Privacy Policy

1. Overview

This Privacy Policy describes how Las Aguas Productions UG (haftungsbeschränkt)(“Las Aguas”, “we”, “us”, or “our”) collects, uses, and protects information when you use the applications that power the Las Aguas Artist Dashboard available at https://lasaguasproductions.com/dashboard, together with the Las Aguas Indie platform (collectively, the “Services”). The applications covered by this Privacy Policy include:

• Las Aguas Productions — our application registered with TikTok for Developers, which connects to your TikTok account through TikTok Login Kit and the TikTok Content Posting API.
• LA Dashboard Posts Tracker — our application registered with Meta for Developers, which connects to your Instagram Professional account or Facebook Page through Meta Login and the Meta Graph API.
• Las Aguas Artist Dashboard — our application registered with Meta for Developers, which connects to your Instagram professional account directly through Instagram Business Login and the Instagram API with Instagram Login.

Together with our integrations with YouTube and Spotify, these applications (each an “App” and collectively the “Apps”) make up the Las Aguas Artist Dashboard. The Apps are private tools for verified clients and authorised users of Las Aguas Productions and are not public-facing platforms. By using the Apps you agree to the practices described in this Privacy Policy. This Privacy Policy should be read together with our Terms of Service.

2. What We Collect

a. Account information

When you are onboarded to the Las Aguas Artist Dashboard, we collect:

• Name and contact information (email address, phone number)
• Any volunteered information about your project, genre, or content strategy preferences
• Authentication credentials required to access the Apps securely

b. Connected social account data

When you connect a third-party account to the Las Aguas Artist Dashboard, the relevant App retrieves data through that platform’s official API in accordance with the platform’s developer terms and the scopes you authorise during connection. The platforms we integrate with, the App that handles each connection, and the data we read are listed below.

TikTok (via Las Aguas Productions)

When you connect a TikTok account to the dashboard through TikTok Login Kit, you grant Las Aguas Productions access to the following scopes, which it uses in accordance with the TikTok Developer Terms of Service:

• user.info.basic — your public profile information: open id, avatar, and display name. Used to identify the connected account in the dashboard.
• user.info.stats — aggregate account statistics: likes count, follower count, following count, and video count. Used to display growth metrics over time inside the dashboard.
• video.list — the list of public videos you have posted on TikTok, with public metadata (such as title, description, thumbnail, video ID, and publicly visible engagement counts). Used to populate your post history in the dashboard.
• video.upload — share videos to your TikTok account as drafts that you finish and publish from inside the TikTok app. Used when you choose to send a planned post from the dashboard to TikTok for review.
• video.publish — directly publish videos to your TikTok profile, with the caption, settings, and privacy level you have configured in the dashboard. Used only when you explicitly trigger a publish action.

The video.upload and video.publish scopes are requested only for managed-tier client connections. Indie-tier connections are analytics-only and request just user.info.basic, user.info.stats, and video.list.

Content is uploaded or published to TikTok only when you explicitly initiate that action inside the dashboard. Las Aguas Productions does not auto-post on your behalf, does not read direct messages or comment content, and does not collect data about other TikTok accounts.

Use of TikTok data. Information obtained through the TikTok APIs is used solely to (a) display analytics and post history to you inside the dashboard, (b) upload or publish videos that you have approved, and (c) operate, secure, and debug Las Aguas Productions. We do not use TikTok data for advertising, do not sell or rent it, and do not use it to train generalised machine-learning models.

Meta — Instagram and Facebook (via LA Dashboard Posts Tracker)

When you connect an Instagram Professional account or Facebook Page through Meta Login, LA Dashboard Posts Tracker reads, in accordance with the Meta Platform Terms:

• pages_show_list — the list of Facebook Pages you manage. Used only to locate the Page linked to your Instagram professional account during connection.
• pages_read_engagement — Page-level content and engagement metadata. Used to display your Page's audience and engagement figures.
• instagram_basic — your Instagram professional account's profile and media. Used to identify the connected account and list your posts in the dashboard.
• instagram_manage_insights — account and media insights: follower count, reach, impressions, and per-post views, likes, shares, saves, and comment counts. Used to display growth and post-performance analytics.
• Lead form submissions (where you have explicitly chosen to forward Meta instant lead form data to Las Aguas)

Instagram Business Login (via Las Aguas Artist Dashboard)

Alternatively, you can connect an Instagram professional account directly — without a Facebook Page — through Instagram Business Login. Las Aguas Artist Dashboard then reads:

• instagram_business_basic — your Instagram professional account's profile information and media. Used to identify the connected account and list your posts in the dashboard.
• instagram_business_manage_insights — account and media insights: follower count, reach, and per-post views, likes, shares, saves, and comment counts. Used to display growth and post-performance analytics.

Neither LA Dashboard Posts Tracker nor Las Aguas Artist Dashboard reads direct messages, comment content, or private content on Instagram or Facebook, publishes anything to your accounts, or collects data about accounts you have not connected.

YouTube

The Las Aguas Artist Dashboard uses YouTube API Services. When you connect a YouTube channel via Google OAuth, you grant us the youtube.readonly and yt-analytics.readonly scopes, which we use — in accordance with the YouTube Terms of Service and the Google Privacy Policy— to read:

• Channel profile information
• Subscriber count
• Per-video performance metrics: views, likes, comments, and watch time

This data is stored on our servers (see Section 8) only for the connected channel, is refreshed on a regular schedule, and is displayed only to you and the Las Aguas team members working on your project. We never publish, modify, or upload anything to your YouTube channel. In addition to disconnecting from the dashboard’s Settings page, you can revoke our access to your YouTube data at any time via the Google security settings page.

Spotify

When you connect a Spotify for Artists profile, we read:

• Public artist profile information
• Monthly listener and follower counts
• Aggregate stream and save metrics for releases

We do not collect any data from accounts that have not been explicitly connected to the Las Aguas Artist Dashboard by you, and we do not buy or scrape data about you from third parties.

c. App usage data

We collect information about how you use the Apps, such as which pages and features you access and how often. This data is used solely to understand usage patterns and improve the Apps. It is not used for advertising and is not shared outside Las Aguas in any individually identifiable form.

d. Uploaded content

We store content you upload within the dashboard, including media files, captions, notes, scheduling metadata, and feedback threads, for the purpose of providing the Services to you.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Apps
• Display and analyse your content performance and social analytics
• Plan, schedule, and manage your content strategy
• Improve the reliability, functionality, and user experience of the Apps
• Monitor for security issues and prevent unauthorised access
• Communicate with you about your account and the Services

We do not sell your personal information or your content, and we do not use data obtained through the TikTok, Meta, YouTube, or Spotify APIs for advertising or for training generalised machine-learning models.

4. Sharing and Disclosure

Your data will not be shared in any non-anonymised form with anyone outside Las Aguas, or with any other users of the Apps, without your express written permission. Within Las Aguas, access to your data is limited to team members who need it to provide the Services to you.

We may also share your information in the following limited circumstances:

• With infrastructure and hosting providers who process data on our behalf, under appropriate confidentiality and data-processing commitments (notably Supabase, Vercel, and similar service providers)
• When required by law, regulation, legal process, or governmental request

Aggregated or fully anonymised data (which cannot be used to identify you) may be used internally for reporting and product improvement without restriction.

5. Compliance with Platform Developer Terms

The Apps access third-party platform data through official APIs and comply with the developer terms of each platform, including the TikTok Developer Terms of Service, the Meta Platform Terms and Meta Developer Policies, the YouTube API Services Terms of Service, and the Spotify Developer Terms. We refresh data from these APIs in line with their caching and retention rules and delete cached platform data when a platform indicates the underlying record has been removed or when you disconnect your account.

6. Cookies and Tracking on the Marketing Site

Our public marketing website at lasaguasproductions.com uses the Meta Pixel (Facebook Pixel) to measure the performance of advertising campaigns and to retarget visitors who have shown interest in our services. The Meta Pixel may set cookies in your browser and share information about your visit (such as the pages you viewed and the actions you took) with Meta Platforms, Inc.

The Las Aguas Artist Dashboard itself (at https://lasaguasproductions.com/dashboard) does not load the Meta Pixel or any third-party advertising trackers. The Apps use only first-party cookies and local storage that are strictly necessary to keep you signed in and to remember your in-app preferences.

You can opt out of Meta Pixel tracking at any time by adjusting your Meta ad preferences, by using browser-level tracking-protection settings, or by using tools such as Your Online Choices.

7. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation applies, our legal bases for processing your personal data are:

• Performance of a contract: processing necessary to provide the Services under our agreement with you
• Legitimate interests: App security, internal analytics, and product improvement
• Consent: where required for specific platform integrations, which you may withdraw at any time by disconnecting the relevant account

8. Data Storage and Security

Personal data and uploaded content are stored on infrastructure located in the European Union and the United States, with our primary database hosted on Supabase. We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encryption at rest, secure authentication, and access controls for staff. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your data for as long as necessary to provide the Services and to comply with legal or accounting obligations. When your relationship with Las Aguas ends, your account access will be deactivated. You may request deletion of your personal data at any time, subject to any legal or operational requirements to retain certain records.

10. Your Rights and Data Deletion

Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing.

Disconnecting a platform.You can revoke the relevant App’s access to a connected platform at any time from the dashboard’s Settings page, or from the security or app-permissions settings of TikTok, Meta, YouTube, or Spotify directly. When you disconnect a platform, we stop calling that platform’s API and delete the associated access tokens.

Automatic deletion of Facebook and Instagram data. If you remove our App from your Facebook settings (Settings & Privacy → Apps and Websites) or Instagram settings (Settings → Website Permissions → Apps and Websites) and request deletion of your data, Meta notifies us automatically. We then delete the associated access tokens and the Instagram/Facebook data we have stored for that account, and Meta shows you a confirmation link where you can verify the status of your request. For managed clients with an active service agreement, analytics archives prepared as part of our contracted services are retained under that agreement as described in Section 9; all access tokens and further collection stop immediately.

Requesting deletion of your data. To request deletion of your account and the personal data we hold about you (including data obtained from connected platforms), email contact@lasaguasproductions.com with the subject line “Data Deletion Request” from the email address associated with your account. We will confirm receipt within seven days and complete the deletion within thirty days, except where we are required by law to retain specific records.

11. Children's Privacy

The Apps are not directed at children under 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you in the dashboard. Continued use of the Apps after an update constitutes acceptance of the revised policy.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact: Las Aguas Productions UG (haftungsbeschränkt), Berlin, Germany — contact@lasaguasproductions.com.