the platform's official authorization flow. We do not receive or store your platform password.

Content and publishing data

Drafts, captions, media you select, scheduled times, destination account, approval records, platform post identifiers, publishing status and technical receipts.

Technical and security data

IP address, browser and device information, timestamps, diagnostic logs, security events and limited usage data needed to operate and protect the service.

3. Why we process data

• Provide the service: authenticate users, connect accounts, store drafts, schedule approved actions, publish content and display status.
• Security and reliability: prevent abuse, diagnose failures, maintain audit records and protect users and the service.
• Support: respond to requests and communicate operational information.
• Legal compliance: comply with applicable law, enforce our Terms and respond to lawful requests.

Our legal bases under the GDPR, where applicable, include performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations and consent where specifically requested.

4. TikTok and other platforms

Connecting TikTok is optional. If you choose to connect it, Deep Social Studio uses the permissions displayed in TikTok's authorization flow only for the features you request. TikTok processes data under its own terms and privacy policy. You can revoke access through TikTok's settings or request disconnection from us.

5. Service providers and disclosures

We may use vetted providers for hosting, security, storage, email and operational support. They process data only under our instructions and appropriate safeguards. Data may also be disclosed where required by law, to protect rights and security, or as part of a lawful corporate transaction. We do not sell personal data.

6. International transfers

Some providers or platforms may process data outside Sweden or the EEA. Where required, we use recognized safeguards such as adequacy decisions or standard contractual clauses.

7. Retention

We retain personal data only as long as needed for the purposes above. Connected-platform tokens are retained until you disconnect the integration, delete your account or the authorization expires. After an account deletion request, we aim to delete or irreversibly anonymize service data within 30 days, except where limited records must be retained for security, dispute resolution or legal obligations.

8. Security

We use reasonable technical and organizational measures including access controls, encrypted transport, restricted secret handling and logging of sensitive publishing actions. No system can guarantee absolute security.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent where processing is based on consent. You may also complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

10. Disconnecting TikTok and deleting data

To disconnect TikTok, revoke Deep Social Studio in your TikTok account settings or email us. To request deletion of your Deep Social Studio account and associated personal data, email valueinvestingsweden@gmail.com with the subject “Deep Social Studio data deletion”. We may need to verify your identity before completing the request.

11. Children

Deep Social Studio is not directed to people under 18, and we do not knowingly collect their personal data.

12. Changes

We may update this Policy as the service, platform integrations or legal requirements change. The effective date above will be updated and material changes will be communicated where required.