Privacy Policy

Data Collection on Our Website

Data processing on this website is carried out by the website operator. Contact details can be found in the imprint.

Our website uses cookies. These are small text files that your web browser stores on your device.

We use analytics tools to analyze user behavior on our website and improve our service.

When you connect a social media account in ChatCMM (for example a Facebook Page, Instagram, LinkedIn, X, TikTok, YouTube, Pinterest, Bluesky or Mastodon), you grant us access through the provider's sign-in flow (OAuth). We store the access tokens in encrypted form, the account ID, name and profile picture of the connected account, the posts ChatCMM published including their publishing status, and the metrics the provider returns for those posts. We use this data solely to publish your posts to the chosen account and to show you how they perform. It is never shared with third parties or used for advertising.

You can disconnect any account at any time in ChatCMM under “Social” or revoke access directly with the provider. After disconnecting we delete the access tokens immediately and the remaining account data within 7 days, unless we are legally required to keep it.

ChatCMM uses YouTube API Services provided by Google to connect YouTube channels. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service; the Google Privacy Policy also applies.

Through the YouTube API we retrieve your channel's name, channel ID and profile picture, upload the videos you create in ChatCMM, and read the title, status and view counts of those videos to display them in ChatCMM. Access tokens are stored encrypted and used only for these purposes. If you disconnect the channel in ChatCMM or revoke access in your Google security settings, we delete the stored YouTube data within 7 days.

• Google Privacy Policy
• Revoke access in your Google security settings
• YouTube Terms of Service

We protect the data of connected accounts, including Google user data that we receive through YouTube API Services, with technical and organisational measures. All data is transmitted exclusively over encrypted connections (HTTPS/TLS). OAuth access and refresh tokens are encrypted with AES-256-GCM before they are stored; the encryption key is kept as a secret in our hosting environment, separately from the database, and the tokens are used only on our servers and never passed to your browser. Our database and media storage are encrypted at rest by our hosting providers.

Access to this data is restricted to the members of the customer organisation that connected the account, according to their role in ChatCMM. AdSimple staff may access it only for support and troubleshooting, and administrative actions are recorded in an audit log. We do not sell, share or transfer this data to third parties, do not use it for advertising, and do not use Google user data to develop, improve or train artificial intelligence or machine learning models.

We keep this data only for as long as the account is connected. When you disconnect the account in ChatCMM or revoke access with the provider (for Google in the security settings of your Google account), we delete the access tokens immediately and the remaining data of that account, including publishing logs, within 7 days. Once this retention period expires, the data is deleted or destroyed; copies in our hosting provider's encrypted backups are removed automatically after a limited period.