Marbrio Studio
Privacy policy
Marbrio Studio is the platform I use to prepare, schedule and publish content for Marbrio's clients on their Facebook, Instagram and YouTube accounts, after the client approves it. This page explains what data the platform uses, why, where it is stored and how you can delete it.
01Who is responsible for the data
I am Scornea Marius-Ioan and I run Marbrio, a marketing and automation agency in Romania. I am responsible for the data in the platform. For any question about it, write to me at contact@marbrio.com.
02What data I use
- Your platform account: your business name and the email address you sign in with.
- Content to publish: texts, images, videos and covers, the time they should go out, and your approvals and comments.
- Connected social accounts: the name and ID of your Facebook Page, Instagram account or YouTube channel, and the access tokens that Meta and Google issue to the platform after your consent.
- Results of posts published through the platform: likes, comments, shares, saves and views.
I never ask for or store the passwords of your social accounts. I do not read private messages and I do not collect data about the people who follow you.
03What I use it for
Only to publish the content you approved, at the scheduled time, and to show you its results. I do not sell or rent the data, I do not use it for advertising, and I do not use it to train artificial intelligence models. The legal basis is our working agreement (GDPR, Article 6(1)(b)).
04Data from Google and YouTube
For YouTube, the platform uses the YouTube API Services: it uploads approved videos, sets their title, description, thumbnail and publishing time, and reads information about the channel and about the videos uploaded through the platform.
By using these features you agree to the YouTube Terms of Service. Google processes data under the Google Privacy Policy. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke the platform's access at any time from your Google Account settings.
05Data from Facebook and Instagram
For Facebook and Instagram, the platform uses the Meta APIs: it publishes approved posts to the Pages and accounts you gave me access to, and reads their results. Meta processes data under the Meta Privacy Policy.
You can revoke access at any time: on Facebook, go to Settings & privacy, then Settings, then Business integrations, and remove the Marbrio app. Or remove Marbrio's partner access from your business portfolio.
06Where the data is stored and who else processes it
The platform's data is stored on servers in the European Union, with hosting and infrastructure providers that process it only on my instructions and only to run the platform. Emails you send me reach my email provider. If a provider is established outside the European Union, the transfer takes place only with the safeguards required by the GDPR (an adequacy decision or standard contractual clauses).
Approved content reaches Meta (Facebook, Instagram) and Google (YouTube) only so that it can be published on your accounts.
Access tokens are stored encrypted. Only I can access the servers and the database, over encrypted connections.
07How long I keep it
- Access tokens: while the account is connected. I delete them when you disconnect it or when our collaboration ends.
- Files uploaded for posts: deleted 30 days after the post is published.
- Posts, approvals and results: for as long as we work together. After that I delete them within 30 days, unless you ask otherwise.
- Backups: 14 days.
08Your rights
Under the GDPR you can request access to your data, its correction, deletion, restriction or transfer, and you can object to its processing. Write to me at contact@marbrio.com and I will reply within one month. If you are not satisfied with the answer, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).
09Data deletion
To have your data deleted, write to me at contact@marbrio.com from your account's email address, with the subject "Data deletion". I delete the access tokens, the content and the results within 30 days and confirm by email.
You can also revoke access to your accounts yourself, at any time: from Facebook (section 05) or from your Google Account (section 04).
10Changes
If I change this policy, I update the date at the top and let you know in the platform.