Privacy Policy
Last updated: October 30, 2026
1. Information for users
FX FOR A LIVING, S.L.N.E., hereinafter the DATA CONTROLLER, is the controller of users' personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The following information on processing is provided:
Purpose of processing
Maintaining an educational and/or commercial relationship with the User.
Processing operations
- Sending educational and/or commercial promotional communications by email, fax, SMS, MMS, social communities or any other electronic or physical medium, present or future, that enables such communications. These communications will be sent by the DATA CONTROLLER and will relate to its products and services, or those of its collaborators or suppliers with whom it has entered into a promotional agreement.
- Carrying out statistical studies.
- Processing orders, requests or any type of query submitted by the user through any of the available contact channels.
- Sending the website newsletter.
Data retention criteria
Data will be retained for as long as there is a mutual interest in maintaining the purpose of processing. Once no longer necessary for that purpose, data will be deleted using appropriate security measures to ensure pseudonymisation or complete destruction.
Data sharing
We will not share your personal data with third parties unless we are legally required to do so or have previously agreed to it.
In order to provide you with an adequate service and manage our relationship with you as a client, the categories of companies that process your data on behalf of FX FOR A LIVING, S.L.N.E. — as part of the services we have contracted from them — are tax and accounting advisory and management companies, and information technology services companies.
We also inform you that, for the same purpose stated above, certain companies providing services to FX FOR A LIVING, S.L.N.E. may access your personal data (international data transfers). Such transfers are made to countries with a level of protection equivalent to that of the European Union (European Commission adequacy decisions).
For more information, please contact us at: support@contentflow365.com.
User rights
- Right to withdraw consent at any time.
- Right to access, rectification, portability and erasure of your data, and to restriction of or objection to its processing.
- Right to lodge a complaint with the supervisory authority (aepd.es) if you consider that the processing does not comply with applicable regulations.
Contact details to exercise your rights
Postal address: FX FOR A LIVING, S.L.N.E. C/La Añaza, 29 1º Dcha, 35500 Arrecife (Las Palmas).
Email: support@contentflow365.com
2. Mandatory or optional nature of information provided by the User
By ticking the relevant boxes and entering data in fields marked with an asterisk (*) in the contact form or download forms, users expressly, freely and unambiguously accept that their data is necessary for the provider to handle their request, while the inclusion of data in the remaining fields is voluntary. The User warrants that the personal data provided to the DATA CONTROLLER is accurate and undertakes to notify any changes to that data.
The DATA CONTROLLER informs users that, whenever it intends to transfer personal data, it will first request the express, informed and unambiguous consent of the Users.
All data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the User. If not all data is provided, we cannot guarantee that the information and services provided will be fully suited to your needs.
3. Security measures
In accordance with the provisions of current data protection regulations, the DATA CONTROLLER is complying with all GDPR requirements for the processing of personal data under its responsibility, and in particular with the principles set out in Article 5 of the GDPR, under which data is processed lawfully, fairly and transparently in relation to the data subject and is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
The DATA CONTROLLER warrants that it has implemented appropriate technical and organisational policies to apply the security measures required by the GDPR in order to protect users' rights and freedoms, and has provided users with the information necessary to exercise those rights.
4. YouTube API Services integration
ContentFlow365 uses Google's YouTube API Services (YouTube Data API v3 and YouTube Analytics API) to provide the following features to the User once they have explicitly connected their YouTube channel through Google's OAuth 2.0 flow:
- Publishing videos created by the User to their YouTube channel (
youtube.upload). - Setting a custom thumbnail on the uploaded video (
youtube). - Publishing a pinned comment on the uploaded video (
youtube). - Changing the video privacy status (from unlisted to public) on the date scheduled by the User (
youtube). - Displaying the User's public and private channel and video statistics in their internal dashboard (
youtube.readonly,yt-analytics.readonly).
4.1 Acceptance of Google and YouTube terms
By using ContentFlow365's YouTube integration, the User expressly agrees to be bound by the YouTube Terms of Service and Google's Privacy Policy.
4.2 What data we obtain from YouTube and how we use it
ContentFlow365 only obtains and stores from YouTube API Services the data strictly necessary to provide the User with the features described above:
- OAuth tokens (access token and refresh token) — stored encrypted in our database and used exclusively by our backend services to execute the operations authorised by the User. They are not shared with third parties or used for any other purpose.
- YouTube channel ID and name connected to the account, as well as the email address associated with the Google account — displayed in the User's internal dashboard so they can identify which channel is connected and disconnect it if they wish.
- Video metadata published by the User through the platform (title, description, tags, publication date, YouTube video ID) — stored in our database to display publication status, link to analytics, and allow the User to manage their published video history.
- Aggregated channel statistics (views, subscribers, interactions, watch time) — shown to the User in their internal analytics dashboard. This data is temporary and periodically refreshed from the YouTube Analytics API.
ContentFlow365 does NOT transfer, sell, share or disclose to any third party the data obtained from YouTube API Services. Data is used exclusively within the private scope of the User who connected it. The only exception is when you yourself ask an AI assistant you have connected to ContentFlow365 to show you that data (section 11): in that case it is returned only to you, through that assistant, to provide the feature you requested.
4.3 YouTube data storage and retention
OAuth tokens are stored encrypted in databases hosted in the European Union (Supabase, Frankfurt) and remain active until the User explicitly revokes the integration. Published video metadata is retained for the lifetime of the User's account on the platform. Upon account cancellation, this data is deleted within a maximum of 30 days.
Aggregated channel statistics are periodically refreshed and may be cached for up to 24 hours to reduce calls to the YouTube Analytics API. This data never leaves ContentFlow365's servers.
4.4 How to revoke ContentFlow365's access to your YouTube account
The User can revoke ContentFlow365's access to their YouTube data at any time using either of these two methods:
- From ContentFlow365: go to Social Hub → Accounts, find the "YouTube Direct connected" card and click "Disconnect". Revocation is immediate: the access token is invalidated, the refresh token is marked as inactive in our database, and ContentFlow365 can no longer make YouTube API calls on behalf of the User.
- From Google security settings: go to https://myaccount.google.com/permissions, find "ContentFlow365" in the list of authorised third-party apps and click "Remove access". This action revokes access on Google's side and propagates the invalidation to our servers on the next token use attempt.
4.5 Limited Use — compliance with YouTube API policies
ContentFlow365's use of information received from Google APIs, including the transfer of that information to any other application, adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Meta and Instagram integration
ContentFlow365 allows customer businesses to voluntarily connect their Facebook Pages and professional Instagram accounts through Meta's authorisation process. Each business chooses which assets to connect and which automations to enable.
5.1 Data we receive
Depending on the permissions granted and features used, we may process:
- OAuth tokens and granted permissions, stored only in access-restricted server-side infrastructure.
- Asset identifiers and metadata, such as Facebook Pages, professional Instagram accounts, usernames and selected media.
- Comment and webhook data, such as comment ID, text, date, related media and the app-scoped Instagram identifier.
- Delivery identifiers and statuses required to record a public or private reply and prevent duplicate sends.
5.2 How we use this data
We use this data only to provide features configured by the customer business: display and select its own assets, detect keywords in comments on supported posts, Reels, Stories or Live broadcasts, publish a reply under the comment, send one private reply with the requested resource, and display automation status and errors. We do not sell this data or use it to build our own advertising profiles.
5.3 People who comment or reply
A person does not need to be a ContentFlow365 customer for Meta to send us the minimum data from their interaction with a professional account managed by a customer. That data is processed on behalf of the business that configured the automation, solely to respond to the requested interaction, prevent duplicates and maintain an operational and security record.
5.4 Retention, disconnection and deletion
Connection data is retained while the integration remains active and for as long as needed to maintain the operational history requested by the customer. When Meta is disconnected, we stop using the token. The account owner or a person who interacted with it may request deletion of associated data; we will complete the request within 30 days, except where legal or security obligations apply.
See the public Meta and Instagram data-deletion instructions.
6. Google Ads, Data Manager and Google Analytics integration
ContentFlow365 lets each customer business voluntarily connect its own Google user and select the Google Ads Customer it wants to manage. The authorisation is bound to the corresponding ContentFlow account and does not grant access to other customer businesses.
6.1 Data we receive
Depending on the features enabled by the business, we may process only:
- Encrypted OAuth token, authorising-user email and granted scopes, stored in access-restricted server-side infrastructure.
- Google Ads identifiers, configuration and metrics for the selected Customer: campaigns, ad groups, ads, assets, targeting, comments, conversions and statistics required to display and manage them.
- First-party data intended for Customer Match. Identifiers are normalised and hashed before transmission; ContentFlow365 requires confirmation of a valid consent basis and does not retain unhashed identifiers in the upload record.
- Read-only Google Analytics 4 metadata, such as accounts, properties and audiences, so the business can select the correct measurement source. ContentFlow365 cannot modify Analytics data with this permission.
6.2 How we use this data
We use it only to display real information from the accounts selected by the User and to execute advertising actions the User previews and expressly confirms. Campaigns, ad groups and ads created by ContentFlow365 are paused by default. We do not activate spend automatically, use this data for our own advertising, or use it to train artificial-intelligence models.
6.3 Security, retention and disconnection
Tokens are encrypted before storage and bound to one ContentFlow account and its selected Customers. They are retained while the integration remains active or until Google revokes them. Operational history is retained for the life of the account and deleted within 30 days after cancellation, except where legal or security obligations apply.
The User can withdraw authorisation from Google Ads → Connection & setup → Disconnect, or from their Google Account permissions. On disconnection, ContentFlow365 removes the stored authorisation and stops making calls on the User's behalf; it does not delete existing Google accounts, campaigns or videos.
6.4 Limited use and no disclosure
ContentFlow365 does not sell, rent or disclose data received from Google APIs. Its use and any permitted transfer adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Google Calendar integration
ContentFlow365 lets an authorised account member voluntarily connect their own Google Calendar from the private Sales & CRM workspace. The authorisation is isolated to the matching ContentFlow account.
7.1 Data we receive
- Encrypted OAuth access and refresh tokens, authorising-user email and granted scopes, stored only in access-restricted server-side infrastructure.
- Calendar identifiers, names, access roles and time zones so the user can select the correct calendar.
- Free/busy time ranges required to display availability without disclosing unrelated event content.
- Event identifiers, titles, start/end times and links needed to display and manage the events selected or created by the user.
7.2 How we use this data
We use Google Calendar data only to list the connected user's calendars, show availability and upcoming events, and create, edit or delete an event after an explicit user action. We do not use Calendar data for advertising, sell it, disclose it to unrelated third parties, or use it to train general-purpose artificial-intelligence models.
7.3 Security, retention and revocation
OAuth tokens are encrypted before storage and never exposed to the browser. Connection metadata is retained while the integration remains active. Calendar responses are limited to the active account and are not retained beyond what is necessary to provide the requested feature. Disconnecting immediately removes the stored OAuth credentials; minimal audit metadata is retained only where required for security, fraud prevention or legal compliance.
The user can disconnect Google Calendar from Sales & CRM → Calendar → Connections, or remove ContentFlow365 from Google Account connections. ContentFlow365 then stops making Calendar API calls on the user's behalf.
7.4 Limited Use and no disclosure
ContentFlow365's use and any permitted transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Pinterest Ads integration
After Pinterest's specific approval and a separate enablement step, ContentFlow365 may offer a read-only view that lets an authorised User inspect their own Pinterest advertising accounts. This feature remains separate from organic publishing and is not enabled merely by connecting Pinterest.
9.1 Authorisation and permissions
The initial phase requests ads:read in addition to the organic permissions only when the User enables Pinterest Ads. billing:read will be requested only if read-only access to billing profiles and invoices is separately enabled. This phase does not request ads:write, billing:write, catalogue, lead-form, conversion, beta or restricted permissions.
9.2 Data we query
- Connection: encrypted OAuth credentials, granted scopes, expiry and technical connection status.
- Advertising accounts: identifier, name, country, currency, time zone and owner permissions needed to validate and display the selected account.
- Structure and performance: campaigns, ad groups and ads, their relationships, objective, format, settings, budgets or caps, configured status, delivery or review status, and aggregated metrics such as spend, impressions, clicks, CTR, conversions, leads or checkouts.
- Read-only supporting data: audiences without member lists; conversion tags and setup status without Conversion API events or personal identifiers; and, only with
billing:read, billing identifiers, type, brand, status and invoice amounts, never full card or bank-account numbers.
9.3 Purpose and limits
We use this data solely to let the User select their own advertising account, inspect a dashboard, hierarchy and delivery or review status, measure performance and diagnose configuration. We do not sell or disclose it, combine it across ContentFlow accounts, use it for our own advertising, profile individuals or train artificial-intelligence models.
9.4 Querying, retention and security
Pinterest Ads responses are queried live, returned as private non-cacheable content and not stored in the database or as persistent connection metadata. They remain only transiently during the authenticated request or session. Tokens are encrypted server-side and retained while the connection is active; minimum technical logs contain neither tokens nor the response body returned by Pinterest.
9.5 Enablement, disconnection and deletion
Initial access is restricted to the internal team and is read-only: it does not create, edit or activate campaigns, ads or audiences, send conversion events or initiate spend. Customer access requires Pinterest Standard approval and the corresponding review. On disconnection, ContentFlow365 deletes or invalidates the local authorisation and stops making calls; it does not delete existing Pins, campaigns or ads on Pinterest. Deletion requests are processed under the public data-deletion instructions.
10. LinkedIn Community Management integration
ContentFlow365 lets a customer business voluntarily connect a LinkedIn Page it administers and publish organic content from its private workspace. Company Page connections are separate from personal-profile publishing and are enabled only when LinkedIn has granted the product the corresponding access tier.
10.1 Authorisation and permissions
The administrator starts LinkedIn's OAuth flow and grants only the permissions needed to discover the Pages they administer and publish to the selected Page: rw_organization_admin, r_organization_social and w_organization_social. ContentFlow365 does not request the LinkedIn password and does not publish until the User selects a destination and confirms a publication.
10.2 Data we process
- Credentials and consent: encrypted OAuth tokens, granted permissions, technical consent timestamps and the minimum identifier of the member authorising the connection.
- Administered Pages: the identifier, public name, visible handle and administrative role of Pages returned by LinkedIn so the User can select the correct destination. Page-profile fields are automatically removed before exceeding LinkedIn's eight-week retention limit.
- User-selected content and destination: text, links and media references saved or confirmed for publication, together with the identifier of the selected Page.
- Operational result: internal publication status and, where needed and permitted, the identifier or URL returned by LinkedIn to confirm the result and prevent duplicate publications.
10.3 Purpose, isolation and limits
We use this data solely to connect the selected Page, display available destinations, publish organic content confirmed by the User and report the result. Each connection is isolated by ContentFlow365 Account and Brand; we do not share data across customers, sell it, use it for advertising, sales prospecting, recruitment, or train general-purpose artificial-intelligence models.
10.4 Retention, disconnection and secure deletion
Encrypted credentials are retained while the connection remains active. Page-profile information is automatically scrubbed after 55 days. On disconnection, ContentFlow365 deletes or invalidates the local authorisation and stops making new calls. After validating a LinkedIn Community data-deletion request, a protected administrative operation stops new native publications, deletes OAuth connections and flows, unlinks or redacts Page identities, and erases provider-derived identifiers, URLs, metrics, errors and metadata. Only the customer's own content and the minimum idempotency outcome needed to prevent duplicate publication are retained.
Disconnecting LinkedIn or deleting its data from ContentFlow365 does not automatically remove publications that already exist on LinkedIn. To remove those as well, the User must delete them from the relevant LinkedIn Page.
See the public social-integration disconnection and data-deletion instructions.
11. Using ContentFlow365 from AI assistants (MCP)
ContentFlow365 offers a connector based on the Model Context Protocol (MCP) so that an authorised member of a customer account can use ContentFlow365 tools from a compatible AI assistant, such as ChatGPT, Codex or Claude. This section complements the rest of this policy and applies only when you connect and use an assistant.
11.1 Connection and permissions
You connect an existing ContentFlow365 account through OAuth from the assistant and approve the permissions shown on the ContentFlow365 consent screen. ContentFlow365 does not receive your assistant password, and the assistant does not receive your ContentFlow365 password. Each connection is limited to the account, brand and permissions you approve, and the same roles, approvals and credit controls as in the web application continue to apply.
11.2 Data we process
- Connection data: the connected account and brand, the acting user, the assistant application, the permissions granted, consent and expiry dates, and the technical records needed to verify access and investigate errors.
- Requests and parameters: the information the assistant sends to a tool when you ask it to, such as text, links, files, the selected brand or Persona, campaign, contact or advertising identifiers and the chosen settings.
- Results: the information a tool returns to the assistant, such as brand, Persona, library, campaign, CRM, calendar, credit, advertising or social-media data from your account, and links to generated content.
- Operation records: status, timestamps, credit estimates, charges and refunds, duplicate-prevention records and provider references, kept for billing, recovering operations and auditing.
11.3 Purpose
We use this data only to authenticate the connection, run the tools you request in your own account, return the results to your assistant, charge and reconcile the related credits, keep the service secure and resolve incidents. We do not sell this data, we do not use it for advertising profiles, and we do not use the content of your requests to train general-purpose AI models.
11.4 Recipients
Depending on the tool you use, data may be received by:
- The provider of the AI assistant you connected (for example OpenAI or Anthropic), which receives the results you request together with what you write in the conversation. Those conversations are governed by its own terms and privacy policy; for example, in some ChatGPT plans data may be used to improve its models if you have that setting turned on.
- AI model and media-generation providers that process the inputs needed for the text, images, voices, avatars or videos you request.
- Advertising, social-media, messaging, webinar and CRM platforms you have connected (for example Google, Meta, TikTok, LinkedIn, X, Pinterest, HighLevel, Zoom or ClickMeeting), when you ask to read information from them or act on them.
- Infrastructure providers for hosting, databases, background processing and storage, acting as processors on our behalf.
Data obtained from Google APIs (YouTube, Google Ads, Google Analytics or Google Calendar) is returned to your assistant only when you expressly request it within your own account, to provide the feature you are using, and remains subject to the Limited Use requirements described in sections 4, 6 and 7.
11.5 Retention, revocation and deletion
Connection data is kept while the connection is active, and unused connections expire automatically after a prolonged period of inactivity. Created content and operation records are kept while your account is active and for as long as needed for the purposes above; billing records are kept for the periods required by tax and accounting law. They are then deleted or anonymised according to the criteria in section 1.
You can revoke an assistant's access at any time from Settings → Connected apps in ContentFlow365 or from the assistant's own settings. Revoking stops future access but does not delete content already created or conversations stored by the assistant provider.
To request access to, correction or deletion of your data, see the data deletion instructions or write to support@contentflow365.com.
12. Zoom integration
ContentFlow365 lets a Zoom account administrator voluntarily connect their Zoom account to a ContentFlow account to create meetings, register the people who sign up on that account's pages and import attendance from completed meetings and webinars. The connection is isolated to the ContentFlow account that authorises it. In this integration, ContentFlow365 processes Zoom data on behalf of the customer who connects it.
12.1 Data we receive from Zoom
- OAuth access and refresh tokens, Zoom account and user identifiers, the authorising user's email and the granted scopes, stored only in access-restricted server-side infrastructure.
- Meeting and webinar data: identifiers, topic, description, dates, duration, time zone, attendee join link and registration settings. The host start link and meeting passcode are never sent to the browser.
- Registrants: first name, last name and email of the people registered for one of the customer's meetings or webinars, and the join link Zoom assigns to them.
- Attendance: display name, email (when Zoom provides it), join and leave times and minutes connected for each participant in completed meetings and webinars.
- A single setting of the user who creates the meeting (the entry and exit chime), which ContentFlow365 turns off so that meetings created from the app start without sound alerts.
12.2 How we use this data
We use Zoom data only to provide the features the customer requests in their own account: creating and listing their meetings, registering in Zoom the people who sign up on their pages, showing them their attendance reports and letting them follow up with their own registrants and attendees in their CRM. We do not use Zoom data for our own advertising or marketing, we do not build advertising profiles of Zoom users, we do not sell or disclose this data to unrelated third parties and we do not use it to train artificial-intelligence models.
12.3 Who it is shared with
Zoom data is visible only to authorised users of the ContentFlow account that connected Zoom. It is hosted by infrastructure providers (database and servers) bound by confidentiality and security obligations equivalent to those in this policy. If the customer uses ContentFlow365 from an AI assistant (section 11), the assistant receives the results the customer requests.
12.4 Retention and deletion
Credentials are kept while the connection is active. When the customer clicks "Disconnect" in Integrations → Zoom, ContentFlow365 asks Zoom to revoke the authorisation and deletes the tokens; reports already imported remain available to the customer until they ask us to delete them. If the customer removes the app from the Zoom App Marketplace, Zoom notifies us and we automatically delete the tokens and every report imported from Zoom for that connection. Reports the customer uploaded themselves as CSV files do not come from Zoom and are kept.
To access, correct or delete the Zoom data of an account, write to soporte@contentflow365.com or follow the data deletion procedure. We respond within 30 days at most.