Creator Dashboard privacy policy

Effective date: 9 October 2026

Controller and contact

Bartosz Witkowski, trading as Pylse, is the data controller. Address: 107 Meadowlands, Tralee, Co. Kerry, V92 E67E, Ireland. Contact: pylsedev@gmail.com.

Data, sources and purposes

• YouTube: connected-channel details, video information and analytics; comments and replies, including text, names, handles, identifiers, links, timestamps and engagement counts.
• Instagram: connected-account details, posts and statistics; comments, mentions, tags and direct messages, including content, usernames, identifiers, links, timestamps and engagement counts.
• TikTok: connected-account details, public-video information and aggregate statistics; no commenters' information or direct messages.
• Other data: platform connection tokens, authorised-user account and security records, and the name, email address and message supplied when someone contacts us.

Social data comes from the relevant platform. Comments and tags are generally public; direct messages and comments awaiting moderation are not. Contact details come directly from the person contacting us.

We use this data to manage our accounts, measure our posts' performance, read and respond to interactions, secure access and answer enquiries. Our legal basis is legitimate interests in those activities, under GDPR Article 6(1)(f). Privacy requests and records of our response are processed to meet legal obligations under Article 6(1)(c).

Providing contact information is optional, but we may need it to answer you. Connecting an account is optional; without access, its dashboard features cannot work.

Recipients and transfers

Access is limited to authorised Pylse personnel. Connected platforms receive actions taken through them; Google provides our email service. Information may also be disclosed where legally required. We do not sell social data, use it for advertising or use it to train AI models. No automated decisions with legal or similarly significant effects are made about you.

Dashboard records are stored in Ireland. Email and platform services may process information outside the EEA, including in the United States. Google's transfers rely on adequacy decisions, including the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses; see Google's transfer safeguards. Contact us for information about applicable safeguards.

Retention

• Comments, messages, tags and mentions: deleted after 30 days, measured from posting or first collection, whichever is earlier. Related notifications and replies are deleted with them.
• Account and post statistics: kept while the account remains connected. Missing YouTube videos and unrefreshed titles, descriptions and thumbnails are removed within 30 days.
• Disconnecting: connection tokens are deleted immediately and account data after 7 days, unless reconnected. A failed or revoked connection starts a 30-day deletion period unless access is restored.
• Alerts and refresh records: normally 90 days; unresolved alerts and the latest usable refresh record are kept while needed.
• Enquiry emails: 12 months after the conversation ends. Privacy-request correspondence: 3 years after closure.
• Access records: retained without a fixed limit for security and evidence of policy acceptance. Deletion records: retained permanently as counts; identifiers are retained only in a protected form to prevent re-collection until the connected account's data is deleted.

Managed backups normally expire after 30 days; the newest verified backup may remain until a verified replacement exists. Deletion requests also cover backups. Older offline copies and older alert emails are outside automatic deletion and require a manual check. Deletions are reapplied before restored data is used.

Your rights

You may request access, correction, deletion or restriction of your data. Portability applies where the GDPR conditions are met. Contact pylsedev@gmail.com or message the Pylse account concerned; we respond within one month, subject to lawful extensions. You can complain to Ireland's Data Protection Commission or your local supervisory authority.

YouTube and revoking access

The dashboard uses YouTube API Services. See the Google Privacy Policy. Our use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

In addition to our deletion procedure, you can revoke Google access through Google's security settings.

The dashboard uses a necessary sign-in cookie for authorised users. It does not place cookies on social-media commenters' devices or serve third-party advertising.