MB VARIANTAI ("we") is the data controller for personal data processed via sosposting.com and the SOSPosting service. We process data in line with the GDPR (Regulation (EU) 2016/679).
1. What we collect
- Account data: email, name, hashed password, billing data.
- Integration data: API keys / OAuth tokens for the platforms you connect.
- Content: the media and text you submit for cross-posting.
- Usage data: logs, IP address, basic device info.
- Analytics: if you accept analytics cookies, Google Analytics 4 (anonymised IP).
2. Legal bases
Performance of contract (Service delivery), consent (analytics cookies), legitimate interest (security, fraud prevention), legal obligation (accounting).
3. Sharing
We share data with the third-party platforms you connect (only as needed to publish your content) and with infrastructure subprocessors (hosting, payment, analytics). We do not sell personal data.
4. Retention
Account data is retained while your subscription is active and up to 24 months after closure, except where longer retention is required by law (e.g. accounting records — 10 years in Lithuania).
5. Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the State Data Protection Inspectorate (VDAI) in Lithuania.
6. Cookies
See the cookie banner. You can change your choice anytime via the "Cookie settings" link in the footer.
7. Google & YouTube API Services
SOSPosting lets you connect Google services, including YouTube, to publish your content. SOSPosting's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- YouTube Data API: when you connect a YouTube channel we request the
youtube.readonlyscope (to read your channel name and ID so we can show which channel you are publishing to) and theyoutube.uploadscope (to upload the videos you create in SOSPosting to your own channel). We do not read, modify, or delete any other YouTube data. - What we store: only an encrypted OAuth refresh token and your channel ID and display name. Tokens are encrypted at rest and used solely to perform the publishing actions you request.
- What we do not do: we do not sell Google/YouTube user data, do not use it for advertising, and do not transfer it to third parties except as needed to provide the publishing feature you requested or where required by law.
- Revoking access: you can disconnect YouTube anytime from the SOSPosting Integrations page, or revoke access at myaccount.google.com/permissions. On revocation we stop using and delete the stored token.
By connecting YouTube you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
8. Contact
hello@sosposting.com