Your privacy is critically important to us.
Last Updated: October 29, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
- Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Collabry Software and IT Inc., Barbaros, Şebboy Sk. No:4/1 İç Kapı No:1, 34758 Ataşehir/İstanbul.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Country refers to: Turkey.
- Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Service refers to the Website.
- Service Provider means any natural or legal person who processes the data on behalf of the Company.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- Website refers to Editorial Automation System, accessible from https://eas.collabry.io.
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Usage Data
Content Data
We also collect content that you create, upload, or transmit through the Service, such as:
- Photos, videos, and audio files
- Captions, comments, and other text inputs
- Social media authentication tokens (to publish content on your behalf)
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies We use include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
- For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
- To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication.
- To provide You with news, special offers, and general information about other goods, services and events which We offer.
- To manage Your requests: To attend and manage Your requests to Us.
- For business transfers: We may use Your Personal Data to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
Google User Data and YouTube API Services
The Service lets You connect a YouTube channel so You can publish videos to it, immediately or at a time You schedule. The Service uses YouTube API Services. By connecting a YouTube channel You also agree to the YouTube Terms of Service, and Google's handling of Your data is described in the Google Privacy Policy.
Data We access
When You connect a YouTube channel, You grant the Service the following permissions through Google sign-in:
- View your YouTube account (youtube.readonly): used to read the connected channel's ID, name, custom URL and thumbnail image, so We can show You which channel is connected, and to read the channel's latest public uploads (title, thumbnail, publish date, link) with their view, like and comment counts, shown on the Analytics page.
- Manage your YouTube videos (youtube.upload): used only to upload the videos You publish or schedule in the Service, with the title, description, tags and privacy setting You enter.
We do not read Your comments, subscribers, YouTube Analytics reports or any other data from Your Google Account, and We never change or delete Your existing videos.
Google Ads reporting
Separately, You can connect Google Ads accounts on the Ads page to see their performance in the Service. This grants the following permission:
- Manage your AdWords campaigns (adwords): used only to read the Google Ads accounts You can access (ID, name, currency, time zone, status) and their reporting data (campaign names, types and statuses; cost, impressions, clicks, conversions and video views). The Service never creates, changes or deletes campaigns, ads, budgets or any other Google Ads data.
We store the account details listed above and the encrypted OAuth tokens. Reporting data is cached so the Ads page loads quickly; cached data older than one hour is fetched again before it is shown. When You disconnect the account (Ads → Disconnect), We delete its cached reporting data and stored tokens. You can also revoke access at any time from Your Google Account's third-party access page.
How We use, store and protect it
- We store the channel ID, name, custom URL and thumbnail URL, and the OAuth access and refresh tokens Google issues to the Service. For each video We publish, We store its YouTube video ID and link with Your post.
- The video list and counts on the Analytics page are shown to You and to the people You share the channel with in the Service. To limit requests to YouTube, a copy is cached for up to one hour and replaced when it is refreshed.
- OAuth tokens are encrypted with AES-256-GCM before they are stored. They are used only on our servers to call YouTube on Your behalf and are never sent to Your browser.
- Video files You upload to the Service are kept by our hosting provider so they can be sent to YouTube. You can delete them from the media library at any time.
- We use Google user data only to provide the features described above. We do not sell it, use it for advertising, or use it to develop or train artificial intelligence or machine learning models.
- We do not share or transfer Google user data with third parties, except with the service providers that host the Service on our behalf, when You instruct Us to (for example, uploading a video to YouTube), or when required by law.
The Service's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention, deletion and revoking access
- We keep the tokens only while the channel is connected. When You disconnect the channel (Social Media → Accounts → Disconnect), We delete the stored tokens and the cached video list and counts, and revoke the Service's access at Google.
- The channel name and ID stay attached to Your past posts so Your publishing history remains readable. To have them and all other data deleted, contact Us at [email protected]; We will delete it within 30 days.
- You can also revoke the Service's access at any time from Your Google Account's third-party access page.
TikTok Account Data
The Service lets You connect a TikTok account to publish videos and see how Your videos perform. TikTok's handling of Your data is described in the TikTok Privacy Policy.
- Data We access: Your display name and avatar (user.info.basic); permission to upload and publish the videos You create or schedule in the Service (video.upload, video.publish); and Your latest public videos with their title, cover image, date, link and view, like, comment and share counts (video.list), shown on the Analytics page.
- Storage: access and refresh tokens issued by TikTok are encrypted with AES-256-GCM, are used only on our servers and are never sent to Your browser. The video list and counts are shown to You and to the people You share the account with in the Service, and are cached for up to one hour. We do not sell this data, use it for our own advertising, or use it to train artificial intelligence or machine learning models.
- Deletion: when You disconnect the account (Social Media → Accounts → Disconnect), We delete its stored tokens and cached video list immediately. You can also revoke the Service's access in the TikTok app under Settings and privacy → Security → Apps and services permissions. To have all other data deleted, contact Us at [email protected]; We will delete it within 30 days.
TikTok Ads Data
The Service lets You connect TikTok ad accounts through the TikTok API for Business to see their performance on the Ads page. TikTok's handling of Your data is described in the TikTok for Business Privacy Policy.
- Data We access (read-only): the ad accounts You choose to share, their ID, name, company, currency, time zone and status, and reporting data of their campaigns, such as campaign names, objectives and statuses, amount spent, impressions, reach, clicks, conversions and video views. The Service never creates, edits or pauses campaigns or ads.
- Storage: access tokens issued by TikTok are encrypted with AES-256-GCM, are used only on our servers and are never sent to Your browser. Reporting data is shown only to the Service user who connected the ad account and is cached for up to one hour. We do not sell it, use it for our own advertising, or use it to train artificial intelligence or machine learning models.
- Deletion: when You disconnect an ad account (Social Media → Ads → Disconnect), We delete its stored token and cached reports immediately. You can also revoke the Service's access in TikTok Ads Manager or TikTok Business Center. To have all other data deleted, contact Us at [email protected]; We will delete it within 30 days.
Children's Privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
© 2026 Editorial Automation System (Collabry Software and IT Inc.). All rights reserved.