THEISThese policies describe how the service THEIS (the "service" or "we") processes users' personal data and what rights you have in connection with it. The operator and controller of personal data is Tetify s.r.o., company ID 23715227, registered office at Korunní 2569/108, Vinohrady, 101 00 Praha 10, contact: theodor@tetify.cz.
1. What data we process
- Account and identity: name, e-mail address, role in the team and account settings. You can sign in with an e-mail and password, with a Google account or with an Apple ID.
- Contents: videos, post copy, titles, metadata and publishing plans that you put into the service.
- Operational data: sign-ins, actions in the app, technical logs and the data needed to run and secure the service.
- Data from connected platforms: with your consent, the tokens and account identifiers for YouTube, Instagram, Facebook, TikTok, Threads and LinkedIn needed for publishing and reading public stats, and for Twitch and Kick accounts to read broadcast data.
- Audience response: comments and replies on your posts on connected networks, including the name, username and profile picture of their author, and the stats of those posts. They are used so that you can reply to comments and moderate them in the Inbox; they are visible only to your team.
- Devices and notifications: device identifiers for delivering push notifications.
- Broadcast data: for connected channels on Twitch and Kick, the broadcasts aired, their length, viewership over time, clips and overall audience growth. These are figures about the channel, not about individual viewers.
- Billing details: organisation name, billing address and subscription status. A payment card is never entered into or stored in THEIS — payments are handled by the payment gateway.
2. Why we process data (purposes and legal basis)
- Providing the service — managing video production and publishing (performance of contract).
- Publishing to social networks — on your instruction we send content to connected accounts (performance of contract / consent).
- Stats and analytics — showing post performance (legitimate interest).
- Security and operations — abuse prevention, logs, backups (legitimate interest, legal obligation).
- Communication — notifications and operational messages (legitimate interest / consent).
3. Transfers and third-party processors
To run the service we use trusted providers who process data on our behalf:
- Supabase Inc. — database, authentication and file storage; the sub-processor is Amazon Web Services.
- Google / Firebase — web hosting, server functions and push notifications.
- Google Drive — storage for uploaded videos and graphic source files.
- Google — sign-in through "Sign in with Google" (processing of the e-mail address and the account name for verification).
- Apple — sign-in through "Sign in with Apple"; processing of the e-mail address (or an Apple relay address) and the account name for verification.
- Google / YouTube — uploading videos and reading stats through YouTube API Services.
- Meta (Facebook, Instagram) — publishing posts through the Graph API.
- TikTok — publishing through the Content Posting API.
- Meta (Threads) — publishing and reading replies through the Threads API. This is a separate application with its own sign-in, kept apart from Facebook and Instagram.
- LinkedIn — publishing to a company page and reading comments through the Community Management API.
- Twitch — reading data on broadcast streams, viewership, clips and audience growth. Nothing is sent to Twitch.
- Kick — the same for streams on Kick, including receiving events about the start and end of a broadcast.
We pass data on only to the extent necessary for the given function and on the basis of your instruction or consent.
4. YouTube API Services
The service uses YouTube API Services. By using features connected with YouTube you agree to the the YouTube Terms of Service. Data processing by Google is governed by Google Privacy Policy.
You can revoke the access you granted the service to YouTube at any time in the security settings of your Google account at myaccount.google.com/permissions. Data obtained from the YouTube API are used solely to publish and display stats for your content; we do not sell them and do not pass them to third parties for advertising.
5. Retention period
We keep personal data for as long as the account exists and afterwards for the period necessary to meet legal obligations and protect our legitimate interests. Access tokens for connected platforms are kept until you remove the connection.
6. Security
We use technical and organisational measures (encrypted transfer, role-based access control, secret tokens written for the server only). Even so, no transfer or storage is 100% secure.
7. Your rights
In line with the GDPR you have the right of access to your data, to its rectification and erasure, to restriction of processing, to portability, to object and to withdraw consent. You also have the right to lodge a complaint with the Office for Personal Data Protection. Send requests to theodor@tetify.cz.
8. Cookies and local storage
We use essential cookies and the browser's local storage for login, settings and running the application. Without them the service would not work. We do not use them for third-party marketing tracking.
9. Changes to this policy
We may update these policies. We will inform you of material changes in the service or by email. The current version is always available on this page.