Privacy Policy

We collect information that you provide, information generated when you use ArtistPush, and information returned by third-party platforms after you expressly connect an account. The categories below describe that information in more detail.

When you create an ArtistPush account, we may collect your name, email address, profile image, authentication identifiers, account preferences, and workspace or artist profile information. Password authentication is handled by our authentication provider; we do not receive passwords for connected social media services.

Sag74 Solutions Lda operates ArtistPush and is the data controller for personal information handled through the ArtistPush website and service, except where a connected platform or service provider acts as an independent controller.

This policy applies to the public ArtistPush website, authenticated workspaces, public artist pages, support interactions, and the social and music platform connections that a user chooses to authorise.

When you connect a social or music platform, we may receive the account identifier, display name, username, avatar, account type, channel or page details, permissions granted, and other profile information made available by that platform and authorised by you.

ArtistPush uses official OAuth flows to connect supported platforms. We may store access tokens, refresh tokens, token expiry information, scopes, and related authorisation metadata so that we can perform actions you request. We do not ask for or store the password to your connected platform account. Tokens are treated as confidential credentials and are protected in server-side systems.

When a user chooses to connect a Gmail or Google Workspace mailbox, ArtistPush uses Google's official OAuth authorisation flow and Gmail API. Connecting YouTube does not by itself give ArtistPush access to Gmail. Gmail access is requested separately and only after the user selects the email connection feature.

With the user's authorisation, ArtistPush may access the connected email address and profile identity, mailbox labels and counters, message and thread identifiers, senders and recipients, subjects, snippets, dates, read and starred status, message bodies, drafts, and attachments. ArtistPush uses this data only to provide the email-client functions requested by the user, including displaying, searching, sending, replying, forwarding, drafting, downloading attachments, and changing mailbox state.

Gmail remains the source of truth. ArtistPush does not intentionally create a permanent full copy of the mailbox. It stores encrypted OAuth credentials, connection and synchronisation state, and a limited message index needed for performance and search. Full message bodies and attachment bytes are retrieved when needed and are not stored in the message index.

ArtistPush's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not used for advertising, is not sold, and is not used to build unrelated user profiles. It is not transferred to third parties except as needed to provide or secure the user-requested service, comply with applicable law, or as part of a corporate transaction subject to appropriate protections and applicable policy requirements. Humans do not read Gmail message content except with the user's affirmative agreement for support or security purposes, when required by law, or where the data has been aggregated and anonymised for internal operations as permitted by applicable policy.

ArtistPush uses YouTube API Services when a user chooses to connect a YouTube channel. Use of YouTube through ArtistPush is also governed by the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy.

ArtistPush uses Google's official OAuth 2.0 authorisation flow and requests only the permissions needed for the YouTube features currently offered. Depending on the feature selected by the user, those permissions allow ArtistPush to identify the connected Google account and YouTube channel; read channel, video, playlist, category, and performance information; upload videos; manage user-selected video metadata and playlists; and read YouTube Analytics reports. ArtistPush never asks for or stores a user's Google or YouTube password.

With the user's authorisation, ArtistPush may access and store the connected channel identifier, channel name, handle, avatar, channel URL, subscriber and content totals, granted scopes, token status, and other connection metadata. It may also access video and Short identifiers, titles, descriptions, thumbnails, publication dates, privacy and made-for-kids settings, categories, tags, playlists, processing status, and public engagement statistics such as views, likes, comments, and shares.

Where the user authorises YouTube Analytics, ArtistPush may retrieve reporting data such as views, watch time, average view duration, subscribers gained or lost, likes, comments, shares, and daily or period totals. ArtistPush uses this information only to show the authorising user the connected channel and its content, provide publishing and playlist features requested by that user, maintain publication history, troubleshoot requested actions, and present channel and content analytics inside the user's workspace.

Authorised YouTube data is visible only to the authorising user and people that user has expressly permitted to access the relevant ArtistPush workspace. ArtistPush does not sell YouTube API data, use it for advertising, or disclose it to advertisers. It may be processed by infrastructure providers acting on ArtistPush's behalf only as necessary to operate, secure, and support the service, or disclosed where required by law.

ArtistPush performs a YouTube upload, metadata change, playlist action, or privacy-setting choice only after the user selects the relevant channel and expressly confirms the action. Before publication, the interface identifies YouTube as the destination and lets the user review the video, title, description, tags, category, playlist, audience setting, and privacy choice supported by the feature. ArtistPush does not initiate uploads, engagement, or other write actions without the user's specific instruction.

Media uploaded by a user may be stored temporarily in ArtistPush infrastructure to complete the publication workflow and maintain the user's own media library or publication record. ArtistPush does not download, cache, or make offline copies of audiovisual content obtained from YouTube API Services.

ArtistPush stores OAuth tokens only while needed to provide the features authorised by an active user. Authorised YouTube Analytics data, reporting data, and statistics may be retained as needed for the authorised analytics service, while ArtistPush regularly verifies that the user's authorisation remains valid. Other stored YouTube API data is refreshed or deleted within 30 calendar days, and ArtistPush uses reasonable efforts to keep displayed data consistent with current information available from YouTube.

If YouTube grants ArtistPush permission under additional policies for derived metrics or extended storage, ArtistPush will use that permission only for the approved use case and within the approved retention period. Information calculated independently by ArtistPush is identified as ArtistPush data and is not presented as a YouTube metric.

A user can disconnect a YouTube account in ArtistPush under Social accounts. ArtistPush deletes the active connection and associated authorised YouTube data from active systems and attempts to revoke the Google token immediately. Verified requests to delete stored YouTube data are processed as soon as possible and within seven calendar days. Deleting data from ArtistPush does not delete data held by YouTube; users must use YouTube to delete content from their channel.

A user may also revoke ArtistPush through Google Account security settings. ArtistPush periodically checks whether authorisation remains valid and deletes related YouTube API data after detected revocation as soon as possible and no later than the period required by the YouTube API Services policies.

ArtistPush integrates with TikTok only when a user chooses to connect a TikTok account. The connection uses TikTok Login Kit and an OAuth authorisation screen. ArtistPush is not owned by, endorsed by, sponsored by, or affiliated with TikTok.

user.info.basic lets ArtistPush receive the TikTok account's app-specific open ID, union ID where returned, display name, and avatar. ArtistPush uses this information to identify and display the connected account inside the user's workspace.

user.info.profile permits additional profile fields such as the profile link, biography, and verification status. ArtistPush requests those fields when establishing the connection; it stores the profile link where returned but does not store the biography or verification flag in the connected-account record.

user.info.stats, when approved for the production application and authorised by the user, lets ArtistPush retrieve account totals such as followers, accounts followed, likes, and published videos so the user can review the connected account's performance in Analytics.

video.list, when approved for the production application and authorised by the user, lets ArtistPush retrieve the connected user's TikTok video list and the associated titles, publication dates, cover images, links, views, likes, comments, and shares for display in Analytics.

video.publish is requested only when Direct Post has been enabled for the production TikTok application. It lets ArtistPush query the current creator name, username, available privacy choices, interaction settings, and maximum video duration; upload a video selected by the user; initiate the post using the caption and settings confirmed by the user; and check the resulting processing status.

ArtistPush does not currently request video.upload and does not use TikTok's draft-upload permission.

TikTok profile data is used to show which account is connected and which account will receive a post. Creator information is retrieved when the TikTok publishing screen is used so ArtistPush can display the options that TikTok currently allows. Videos, captions, privacy selections, interaction choices, commercial-content declarations, and AI-generated-content choices are sent to TikTok only after the user selects TikTok and confirms the publishing action.

ArtistPush stores the connected account identifiers, display information, granted scopes, token expiry details, and encrypted OAuth access and refresh tokens needed to maintain the connection. Tokens are handled server-side and are not exposed in public pages. Uploaded media and operational publishing records may also be stored in ArtistPush infrastructure to provide the requested workflow, troubleshooting, and publication history.

ArtistPush does not sell TikTok data and does not share it with advertisers. It is disclosed to TikTok when necessary to carry out the user's instruction and to infrastructure providers acting on ArtistPush's behalf.

We process media files, captions, titles, descriptions, links, publishing settings, drafts, generated suggestions, and other content that you upload, create, or instruct ArtistPush to publish. This content may contain metadata supplied by your device or the source file.

We may collect technical and usage data such as IP address, browser and device type, operating system, pages visited, feature interactions, timestamps, request logs, error records, publishing status, and aggregated analytics. We may also retrieve content and account performance metrics that connected platforms make available under your authorisation.

We use information to provide and operate ArtistPush; authenticate users; connect authorised accounts; prepare and publish content at your direction; display account and performance information; maintain artist workspaces; provide support; secure, troubleshoot, and improve the service; comply with law; and communicate important service or policy updates.

We do not sell personal information or connected-account credentials. We do not use content obtained from platform APIs for unrelated advertising.

ArtistPush may integrate with Instagram and Facebook (Meta), Threads, TikTok, YouTube and Google services, X, Pinterest, Bluesky, Spotify, Apple Music, Deezer, TIDAL, and other services identified in the product. Each platform independently controls the information it makes available, its API functionality, and its own handling of your data.

Our use of information received from third-party APIs is subject to the applicable platform terms, developer policies, and user-data rules. Your use of a connected platform remains governed by that platform’s privacy policy and terms.

We may share information only as needed with: platforms you instruct us to connect to or publish to; infrastructure, hosting, database, storage, authentication, security, analytics, and support providers acting for us; professional advisers; authorities when legally required; or a successor in a merger, financing, reorganisation, or sale of the business.

Service providers are permitted to process information only to perform their services for us and must protect it appropriately. We do not disclose OAuth tokens to other users or publish them publicly.

ArtistPush uses Supabase for database, authentication, and storage services; Vercel for production web hosting and delivery; and Cloudflare R2 where configured for media storage. Google Gemini may process content only when a user configures and invokes the optional AI assistance features. Connected platforms such as TikTok, Google/YouTube, Meta, X, Pinterest, Bluesky, and Spotify process information when a user connects them or requests an action.

These providers may process information in countries outside the user's country. Where European data-protection law applies, ArtistPush relies on the transfer mechanisms and safeguards made available by the relevant provider and applicable law.

Where the GDPR or UK GDPR applies, ArtistPush processes information as necessary to perform the service requested by the user, based on consent for optional connections or features where required, for legitimate interests such as security, service reliability, support, and fraud prevention, and to comply with legal obligations. A user may withdraw consent for a connected platform by disconnecting it, without affecting processing that was lawful before withdrawal.

Information may be processed in countries where we or our service providers operate. We apply reasonable administrative, technical, and organisational safeguards, including access controls, server-side credential handling, encryption in transit, and encryption or equivalent protection for sensitive stored credentials where supported.

No internet service can guarantee absolute security. You are responsible for keeping your ArtistPush login secure and notifying us promptly if you suspect unauthorised access.

We retain account information while your account is active and as reasonably necessary to provide the service. Connected-account information and tokens are retained while the connection remains active or until they expire, are revoked, or are deleted. User content and operational records are retained according to service needs, backup cycles, legal obligations, dispute resolution, security, and fraud-prevention requirements.

When information is no longer required, we delete or anonymise it within a reasonable period, subject to legally required retention and limited backup copies that are isolated until overwritten.

When a Gmail mailbox is disconnected, ArtistPush deletes its active mailbox connection, encrypted credentials, and associated message index from active systems. The user may also revoke ArtistPush directly from Google Account security settings. Messages and drafts sent to or stored in Gmail remain subject to the user's actions and Google's retention practices.

Depending on your location, you may have rights to access, correct, export, restrict, object to processing of, or delete personal information, and to withdraw consent where consent is the legal basis. You may also have the right to complain to your local data protection authority.

To exercise a right, use the contact in the Company Information section below. We may need to verify your identity and authority over the relevant account before fulfilling the request.

You may request deletion of your ArtistPush account and associated personal information using the contact in the Company Information section below. You may also disconnect individual platform accounts from ArtistPush. A deletion request will remove or de-identify eligible information from active systems, subject to legal, security, fraud-prevention, dispute, and backup-retention exceptions.

Please identify the ArtistPush account email and the connected platform concerned. We will acknowledge and process verified requests within the period required by applicable law.

You can disconnect TikTok or another platform from Settings > Social accounts inside ArtistPush. ArtistPush then deletes the connected-account record and attempts to revoke the provider token. You can also revoke ArtistPush from the security or connected-app settings of the relevant platform. Revocation prevents future API access once processed but does not automatically delete other information already lawfully stored by ArtistPush. Use the data deletion process above if you also want that information removed.

Gmail mailboxes can be disconnected from the Email area for the relevant artist. ArtistPush then deletes the mailbox connection and attempts to revoke the Google token. Users can additionally remove ArtistPush under their Google Account's third-party connections.

ArtistPush uses cookies and similar local storage technologies that are necessary for authentication, session security, privacy choices, preferences, OAuth state validation, and core service operation. On public artist pages, optional visit and interaction measurement and live audience features operate only after you select “Accept all”. Selecting “Essential only” keeps those optional features disabled.

See our Cookie Policy for the storage used, its purposes, and how to change your choice. Blocking essential cookies may prevent login or connected-account features from working.

ArtistPush is not directed to children under 13, or to a higher minimum age where local law requires it. We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided information to us, contact us so we can investigate and delete it.

We may update this policy to reflect changes to ArtistPush, platform requirements, or applicable law. We will post the revised policy at this URL and update the “Last updated” date. Where required, we will provide additional notice or request consent before a material change takes effect.

Sag74 Solutions Lda

Company identification and contact details are available in the Company Information section below.

Please use the subject “Privacy Request” for privacy or data-deletion enquiries.

Company

Sag74 Solutions Lda

NIPC

516653113

Email

support@artistpush.app

Address

3780-174 Anadia