Privacy Policy — Hybrid One

1. Introduction

This Privacy Policy describes how Hybrid One (“we”, “us”, or “our”) handles information when you use our website and choose to authorize or connect third-party accounts, including social media, advertising, cloud, and analytics providers (for example: Meta/Facebook and Instagram, Google and Google Drive, TikTok, YouTube, LinkedIn, Amazon, and similar platforms — collectively, “Connected Platforms”).

Connected Platforms are independent services. Their use of your data is governed by their own privacy policies and terms. This policy explains our role when you connect those accounts through our application.

2. Information we process when you connect a platform

When you complete an authorization (such as OAuth) with a Connected Platform, we may receive and store information needed to operate the integration, which may include, depending on the platform and the permissions you grant:

Account identifiers (for example user IDs, page IDs, channel IDs, advertiser or account IDs)
Profile or display information (such as names, usernames, avatars, or email where provided by the platform)
Access tokens, refresh tokens, or similar credentials that the platform issues so we can access the resources you approved
Content or metadata returned by the platform’s APIs (for example posts, pages, files, campaigns, ads summaries, or analytics-related data), only within the scope you authorized
Technical logs (such as timestamps of syncs, error codes, or request metadata) used to maintain security and reliability

We do not ask you to share passwords for Connected Platforms; authentication is performed through the platform’s own sign-in and consent screens.

3. How we use this information

We use connected account data only to:

Establish and maintain the connection you requested
Sync, display, or report information in line with features you use (for example dashboards or admin tools)
Operate, secure, debug, and improve our service
Comply with applicable law and respond to lawful requests

4. Legal bases (where applicable)

Where required by law (for example under the GDPR), we rely on appropriate bases such as: performance of a contract with you, your consent when you authorize a Connected Platform, legitimate interests in providing a secure service (balanced against your rights), or legal obligation.

5. Third parties and processors

Connected Platforms process data under their own policies when you use their login or APIs. We may use hosting, database, email, or other infrastructure providers (“subprocessors”) to run our application. We instruct them to process data only as needed to provide our service.

6. Retention

We keep connection-related information only as long as needed for the purposes above or as required by law. You may disconnect or revoke access through the platform’s settings where available, or contact us to request deletion of data we hold about your connection, subject to legal retention requirements.

7. Security

We use reasonable technical and organizational measures to protect credentials and personal data. No method of transmission or storage is completely secure; we encourage you to use strong passwords on your accounts and to review permissions you grant to apps on each Connected Platform.

8. International transfers

Our servers or subprocessors may be located in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) in line with applicable law.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, or to port data, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below.

10. Children

Our service is not directed at children. We do not knowingly collect personal information from children below the age where parental consent is required in your jurisdiction.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the service after changes constitutes acceptance where permitted by law.

12. Contact

For privacy questions or requests, contact the operator of Hybrid One at the official contact address or email published for this service (replace this sentence in your deployment with real contact details).