Privacy Policy / Polityka prywatności

Ta polityka dotyczy panelu PanKobus (KOBUS Content), w tym integracji TikTok, a nie zakupów w sklepie. Kontakt w sprawie danych: sklep@pankobus.pl. Poniżej znajduje się pełna wersja angielska dla użytkowników i osób sprawdzających integrację.

1. Service and controller

This policy covers the PanKobus content management application at admin.pankobus.pl, including its separate review workspace at /review. The service is operated by Wydawnictwo Uczuć, Mateusz Kobus, Anna Kobus, ul. Sączewskiego 10/13, 42-500 Będzin, Poland, NIP 6252502075. Contact: sklep@pankobus.pl.

2. Information processed

• Application account information: name, email, password hash, role, assigned profiles and login activity.
• Content supplied by users: captions, uploaded images and videos, post settings, schedules and publication results.
• TikTok connection information: account identifier (open_id), creator username/nickname, granted scopes, access and refresh tokens, token expiry, available privacy and interaction settings, publication identifiers, status and error responses.
• Technical information: session cookies, IP address, user agent and operational/security logs.

PanKobus does not ask for or store your TikTok password. TikTok authorization takes place on TikTok's own website.

3. Purposes and legal bases

We process account and content information to provide the application, manage access, connect the social accounts you authorize, upload the content you choose and report the outcome. Where processing is necessary to provide an agreed service, its basis is Article 6(1)(b) GDPR. Access management, security, troubleshooting and protecting the service are based on our legitimate interests under Article 6(1)(f). Processing required by applicable law is based on Article 6(1)(c). Where a particular optional processing operation requires consent, its basis is Article 6(1)(a), and that consent can be withdrawn. Authorizing TikTok permissions controls the API access you grant; it does not authorize unrelated uses of your data.

4. TikTok integration and sharing

Login Kit is used to connect a TikTok account. The user.info.basic scope identifies that account. Content Posting API Direct Post and video.publish are used to upload a selected video with its caption, privacy and interaction settings after the user chooses to publish. The application checks TikTok's publication status. It does not use this integration to read private messages or your password.

For the authorized operation, the selected video, caption and publication settings are sent to TikTok. TikTok processes that information under its own Privacy Policy. Your content is visible according to the privacy option selected and accepted by TikTok. Other connected services receive data only for the corresponding functions used, such as publication to Meta, Google Drive media access or AI content generation. The review workspace has no client production social accounts or client content.

Hosting, technical maintenance and the services used for a requested integration may process information needed to operate that function. Access within PanKobus depends on the account's role and assigned profiles. We do not sell TikTok account data. If a provider processes data outside the EEA, the transfer is subject to the applicable legal safeguards, including adequacy decisions or standard contractual clauses where required.

5. Storage and retention

TikTok access and refresh tokens are encrypted in the application's database. Application passwords are hashed. Sessions use cookies needed for login and request security. Account and content data are retained for the operation of the account and the requested service, and where necessary to resolve requests, protect the service or comply with legal obligations. Token expiry is tracked. Disconnecting TikTok removes its connection identifiers and tokens from the profile; it does not automatically delete saved post content or a video already published on TikTok. Backup and log copies are subject to their operational retention and applicable legal requirements.

6. Disconnecting and deletion requests

In the profile editor, use the TikTok disconnect action to remove the local connection. The application also attempts to revoke the token at TikTok. You can revoke access directly through TikTok's connected-app settings. To request deletion of application account data, stored TikTok data or uploaded content, email sklep@pankobus.pl with the account email and relevant profile. We may verify that the request comes from the account owner. A video already posted on TikTok is managed in TikTok; removing the PanKobus connection does not remove that video.

7. Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability of your personal data, object to processing based on legitimate interests and withdraw consent for processing based on consent. Contact us using the address above. You may lodge a complaint with the Polish President of the Personal Data Protection Office (UODO) or your competent data protection authority. The application does not make automated decisions about you with legal or similarly significant effects.

8. Policy changes

The current policy remains accessible from the application login screen. Material changes affecting how account data is used will be communicated to affected account holders.