Contents
1. Who we are
This platform, "Hioneonly" (the "Platform"), is operated by Hidoly s.r.l., registered office at Via Alessandro Riberi n. 4, 10124 Torino (TO), Italy, VAT no. IT10678120014 (REA TO-1153153) ("we", "us", "our"). We are the data controller for the personal data described in this policy.
You can reach us at areait@hidoly.com.
2. What data we collect
We collect only the data we need to provide the Platform:
- Account data — name, email address and login credentials you use to create and access your account.
- Content you provide — text, images, videos, brand materials and links you upload or create to generate and manage your content.
- Connected-account data — the information described in the "Connected accounts and third-party data" section below, for any channel you choose to connect.
- Usage data — technical logs such as IP address, browser type and actions in the Platform, used to keep the service secure and working.
3. Connected accounts and third-party data
Connecting a third-party channel (such as a social network or business profile) is optional and always started by you. If you connect an account through that platform's official authorization flow, we access a limited set of data strictly to provide the publishing feature:
- Basic profile information — the display name, avatar and account identifier of the account you connect, used only to show which account is connected inside the Platform.
- Publishing permission — used only to publish content you create in the Platform (such as videos, images and posts) to the accounts you connect, with the caption you provide, and only when you choose to publish.
- Access tokens issued by the connected platform, stored securely and used only to perform the actions above on your behalf.
We request only the minimum permissions each platform requires for these features. We do not read your private messages, browse other users' content, collect analytics about your followers, or post anything without your explicit action. Our use and transfer of information received from each platform's APIs adheres to that platform's developer terms and any applicable limited-use requirements.
4. How and why we use your data
- To create your account and provide the Platform's features.
- To generate content based on the materials and instructions you provide.
- To publish content to the channels you have connected, when you ask us to.
- To keep the service secure, prevent abuse and troubleshoot problems.
- To comply with our legal obligations.
We do not sell your personal data, and we do not use data from your connected accounts for advertising or profiling.
5. Legal basis
Under the EU General Data Protection Regulation (GDPR), we process your data on the basis of:
- Performance of a contract — to deliver the service you signed up for.
- Consent — for connecting third-party accounts such as TikTok; you can withdraw consent at any time by disconnecting the account.
- Legitimate interests — to keep the Platform secure and functioning.
- Legal obligation — where the law requires us to keep certain records.
6. Sharing and third parties
We share data only as needed to run the Platform:
- Channels you connect (e.g. TikTok, Meta, Google Business Profile) — content you choose to publish is sent to those platforms and governed by their own terms and privacy policies.
- AI and infrastructure providers — used to generate content and host the service, acting as our processors under appropriate agreements.
- Authorities — where required by law.
7. Data retention
We keep your data for as long as your account is active. Access tokens for connected channels are kept only while that account is connected and are deleted when you disconnect it or close your account. Logs are kept for a limited period for security and legal purposes.
8. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can also lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali). To exercise your rights, contact us at areait@hidoly.com.
9. Disconnecting accounts and deleting your data
You are always in control of the accounts you connect:
- Disconnect any connected account at any time from within the Platform; this immediately stops any future publishing and deletes the stored access tokens for that account.
- You can also revoke access from that platform's account settings, under connected apps.
- To delete your account and associated data entirely, contact us at areait@hidoly.com and we will process your request without undue delay.
10. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls and secure storage of credentials and tokens — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to address any incidents promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the Platform.
12. Contact
For any question about this policy or your data, contact Hidoly s.r.l. at areait@hidoly.com.