Aria Social Hub — Privacy Policy

Aria Social Hub — Privacy Notice

Effective date: 11 August 2026

This Privacy Policy explains how Aria Social Hub processes data when a
user connects a TikTok account or uses TikTok features in the service.

1. Service operator and contact

Aria Social Hub is operated by Paweł Matyja, conducting business as Centrale
Telefoniczne Paweł Matyja, ul. Warszawska 236/5, 43-155 Bieruń, Poland,
NIP 6462629132, REGON 240498089 (the “Operator”). Privacy and data-deletion
requests may be sent to biuro@e-prolab.eu.

2. What Aria Social Hub does

Aria Social Hub is a web-based social media management service. It allows users to
connect accounts they own or are authorized to manage, prepare and preview their own
content, choose publication settings, publish immediately or schedule publication,
and review publication status. TikTok content is uploaded or published only after an
explicit action by the user.

3. TikTok data that may be processed

After a user authorizes Aria Social Hub through TikTok, the service may process only
the data covered by the permissions granted by that user, including:

  • basic TikTok account and profile information, such as user ID, display name, username and profile image;
  • profile statistics made available by TikTok, such as follower, following, like and video counts;
  • information about videos available to the authorized account, including video identifiers, metadata and publication status;
  • OAuth authorization data, including access and refresh tokens required to keep the authorized connection working;
  • videos, captions and publication settings selected by the user, including privacy level, comments, Duet, Stitch and commercial-content disclosure settings;
  • technical logs and error information needed for security, troubleshooting and confirmation of publication status.

The TikTok permissions requested by the current integration are:
user.info.basic, user.info.profile,
user.info.stats, video.list,
video.upload and video.publish.

4. Why the data is used

TikTok data is used only to:

  • authenticate the user and connect the TikTok account selected by that user;
  • display the connected account and information needed to manage the connection;
  • show available account or video information requested through the service;
  • upload or publish the user’s selected content using the settings confirmed by the user;
  • display publication results, investigate errors, prevent abuse and protect the service.

Aria Social Hub does not sell TikTok user data. TikTok data is not used for targeted
advertising, unrelated marketing or automated profiling, and the service does not
publish TikTok content without the user’s confirmation.

5. Legal basis

Where the GDPR applies, processing necessary to provide the features requested by the
user is based on performance of the service agreement (Article 6(1)(b) GDPR).
Security, fraud prevention, diagnostics and the establishment or defence of claims
are based on the Operator’s legitimate interests (Article 6(1)(f) GDPR). Where consent
is legally required, processing is based on consent (Article 6(1)(a) GDPR), which may
be withdrawn at any time without affecting earlier lawful processing.

6. Sharing and service providers

Data is transmitted to TikTok when necessary to authenticate the account, retrieve
authorized information, upload content or publish content according to the user’s
instructions. Data may also be processed by infrastructure, hosting, database,
security and technical-support providers acting on the Operator’s instructions.
Information may be disclosed to public authorities when required by applicable law.
Aria Social Hub does not disclose TikTok user data to data brokers.

7. Storage and retention

OAuth tokens are kept only while needed to maintain the authorized connection or until
the user disconnects the account, revokes authorization or requests deletion. Content,
publication settings and status information are retained while needed to provide the
service and manage the user’s publication history. Technical logs are retained only as
long as reasonably necessary for security, diagnostics and legal compliance. Some data
may remain temporarily in protected backups or be retained where required by law or
necessary to establish, exercise or defend legal claims.

8. User control, revocation and deletion

A user may:

  • disconnect the TikTok account in Aria Social Hub;
  • revoke the application’s access in the user’s TikTok account settings;
  • request access, correction, restriction, portability, objection or deletion by emailing biuro@e-prolab.eu.

A deletion request should identify the Aria Social Hub account and the connected TikTok
account sufficiently to verify the requester. The Operator will remove or anonymize the
relevant data unless retention is required by law or justified by legal claims. Users
may also lodge a complaint with the President of the Personal Data Protection Office
(UODO) in Poland or another competent supervisory authority.

9. Security and international transfers

The Operator uses access controls, encrypted HTTPS connections and other reasonable
technical and organizational safeguards. No online service can guarantee absolute
security. If a service provider processes data outside the European Economic Area,
the Operator uses a lawful transfer mechanism where required by applicable law.

10. Children

Aria Social Hub is a business and creator tool and is not directed to children. The
service must not be used by anyone who is not permitted to use TikTok or authorize the
processing under applicable law and TikTok’s terms.

11. Changes to this notice

This notice may be updated when the service, TikTok integration or legal requirements
change. The current version and effective date will remain available at this URL.

Koszyk