Privacy Policy
This Privacy Policy describes how JH Digital ("we", "us", "our") collects, uses, and protects personal data in connection with Istari Content, a social media content creation and publishing platform available at contenu.istari-conseil.com (the "Service").
The Service is operated by JH Digital in partnership with Istari Conseil, an accounting and advisory firm operating in Paris, France and Lisbon, Portugal. JH Digital acts as the data controller for the personal data processed through the Service, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data we collect
We collect only the data necessary to operate the Service:
- Account data — name, email address, and organization details you provide when an account is created for you.
- Connected social media account data — when you authorize the Service to access your social media accounts (YouTube, Instagram, Facebook, TikTok), we receive OAuth access tokens and basic public profile information (account name, identifier, profile picture) provided by the platform's official API. We never receive, see, or store your social media passwords.
- Content data — videos, images, captions, and scheduling information you create or upload to the Service for publication.
- Usage and analytics data — publication statistics (views, engagement metrics) returned by the social media platforms' APIs for content published through the Service, and standard technical logs (IP address, browser type, timestamps) required for security and operation.
2. How we use your data
- To operate the Service: schedule and publish content to the social media accounts you have connected, at your instruction.
- To display performance analytics for your published content.
- To provide support and communicate with you about the Service.
- To secure, maintain, and improve the Service.
We do not sell personal data. We do not use your data for third-party advertising. We do not use your content or data to train artificial intelligence models.
3. Third-party platform APIs
The Service integrates with social media platforms exclusively through their official APIs: the YouTube Data API (Google), the Meta Graph API (Facebook and Instagram), and the TikTok API (Login Kit and Content Posting API). Your use of these platforms through the Service is also governed by their own terms and privacy policies:
- Google Privacy Policy: policies.google.com/privacy — YouTube API Services Terms: developers.google.com/youtube/terms
- Meta Privacy Policy: facebook.com/privacy/policy
- TikTok Privacy Policy: tiktok.com/legal/privacy-policy
Access tokens granted through these platforms are stored encrypted and are used solely to perform the actions you request (publishing content, retrieving analytics). You can revoke the Service's access at any time from the security settings of each platform (Google Account permissions, Facebook/Instagram Business Integrations settings, TikTok app permissions), or by asking us to disconnect the account.
4. Data storage and security
- All Service data is hosted on servers located in France (European Union).
- All traffic is encrypted in transit (TLS/HTTPS). OAuth tokens and credentials are stored encrypted at rest.
- Access to production systems is restricted to authorized personnel of JH Digital and Istari Conseil.
5. Data retention
- Account and content data are retained for as long as your account is active.
- When an account is closed, associated personal data and stored tokens are deleted within 30 days, except where a longer retention period is required by law.
- You may request deletion of specific content or of your entire account at any time (see Section 7).
6. Data sharing
We share data only with:
- The social media platforms you have connected, to the extent necessary to publish your content and retrieve your analytics (this is the purpose of the Service).
- Technical service providers strictly necessary to operate the Service (hosting), bound by data processing agreements.
- Public authorities where required by law.
7. Your rights (GDPR)
You have the right to access, rectify, erase, and port your personal data, to restrict or object to its processing, and to withdraw consent at any time. To exercise these rights, contact us at bonjour@istari-conseil.com. We respond within 30 days. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).
8. Cookies
The Service uses only cookies that are strictly necessary for authentication and session management. No advertising or third-party tracking cookies are used on this site.
9. Children
The Service is intended for professional use by adults and is not directed at children under 16. We do not knowingly collect data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be notified to active users by email.
11. Contact
JH Digital, in partnership with Istari Conseil — Paris, France · Lisbon, Portugal
Email: bonjour@istari-conseil.com
Website: istari-conseil.com