Privacy Policy — Krupno

Last updated: 11 September 2026

Krupno (the "App") is operated by WixMart Sp. z o.o., Poland (the "Operator"). Contact: biuro@wixmart.pl.

YouTube API Services — notice

Krupno uses YouTube API Services. When you connect a YouTube channel, the App accesses YouTube on your behalf through the official YouTube API Services. By using these features you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

What the App accesses: the identifier and title of the channel you connect; the videos you upload through the App and their public statistics (views, likes, comments); YouTube Analytics reports for your own videos; and, if you add public channels to the ideas section, the public data of those channels (titles, links, durations, view/like/comment counts).
What the App does with it: uploads the videos you schedule (with the title, description and privacy status you choose), sets the cover image you select, and shows the statistics of your own channel inside your organization's workspace. Data is not used for any other purpose.
Storage: access and refresh tokens are stored encrypted on our servers in the European Union and used only for the actions above; statistics are stored as daily snapshots; public data of channels you follow is refreshed daily and deleted or refreshed within 30 days (see section 5).
Sharing: YouTube data is never sold, shared with third parties or combined with data of other organizations. It is visible only to the members of your organization.
Revoking access: disconnect the channel in the App (Accounts → the channel → Disconnect), or revoke Krupno's access in your Google account at https://security.google.com/settings/security/permissions (also reachable via myaccount.google.com/permissions).

1. What data we collect

Account data: e-mail address, display name, password (stored as a salted hash).
Connected social accounts: when you connect an Instagram, Facebook, TikTok or YouTube account, we store the account identifier, name/handle and the access token issued by the platform. Tokens are stored encrypted and are used solely to publish content you schedule and to retrieve statistics of your own accounts and posts.
Your content: videos, images, captions and drafts you upload for editing and publishing.
Usage metrics of your posts: views, likes, comments and similar statistics returned by the platforms for your own accounts.
Public data of channels you choose to follow: if you add a public channel to the ideas section, we store the titles, links, durations and public view, like and comment counts of its recent videos, obtained through the platform's official API. This data is visible only to your organization, is never sold or shared, and is deleted or refreshed within 30 days.

2. What we do NOT do

We do not sell or share your personal data with third parties for marketing.
We do not post anything without an action scheduled or triggered by you.
We do not read your private messages on any platform.

3. How data is processed

Data is stored on servers operated by the Operator within the European Union. Media files you upload may be processed by our own processing servers (video rendering, automatic subtitles, AI-assisted caption generation). Where third-party AI services are used to generate text (e.g. captions), only the necessary content excerpts are transmitted.

3a. Data on your device, cookies and similar technologies

The App stores the following on your device, in the App's own protected storage: your sign-in session (access and refresh tokens, kept in the system keychain), your preferences, drafts of posts and edits, and local copies of the media you are editing or have chosen to upload. This information is used only to run the App and is removed when you sign out, delete the draft or uninstall the App. The App does not use advertising identifiers and does not track you across other apps or websites.

When you connect a social account, the sign-in happens on a web page of the respective platform (Google, Meta or TikTok). That platform may place, access or recognize cookies or similar technologies on your device according to its own policies (for Google, see the Google cookies policy). Our own website at krupno.app and the App's server do not set cookies of their own.

4. Platform data

Use of data received from YouTube API Services is subject to the Google Privacy Policy and the YouTube Terms of Service. Use of data received from Meta and TikTok APIs is limited to the features described above. You can revoke the App's access at any time in the security settings of the respective platform (e.g. Google security settings: https://security.google.com/settings/security/permissions).

5. Retention and deletion

Your data is kept while your account is active. You may request deletion of your account and all associated data at any time via the App or by writing to biuro@wixmart.pl; deletion is completed within 30 days. Disconnecting a social account removes its stored token immediately.

Data obtained from YouTube API Services is handled to the stricter schedule required by the YouTube API Services Terms of Service:

data about channels you do not own (the public channel data described above) is deleted or refreshed within 30 calendar days;
if you ask us to delete your data, YouTube API data is deleted within 7 calendar days of the request;
when you disconnect a channel in the App, its access token and all statistics we collected for it are deleted immediately; if you revoke access through your Google account permissions instead, the App detects the revoked authorization at the next daily refresh and deletes the stored token and statistics of that channel at that moment (at the latest within 30 calendar days);
statistics of your own channel are refreshed every 24 hours and are kept only while your authorization remains valid.

6. Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, portability and objection. Requests: biuro@wixmart.pl. You may lodge a complaint with the Polish supervisory authority (UODO).