Privacy Policy

1. Controller and contact

Deep Sweden AB is the controller for personal data processed through Deep Social Studio, except where a third-party platform acts as a separate controller under its own privacy policy.

2. Data we process

Account and contact data

Your name, email address, workspace membership, support messages and account settings.

Google sign-in data

You sign in to Deep Social Studio with Google. Google shares your Google account identifier, email address and name (the openid, email and profile permissions). We use them only to identify you and your workspace. We do not store your Google profile picture, do not receive your Google password and do not access other Google data.

Connected social account data

When you authorize TikTok, we receive the account identifier, display name, granted scopes, access token and refresh token needed for the requested integration. We do not request a profile image and do not receive or store your platform password.

Content and publishing data

Captions and media you select for an immediate transfer, destination account, exact approval records, platform tracking identifiers, normalized status and technical receipts. The current edge path processes media for transfer and does not provide a persistent media library or scheduler.

Technical and security data

IP address, browser and device information, timestamps, diagnostic logs, security events and limited usage data needed to operate and protect the service.

3. Why we process data

• Provide the service: authenticate users, connect accounts, record exact approvals, attempt a user-initiated transfer to TikTok and display status.
• Security and reliability: prevent abuse, diagnose failures, maintain audit records and protect users and the service.
• Support: respond to requests and communicate operational information.
• Legal compliance: comply with applicable law, enforce our Terms and respond to lawful requests.

Our legal bases under the GDPR, where applicable, include performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations and consent where specifically requested.

4. TikTok and other platforms

Connecting TikTok is optional. If you choose to connect it, Deep Social Studio uses the permissions displayed in TikTok's authorization flow only for the features you request. TikTok processes data under its own terms and privacy policy. You can revoke access through TikTok's settings or request disconnection from us.

5. Service providers and disclosures

We may use vetted providers for hosting, security, storage, email and operational support. They process data only under our instructions and appropriate safeguards. Data may also be disclosed where required by law, to protect rights and security, or as part of a lawful corporate transaction. We do not sell personal data.

6. International transfers

Some providers or platforms may process data outside Sweden or the EEA. Where required, we use recognized safeguards such as adequacy decisions or standard contractual clauses.

7. Retention

We retain personal data only as long as needed for the purposes above. Encrypted connected-platform records remain stored until a verified manual deletion or disconnection request is completed. Provider expiry or revocation prevents continued authorized use but does not by itself delete the local encrypted record. Deletion and disconnection requests are currently handled through a verified manual support process. Immutable publishing receipts and limited security records may need to be preserved for audit, dispute resolution or legal obligations; we will explain any applicable retention when responding to a verified request.

8. Security

We use reasonable technical and organizational measures including access controls, encrypted transport, restricted secret handling and logging of sensitive publishing actions. No system can guarantee absolute security.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent where processing is based on consent. You may also complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

10. Disconnecting TikTok and deleting data

To stop Deep Social Studio from using TikTok access, revoke it in your TikTok account settings. To request deletion of the encrypted local connection record, email us. To request deletion of your Deep Social Studio account and associated personal data, email valueinvestingsweden@gmail.com with the subject “Deep Social Studio data deletion”. We may need to verify your identity before completing the request.

11. Children

Deep Social Studio is not directed to people under 18, and we do not knowingly collect their personal data.

12. Changes

We may update this Policy as the service, platform integrations or legal requirements change. The effective date above will be updated and material changes will be communicated where required.