Webinar gratuit le 18 juin à 19h - Créer une armée de fans qui achètent tous vos produitsS'inscrire

Published daily · 6+ platforms

← Retour au site

Privacy Policy

Last updated: May 12, 2026

Empire Internet ("we", "our", "the service") operates the platform available at empire-internet.com and its application subdomains. The service allows users to connect their social media accounts (Facebook, Instagram, YouTube, TikTok, LinkedIn, X/Twitter, Threads, Pinterest, etc.) to schedule and publish content. This policy describes how we collect, use, store, share and protect your data.

1. Data Controller

Empire Internet, operated by Kevin Dufraisse.
Contact: kevin@empire-internet.com

2. Data we collect

We collect and process the following categories of data:

  • Account information: email address, name, password (hashed), language preferences.
  • Third-party connection data: OAuth access and refresh tokens (encrypted at rest), public identifiers of the connected account (user ID, page ID, channel name, handle), public profile picture, scope of granted permissions.
  • Content you provide: text, images, videos, captions, hashtags, publication metadata, scheduling calendar.
  • Public statistics: number of views, likes, comments, impressions, followers, as provided by the APIs of connected platforms.
  • Technical data: IP address, browser type, operating system, pages visited, error logs.

We never collect your social media password. Connection is performed exclusively via OAuth 2.0 or each platform's official authentication flow.

3. How we use your data

  • Provide, operate and improve the social media management service.
  • Publish content to your social accounts according to your explicit instructions.
  • Retrieve and display public statistics of your posts.
  • Send service notifications (publication failure, token expiration, etc.).
  • Ensure security, prevent fraud, and comply with our legal obligations.

We never use your data to train AI models, run advertising, build marketing profiles or resell it to third parties.

4. Legal basis (GDPR)

Processing is based on the performance of the service contract (GDPR Article 6.1.b), your explicit consent for connecting third-party platforms (Article 6.1.a), and our legitimate interest in security and service improvement (Article 6.1.f).

5. Data sharing

Your data is never sold. It is shared only with:

  • The social media platforms you have explicitly connected, strictly to publish content or retrieve statistics you have requested.
  • Our technical sub-processors bound by confidentiality: hosting (Coolify / European VPS), database (Supabase / PostgreSQL), transactional email delivery.
  • Competent authorities when legally required.

6. Data retention

  • Account data: duration of account activity.
  • OAuth tokens and social connections: until the user disconnects the platform or deletes the account.
  • Scheduled content: until publication or user deletion.
  • Public statistics: 24 months maximum.
  • After account deletion, all your data is permanently erased within 30 days. See our data deletion page.

7. Compliance with connected platforms

7.1 Meta (Facebook & Instagram)

Our use of data obtained through the Meta APIs (Facebook Login, Pages API, Instagram Graph API, Threads API) complies with the Meta Platform Terms and Meta Developer Policies.

Data processed: Facebook/Instagram ID, public name and picture, Page IDs, Page access tokens, ability to publish on Pages you manage, public statistics (impressions, reach, engagement). We do not access your private messages or your news feed.

You can revoke our access at any time via Facebook → Settings → Business Integrations or Instagram → Apps and Websites. To request deletion of your Meta data, follow the instructions on our Data Deletion page.

7.2 Google API Services and YouTube

Empire Internet uses the YouTube API Services to enable publishing videos to our users' YouTube channels.

Empire Internet's use of information received from Google APIs, including the YouTube API Services, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

By using the YouTube features of our service, you also agree to the YouTube Terms of Service and the Google Privacy Policy.

Data processed via the YouTube API: channel ID, channel name, public thumbnail, ability to upload videos, public video statistics.

You can revoke Empire Internet's access to your Google/YouTube data at any time via Google → Security → Third-party apps with account access.

7.3 TikTok

Our use of the TikTok Login Kit and Content Posting API complies with the TikTok Developer Terms of Service and the TikTok Privacy Policy.

Data processed: public display name, avatar, open_id, ability to post videos.

To revoke access, go to the TikTok app → Settings & privacy → Manage authorized apps and websites.

7.4 LinkedIn

Our use of LinkedIn APIs (Sign In with LinkedIn, Share on LinkedIn, Marketing Developer Platform) complies with the LinkedIn API Terms of Use.

Data processed: public name, picture, LinkedIn ID, IDs of company Pages you manage, ability to publish.

You can revoke access via LinkedIn → Settings & Privacy → Data privacy → Other applications → Permitted services.

7.5 X (formerly Twitter)

Our use of the X API complies with the X Developer Agreement and Policy.

Data processed: handle, public name, ID, avatar, ability to publish.

You can revoke access via X → Settings → Connected apps.

7.6 Other platforms (Threads, Pinterest, Reddit, etc.)

For any other connected platform, our use of data complies with the respective developer terms and privacy policies of that platform.

8. Your rights (GDPR and equivalent laws)

You have the following rights at any time:

  • Right of access, rectification and erasure of your data.
  • Right to data portability (export in a machine-readable format).
  • Right to object and to restrict processing.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with a supervisory authority (for EU residents, the French CNIL: cnil.fr).

To exercise these rights, contact us at kevin@empire-internet.com. We respond within 30 days.

9. Data deletion

You can request full deletion of your data at any time. See our dedicated page: empire-internet.com/data-deletion.

10. Security

We implement technical and organizational measures to protect your data: AES-256 encryption of OAuth tokens at rest, HTTPS/TLS transport, restricted database access, access logging, hosting within the European Economic Area.

11. Cookies

We use only strictly necessary cookies (authentication, language preferences, security). No advertising or third-party tracking cookies are used without explicit consent.

12. International transfers

Data is stored within the European Economic Area. When you publish to a third-party platform, your content is transmitted to that platform's servers, which may process it in other jurisdictions under their own terms.

13. Minors

The service is not intended for individuals under 16. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us for immediate removal.

14. Changes

This policy may be updated. In case of material change, we will notify you by email or through the platform at least 30 days before the change takes effect.

15. Contact

For any question about this policy or your data:
Empire Internet — Kevin Dufraisse
kevin@empire-internet.com