This Privacy Policy describes how MultiPlat ("we", "us", or "our") collects, uses, and discloses your Personal Information when you use our website and service (the "Service"). We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

For the purposes of the GDPR, MultiPlat is the Data Controller of your personal data. If you have any questions, you can contact us at info@multiplat.it.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and encrypted password when you register.
• Authentication Data: OAuth tokens provided when you link third-party accounts (YouTube, Instagram, TikTok).
• Content Data: Video files, titles, descriptions, and metadata you upload for distribution.
• Usage Data: Information about how you interact with our Service (e.g., IP address, browser type, device information).

3. Legal Basis and Purpose of Processing

Under GDPR, we process your data under the following legal bases:

• Contractual Necessity: To provide the core MultiPlat service, including processing and distributing your videos to connected platforms.
• Consent: When you connect third-party accounts, you consent to our processing of OAuth tokens to act on your behalf.
• Legitimate Interests: To improve our platform, ensure security, and prevent fraud.

4. Third-Party Services & API Usage

MultiPlat relies on third-party APIs (Google/YouTube, Meta/Instagram, TikTok). By connecting your accounts, you are also bound by their respective Privacy Policies and Terms of Service. Specifically for Google, our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

We retain your personal information only as long as your account is active or as needed to provide you services. Video files uploaded to our platform are processed securely and deleted from our temporary storage systems immediately after successful publication to your selected platforms. We do not store your video files permanently.

6. Your GDPR Data Protection Rights

If you are a resident of the European Economic Area (EEA), you have the following rights:

• The right to access, update or delete: You can manage your profile data directly in Account Settings.
• The right of rectification: You have the right to have your info rectified if it is inaccurate.
• The right to object & restriction: You can object to our processing or request restriction of processing.
• The right to data portability: You can request a copy of your personal data in a structured format.
• The right to withdraw consent: You can disconnect your social accounts at any time from the Settings page.

7. Security

We value your trust in providing us your Personal Information, thus we strive to use commercially acceptable means of protecting it. Passwords are securely hashed using bcrypt, and API tokens are encrypted at rest. However, remember that no method of transmission over the internet, or method of electronic storage is 100% secure.