Las Aguas Post Tracker Privacy Policy

1. Overview

This Privacy Policy describes how Las Aguas Productions UG (haftungsbeschränkt) (“Las Aguas”, “we”, “us”, or “our”) collects, uses, and protects information when you use the applications that power the Las Aguas Artist Dashboard available at https://lasaguasproductions.com/dashboard, together with the Las Aguas Indie platform (collectively, the “Services”). The applications covered by this Privacy Policy include:

• Las Aguas Post Tracker — our application registered with TikTok for Developers, which connects to your TikTok account through TikTok Login Kit and the TikTok Content Posting API.
• LA Dashboard Posts Tracker — our application registered with Meta for Developers, which connects to your Instagram Professional account or Facebook Page through Meta Login and the Meta Graph API.

Together with our integrations with YouTube and Spotify, these applications (each an “App” and collectively the “Apps”) make up the Las Aguas Artist Dashboard. The Apps are private tools for verified clients and authorised users of Las Aguas Productions and are not public-facing platforms. By using the Apps you agree to the practices described in this Privacy Policy. This Privacy Policy should be read together with our Terms of Service.

2. What We Collect

a. Account information

When you are onboarded to the Las Aguas Artist Dashboard, we collect:

• Name and contact information (email address, phone number)
• Any volunteered information about your project, genre, or content strategy preferences
• Authentication credentials required to access the Apps securely

b. Connected social account data

When you connect a third-party account to the Las Aguas Artist Dashboard, the relevant App retrieves data through that platform’s official API in accordance with the platform’s developer terms and the scopes you authorise during connection. The platforms we integrate with, the App that handles each connection, and the data we read are listed below.

TikTok (via Las Aguas Post Tracker)

When you connect a TikTok account to the dashboard through TikTok Login Kit, you grant Las Aguas Post Tracker access to the following scopes, which it uses in accordance with the TikTok Developer Terms of Service:

• user.info.basic — your public profile information: open id, avatar, and display name. Used to identify the connected account in the dashboard.
• user.info.stats — aggregate account statistics: likes count, follower count, following count, and video count. Used to display growth metrics over time inside the dashboard.
• video.list — the list of public videos you have posted on TikTok, with public metadata (such as title, description, thumbnail, video ID, and publicly visible engagement counts). Used to populate your post history in the dashboard.
• video.upload — share videos to your TikTok account as drafts that you finish and publish from inside the TikTok app. Used when you choose to send a planned post from the dashboard to TikTok for review.
• video.publish — directly publish videos to your TikTok profile, with the caption, settings, and privacy level you have configured in the dashboard. Used only when you explicitly trigger a publish action.

Content is uploaded or published to TikTok only when you explicitly initiate that action inside the dashboard. Las Aguas Post Tracker does not auto-post on your behalf, does not read direct messages or comment content, and does not collect data about other TikTok accounts.

Use of TikTok data. Information obtained through the TikTok APIs is used solely to (a) display analytics and post history to you inside the dashboard, (b) upload or publish videos that you have approved, and (c) operate, secure, and debug Las Aguas Post Tracker. We do not use TikTok data for advertising, do not sell or rent it, and do not use it to train generalised machine-learning models.

Meta — Instagram and Facebook (via LA Dashboard Posts Tracker)

When you connect an Instagram Professional account or Facebook Page through Meta Login, LA Dashboard Posts Tracker reads, in accordance with the Meta Platform Terms:

• Public profile information for the connected account
• Follower count and reach/impression figures
• Per-post performance metrics: views, likes, shares, saves, and comment counts
• Lead form submissions (where you have explicitly chosen to forward Meta instant lead form data to Las Aguas)

LA Dashboard Posts Tracker does not read direct messages or private content on Instagram or Facebook.

YouTube

When you connect a YouTube channel, we read, in accordance with the YouTube Terms of Service and the Google Privacy Policy:

• Channel profile information
• Subscriber count
• Per-video performance metrics: views, likes, comments, and watch time

Spotify

When you connect a Spotify for Artists profile, we read:

• Public artist profile information
• Monthly listener and follower counts
• Aggregate stream and save metrics for releases

We do not collect any data from accounts that have not been explicitly connected to the Las Aguas Artist Dashboard by you, and we do not buy or scrape data about you from third parties.

c. App usage data

We collect information about how you use the Apps, such as which pages and features you access and how often. This data is used solely to understand usage patterns and improve the Apps. It is not used for advertising and is not shared outside Las Aguas in any individually identifiable form.

d. Uploaded content

We store content you upload within the dashboard, including media files, captions, notes, scheduling metadata, and feedback threads, for the purpose of providing the Services to you.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Apps
• Display and analyse your content performance and social analytics
• Plan, schedule, and manage your content strategy
• Improve the reliability, functionality, and user experience of the Apps
• Monitor for security issues and prevent unauthorised access
• Communicate with you about your account and the Services

We do not sell your personal information or your content, and we do not use data obtained through the TikTok, Meta, YouTube, or Spotify APIs for advertising or for training generalised machine-learning models.

4. Sharing and Disclosure

Your data will not be shared in any non-anonymised form with anyone outside Las Aguas, or with any other users of the Apps, without your express written permission. Within Las Aguas, access to your data is limited to team members who need it to provide the Services to you.

We may also share your information in the following limited circumstances:

• With infrastructure and hosting providers who process data on our behalf, under appropriate confidentiality and data-processing commitments (notably Supabase, Vercel, and similar service providers)
• When required by law, regulation, legal process, or governmental request

Aggregated or fully anonymised data (which cannot be used to identify you) may be used internally for reporting and product improvement without restriction.

5. Compliance with Platform Developer Terms

The Apps access third-party platform data through official APIs and comply with the developer terms of each platform, including the TikTok Developer Terms of Service, the Meta Platform Terms and Meta Developer Policies, the YouTube API Services Terms of Service, and the Spotify Developer Terms. We refresh data from these APIs in line with their caching and retention rules and delete cached platform data when a platform indicates the underlying record has been removed or when you disconnect your account.

6. Cookies and Tracking on the Marketing Site

Our public marketing website at lasaguasproductions.com uses the Meta Pixel (Facebook Pixel) to measure the performance of advertising campaigns and to retarget visitors who have shown interest in our services. The Meta Pixel may set cookies in your browser and share information about your visit (such as the pages you viewed and the actions you took) with Meta Platforms, Inc.

The Las Aguas Artist Dashboard itself (at https://lasaguasproductions.com/dashboard) does not load the Meta Pixel or any third-party advertising trackers. The Apps use only first-party cookies and local storage that are strictly necessary to keep you signed in and to remember your in-app preferences.

You can opt out of Meta Pixel tracking at any time by adjusting your Meta ad preferences, by using browser-level tracking-protection settings, or by using tools such as Your Online Choices.

7. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation applies, our legal bases for processing your personal data are:

• Performance of a contract: processing necessary to provide the Services under our agreement with you
• Legitimate interests: App security, internal analytics, and product improvement
• Consent: where required for specific platform integrations, which you may withdraw at any time by disconnecting the relevant account

8. Data Storage and Security

Personal data and uploaded content are stored on infrastructure located in the European Union and the United States, with our primary database hosted on Supabase. We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encryption at rest, secure authentication, and access controls for staff. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your data for as long as necessary to provide the Services and to comply with legal or accounting obligations. When your relationship with Las Aguas ends, your account access will be deactivated. You may request deletion of your personal data at any time, subject to any legal or operational requirements to retain certain records.

10. Your Rights and Data Deletion

Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing.

Disconnecting a platform. You can revoke the relevant App’s access to a connected platform at any time from the dashboard’s Settings page, or from the security or app-permissions settings of TikTok, Meta, YouTube, or Spotify directly. When you disconnect a platform, we stop calling that platform’s API and delete the associated access tokens.

Requesting deletion of your data. To request deletion of your account and the personal data we hold about you (including data obtained from connected platforms), email contact@lasaguasproductions.com with the subject line “Data Deletion Request” from the email address associated with your account. We will confirm receipt within seven days and complete the deletion within thirty days, except where we are required by law to retain specific records.

11. Children's Privacy

The Apps are not directed at children under 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you in the dashboard. Continued use of the Apps after an update constitutes acceptance of the revised policy.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact: Las Aguas Productions UG (haftungsbeschränkt), Berlin, Germany — contact@lasaguasproductions.com.