Privacy Policy.

1. Data controller

Kroventra, operating from Antwerp, Flanders, Belgium under enterprise and VAT number BE 0718.820.676, is the controller responsible for personal data processed through this website and its own business operations.

Privacy requests may be sent to contact@kroventra.com. Additional company information is available in the Legal Notice.

2. Information collected

Contact and project requests

Kroventra may collect names, email addresses, telephone numbers, company names, VAT numbers, requested services, budgets, timelines, target audiences, project descriptions, selected features and files submitted with an enquiry.

Customer and commercial records

Customer records may include contact details, customer codes, project information, deliverables, budgets, deadlines, revision counts, invoices, payment status and related correspondence.

Uploaded material

Files uploaded for enquiries or projects may include images, video, audio, documents, brand assets and other customer-supplied material. Customers should not upload unnecessary sensitive personal data.

Connected social accounts

When a social account is connected, Kroventra may process the platform name, account name, platform-specific account identifier, access token, refresh token, granted permissions and connection status.

Publishing information

Kroventra may store campaign titles, captions, media references, selected platforms, scheduling information, publication status, platform post identifiers and available performance statistics such as impressions, likes, comments, shares and clicks.

Technical and security information

The service may process timestamps, administrative activity records, error information, IP-derived security information and other limited technical data needed to protect, debug and operate the system.

3. TikTok data

If a user connects TikTok, Kroventra may receive data authorised by that user through TikTok Login Kit and the Content Posting API. Depending on the granted permissions, this can include the TikTok account identifier, display information, creator information, access and refresh tokens, privacy options, publishing eligibility, post metadata and publication status.

TikTok data is used only to connect the selected account, display relevant publishing options, submit content explicitly selected by the user, check publishing status and maintain the authorised integration.

Kroventra does not use TikTok account data to create advertising profiles and does not sell TikTok data. A user may disconnect TikTok from Kroventra or revoke access through TikTok. Deletion may also be requested at contact@kroventra.com.

4. Purposes and legal bases

• Requested steps and contracts: responding to enquiries, preparing proposals, delivering projects, managing connected accounts, publishing authorised content and providing support.
• Legal obligations: maintaining invoices, accounting information and records required by Belgian or European law.
• Legitimate interests: securing services, preventing abuse, maintaining activity records, improving operations and handling business communications.
• Consent: optional marketing, non-essential cookies and platform permissions where consent is the appropriate legal basis.

Consent may be withdrawn at any time without affecting processing already performed lawfully before withdrawal.

5. How information is used

Personal data may be used to:

• Respond to messages and project requests.
• Prepare quotations and deliver contracted services.
• Create and maintain customer, project and invoice records.
• Store and manage customer-supplied project files.
• Send operational email notifications.
• Connect authorised social accounts.
• Publish user-approved content and retrieve available status or analytics data.
• Protect administrative systems and investigate technical failures.
• Comply with accounting, tax and legal obligations.

6. Recipients and service providers

Information may be processed by providers supporting Kroventra's hosting, infrastructure, email delivery, file storage, payment administration, software development and security.

When users request platform integrations, relevant information is transmitted to the selected platform, which may include Meta services such as Instagram and Facebook, TikTok or another social platform. Those companies process information under their own privacy policies.

Project material is shared with AI, media or other specialist providers only when reasonably required for the requested service or when otherwise agreed with the customer.

Kroventra does not sell personal data.

7. International transfers

Some technology and social-platform providers may process data outside Belgium or the European Economic Area. Where required, Kroventra relies on an applicable adequacy decision, standard contractual clauses or another legally recognised transfer safeguard.

8. Retention

Information is retained only for as long as reasonably necessary for its purpose, ongoing customer relationships, security, dispute handling and applicable legal obligations.

• Unsuccessful or inactive enquiries are periodically reviewed and deleted when no longer commercially or legally necessary.
• Customer and project information is retained for the relationship and an appropriate period afterward for support, evidence and dispute handling.
• Invoices and accounting records are retained for the period required by applicable law.
• Uploaded files are retained while needed for the enquiry, project, delivery, support or legitimate evidentiary requirements.
• Social access and refresh tokens are retained while the corresponding connection remains active or until removal is requested, subject to necessary backup rotation.
• Publishing records and technical logs are periodically reviewed and removed or anonymised when no longer needed.

9. Security

Kroventra applies reasonable technical and organisational safeguards appropriate to the nature of the service. Measures include HTTPS transport, restricted administrative access, server-side credential storage, access controls, backups and operational logging.

No internet-connected service can guarantee absolute security. Users should immediately report suspected unauthorised account activity.

10. Cookies

Information about cookies and similar technologies is provided in the Cookie Policy. Non-essential analytics or advertising technologies will require an appropriate legal basis and consent mechanism before activation where required.

11. Individual rights

Subject to applicable conditions and exceptions, individuals may request:

• Access to their personal data.
• Correction of inaccurate or incomplete data.
• Deletion of personal data.
• Restriction of processing.
• Objection to processing based on legitimate interests.
• Data portability where applicable.
• Withdrawal of consent where processing relies on consent.

Kroventra may request reasonable information to verify identity before completing a privacy request.

12. Disconnecting and deleting social data

Users may disconnect an account through the Kroventra administration interface where that option is available. Access can also be revoked through the connected social platform's own account settings.

To request deletion of a connected account record, associated OAuth tokens or other personal data, email contact@kroventra.com with the subject “Data deletion request”. Do not include access tokens or passwords in the request.

13. Complaints

Individuals may contact Kroventra first so that a concern can be investigated. They also have the right to lodge a complaint with the Belgian Data Protection Authority or another competent supervisory authority.

14. Children

Kroventra's commercial project services are not directed to children. A person who cannot legally enter the relevant agreement must act through a parent, guardian or authorised representative.

15. Policy updates

This policy may be updated when Kroventra's services, providers or legal obligations change. The effective date displayed above identifies the current version.