Grind Studio

Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how Grind Studio (https://ytgrind.site), operated by Tobia Bartolomei, Italy("we", "us"), collects and uses personal data when you use our content publishing service. We act as data controller under the EU General Data Protection Regulation (GDPR). Contact: Thetoptv.work@protonmail.com.

Data we collect

  • Account data: your email address and an encrypted password, used to sign in.
  • Content you upload: videos, audio, images, titles, descriptions, hashtags and schedules.
  • Connected platform data: when you connect YouTube, TikTok, Instagram or Facebook we receive an access token (and, where provided, a refresh token), the account or channel ID, display name or nickname, avatar and the permissions you granted.
  • Publishing data: the ID, URL and status of each post we publish on your behalf.
  • Technical data: server logs (IP address, browser, timestamps) kept for security for up to 30 days.

How we use the data

  • To publish the content you upload and approve, at the time you schedule, on the accounts you connect.
  • To show which account will receive the content and the publishing status of each post.
  • To send you notifications about successful or failed publications.
  • To keep the service secure and to fix errors.

We do not sell personal data, we do not use it for advertising and we do not use content or data from connected platforms for any purpose other than providing the features you request.

Platform-specific information

  • YouTube / Google: we use YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's data processing is governed by the Google Privacy Policy. You can revoke access at any time at Google security settings. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • TikTok: we use TikTok Login Kit and the Content Posting API only to read your basic profile information (display name and avatar) and to upload or publish videos that you choose. You can revoke access in the TikTok app under Settings and privacy > Security > Manage app permissions.
  • Meta (Facebook and Instagram): we access the Facebook Pages and Instagram professional accounts you select only to publish Reels you approve. You can remove the app at any time from Facebook Settings > Business integrations.

Legal basis

We process data to perform the contract with you (Art. 6(1)(b) GDPR) and for our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

Storage, security and processors

Data is stored with the following providers, acting as processors: Supabase (database and authentication), Cloudflare R2 (media storage), Vercel (hosting), Inngest (job scheduling) and Telegram (notifications). Access tokens are encrypted with AES-256-GCM and are never exposed to the browser. Some processors may transfer data outside the EU under Standard Contractual Clauses.

Retention

We keep your data while your account is active. Tokens are deleted as soon as you disconnect an account. Uploaded media can be deleted by you at any time. When you delete your account, all associated data is deleted within 30 days.

Your rights

You can request access, correction, deletion, restriction, portability or object to processing by writing to Thetoptv.work@protonmail.com. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). See also our data deletion instructions.

Changes

We will update this page if our practices change and update the date above.