Privacy Policy

Last updated: 25 September 2026 · Versione italiana

This is an English translation provided for convenience. If the two versions differ, the Italian version prevails.

WooopHub (wooophub.com) is an online service that lets freelancers and agencies prepare, get approved, schedule and publish content on their own social media profiles and on those of their clients. This policy explains what data we process, why, for how long and what rights you have, under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.

1. Data controller

Hettiarachchi Nick Alex (sole proprietorship), Via Cristoforo Colombo 21, 20064 Gorgonzola (MI), Italy, VAT no. IT14053740966.
Email for any privacy request: backupnickclicks@gmail.com.

2. What data we process

2.1 Your account data

Name, email address, password (stored only as a non-reversible hash), name of your studio or agency, role in the team and usage preferences. If you sign up or log in with Google, we only receive from Google your name, email address, profile picture and an identifier of your Google account (scopes openid, email, profile). We never receive your Google password.

2.2 Connected social profiles

When you connect a social profile, you authorise WooopHub through the platform’s official procedure. We receive an access token, which we store encrypted with AES-256-GCM and use only for the features you turn on. This is what we ask for and why:

  • Facebook – pages_show_list to show you the Pages you manage and let you choose which ones to connect; pages_manage_posts to publish the posts you scheduled; pages_read_engagement and read_insights to show post and Page statistics in reports; pages_manage_engagement to read and manage comments on your posts; business_management to find Pages managed through Meta Business Suite.
  • Instagram (professional accounts linked to a Facebook Page) – instagram_basic to read the profile name and picture; instagram_content_publish to publish scheduled content; instagram_manage_comments to read and manage comments; instagram_manage_insights for report statistics.
  • TikTok – user.info.basic and user.info.profile to identify the connected profile; video.upload to upload the videos you prepared.
  • Google Business Profile – business.manage to publish updates on the business listing and read its data.
  • YouTube – youtube.readonly to identify the connected channel (channel name, @handle, picture and subscriber count); youtube.upload to upload the videos you created and scheduled in WooopHub, with the title and privacy status you chose. WooopHub uses YouTube API Services: by connecting a channel you also agree to the YouTube Terms of Service, and Google processes data according to the Google Privacy Policy.

Google user data (Limited Use). WooopHub’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google and YouTube is used only to provide the features you see in WooopHub (identifying the connected account and publishing the content you scheduled). It is not sold, not used for advertising, not used to train AI models and not shared with third parties except the technical providers listed in section 4. Access tokens are stored encrypted on our servers and are deleted when you disconnect the channel or delete your account. You can revoke WooopHub’s access at any time from your Google Account security settings at myaccount.google.com/permissions.

From the platforms we only read data about the profiles you chose to connect: profile name and picture, technical identifiers, posts published through WooopHub, comments and aggregated statistics. We do not read private messages and we never publish anything that you or your team did not schedule.

2.3 Content

Texts, images and videos you upload, the editorial calendar, internal team comments and approval notes.

2.4 Clients who approve content or receive reports

If you send one of your clients an approval link or a monthly report, we process their name and email address (which you provide) and their responses (approved, changes requested, comment). For this data you are the controller and WooopHub acts as processor on your behalf.

2.5 Billing data

For paid subscriptions: billing name, address, VAT number or tax code, chosen plan and invoice history. Payment card data is handled directly by the payment provider and never passes through our servers.

2.6 Technical data

IP address, date and time of requests, browser type, log of successful and failed publications and their errors. We use them for security, troubleshooting and to warn you when a post fails to go out.

3. Why we process it and on what legal basis

  • Providing the service (account, connecting profiles, scheduling and publishing, approvals, reports, service emails such as error alerts or connection expiry notices): performance of a contract, art. 6(1)(b) GDPR.
  • Billing and tax obligations: legal obligation, art. 6(1)(c).
  • Security, abuse prevention and service improvement: legitimate interest, art. 6(1)(f).
  • Marketing communications: only with your consent, art. 6(1)(a), which you can withdraw at any time. We currently send no newsletters.

We do not sell your data, we do not use it for advertising and we do not do profiling.

4. Who we share it with

We use these providers, appointed as processors where required:

  • Hostinger – servers and database, located in the European Union (Netherlands).
  • Brevo (Sendinblue SAS, France) – sending service emails.
  • Google – Sign in with Google and, if you connect them, Google Business Profile and YouTube.
  • Meta Platforms Ireland – Facebook and Instagram, for the profiles you connect.
  • TikTok Technology Limited – for the TikTok profiles you connect.
  • The payment provider, when you start a paid subscription.

When you publish on a social platform, the content is also processed by that platform under its own privacy policy. Some providers may transfer data outside the European Union: in that case the transfer is based on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses.

5. How long we keep it

  • Account data and content: as long as the account is active. After closure we delete them within 30 days.
  • Social profile tokens: as long as the profile stays connected. When you disconnect a profile in WooopHub the token is deleted immediately; if you revoke access from the platform the token stops working and is deleted when you disconnect the profile or close the account.
  • Technical logs: 12 months at most.
  • Invoices and tax data: 10 years, as required by law.
  • Backups: overwritten on a rolling basis within 30 days at most.

6. How we protect it

All traffic uses HTTPS. Social access tokens are encrypted with AES-256-GCM. Each studio only sees its own data. Links sent to clients for approvals and reports are signed and give no access to the rest of the account.

7. Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, receive it in a machine-readable format (portability) and object to processing based on legitimate interest. If you gave consent you can withdraw it. Write to backupnickclicks@gmail.com: we reply within 30 days.

If you believe the processing breaks the law you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. How to delete your data

Full instructions, including how to revoke access from the Facebook and Instagram side, are on the Data deletion page.

9. Cookies

WooopHub only uses technical cookies required for the site to work, which need no consent:

  • wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie – keep you logged in;
  • sh_entra – remembers for a few minutes which page started the Google sign-in, to bring you back to the right place and to protect the procedure.

We use no profiling cookies, no third-party analytics and no advertising.

10. Minors

WooopHub is designed for professional use and is not aimed at people under 18.

11. Changes

If we change this policy in a material way we will tell you by email before the change takes effect. The date at the top shows the latest version.