Privacy Policy — Krupno

Last updated: 6 October 2026

Krupno (the "App") is operated by WixMart Sp. z o.o., Poland (the "Operator"). Contact: biuro@wixmart.pl.

YouTube API Services — notice

Krupno uses YouTube API Services. When you connect a YouTube channel, the App accesses YouTube on your behalf through the official YouTube API Services. By using these features you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

• What the App accesses: the identifier and title of the channel you connect; the videos you upload through the App and their public statistics (views, likes, comments); YouTube Analytics reports for your own videos; and, if you add public channels to the ideas section, the public data of those channels (titles, links, durations, view/like/comment counts).
• What the App does with it: uploads the videos you schedule (with the title, description and privacy status you choose), sets the cover image you select, and shows the statistics of your own channel inside your organization's workspace. Data is not used for any other purpose.
• Storage: access and refresh tokens are stored encrypted on our servers in the European Union and used only for the actions above; statistics are stored as daily snapshots; public data of channels you follow is refreshed daily and deleted or refreshed within 30 days (see section 5).
• Sharing: YouTube data is never sold, shared with third parties or combined with data of other organizations. It is visible only to the members of your organization.
• Revoking access: disconnect the channel in the App (Accounts → the channel → Disconnect), or revoke Krupno's access in your Google account at https://security.google.com/settings/security/permissions (also reachable via myaccount.google.com/permissions).

1. What data we collect

• Account data: e-mail address, display name, password (stored as a salted hash).
• Connected social accounts: when you connect an Instagram, Facebook, TikTok or YouTube account, we store the account identifier, name/handle and the access token issued by the platform. Tokens are stored encrypted and are used solely to publish content you schedule and to retrieve statistics of your own accounts and posts.
• Your content: videos, images, captions and drafts you upload for editing and publishing.
• Usage metrics of your posts: views, likes, comments and similar statistics returned by the platforms for your own accounts.
• Public data of channels you choose to follow: if you add a public channel to the ideas section, we store the titles, links, durations and public view, like and comment counts of its recent videos, obtained through the platform's official API. This data is visible only to your organization, is never sold or shared, and is deleted or refreshed within 30 days.

2. What we do NOT do

• We do not sell or share your personal data with third parties for marketing.
• We do not post anything without an action scheduled or triggered by you.
• We do not read your private messages on any platform.

3. How data is processed

Data is stored on servers operated by the Operator within the European Union. Media files you upload are processed by our own processing servers: preparing the video format for each platform, speech recognition for automatic subtitles (run on our own servers, not by a third party) and rendering.

AI caption drafting (Anthropic). To draft captions, titles, descriptions and hashtags, the App sends to Anthropic PBC (Claude API) a few still frames of the selected video (or the photo), the text of the speech recognised in it, any hint you typed and your brand profile. The same service is used when you ask for ideas, scripts, subtitle translation or highlights. Anthropic acts as our processor for this purpose only; under its commercial terms, content sent through its API is not used to train its models. No account data, access tokens or statistics are sent. Every AI draft is shown to you and can be edited before anything is published.

3a. Data on your device, cookies and similar technologies

The App stores the following on your device, in the App's own protected storage: your sign-in session (access and refresh tokens, kept in the system keychain), your preferences, drafts of posts and edits, and local copies of the media you are editing or have chosen to upload. This information is used only to run the App and is removed when you sign out, delete the draft or uninstall the App. The App does not use advertising identifiers and does not track you across other apps or websites.

When you connect a social account, the sign-in happens on a web page of the respective platform (Google, Meta or TikTok). That platform may place, access or recognize cookies or similar technologies on your device according to its own policies (for Google, see the Google cookies policy). Our own website at krupno.app and the App's server do not set cookies of their own.

4. Platform data

Use of data received from YouTube API Services is subject to the Google Privacy Policy and the YouTube Terms of Service. Use of data received from Meta and TikTok APIs is limited to the features described above. You can revoke the App's access at any time in the security settings of the respective platform (e.g. Google security settings: https://security.google.com/settings/security/permissions).

5. Retention and deletion

Your data is kept while your account is active. You may request deletion of your account and all associated data at any time via the App or by writing to biuro@wixmart.pl; deletion is completed within 30 days. Disconnecting a social account removes its stored token immediately.

Data obtained from YouTube API Services is handled to the stricter schedule required by the YouTube API Services Terms of Service:

• data about channels you do not own (the public channel data described above) is deleted or refreshed within 30 calendar days;
• if you ask us to delete your data, YouTube API data is deleted within 7 calendar days of the request;
• when you disconnect a channel in the App, its access token and all statistics we collected for it are deleted immediately; if you revoke access through your Google account permissions instead, the App detects the revoked authorization at the next daily refresh and deletes the stored token and statistics of that channel at that moment (at the latest within 30 calendar days);
• statistics of your own channel are refreshed every 24 hours and are kept only while your authorization remains valid.

6. Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, portability and objection. Requests: biuro@wixmart.pl. You may lodge a complaint with the Polish supervisory authority (UODO).