Privacy policy

The controller of your data is BILLO LUK MANAGEMENT - FZCO, the company that runs Potencia Tu Presencia and this portal, registration number 59859, with its registered address at Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates.

For any privacy matter you can write to info@potenciatupresencia.com.

The portal is a private space for PTP's clients and team: only people PTP signs up can get in. Depending on how you use it, we process:

• Your account: name, email, password (stored only as an encrypted hash), profile picture and, if you sign in with Google, your Google account ID.
• Your project material: brand details, Google Drive links and files, documents, scripts, reports and your course plan.
• The logins you keep in the vault: usernames and passwords for your platforms, encrypted.
• The messages you exchange with the PTP team inside the portal.
• Notifications: if you turn them on, your browser's or device's subscription ID.
• Security and activity: sign-in attempts (with the IP address, for a few minutes, to stop attacks) and a log of actions, such as what was uploaded or connected.
• The connections you choose to turn on: Instagram and YouTube statistics (next sections), your Meta Ads campaign data and the leads your CRM (GoHighLevel) sends to the portal.

If you upload other people's data to the portal (your leads, for example), you are the controller of that data and PTP processes it on your behalf, only to provide the service.

If you connect an Instagram professional account (business or creator) with the «Connect with Instagram» button, you log in to Instagram and grant the portal these read-only permissions:

• instagram_business_basic: basic account data and its posts.
• instagram_business_manage_insights: account and post insights.

With them, the portal retrieves and stores:

• Profile: account ID, username, name, account type, profile picture and number of followers, following and posts.
• Posts and stories: type, caption, date, link to Instagram and the URL of its image or thumbnail.
• Insights for each post: views, reach, likes, comments, saves, shares, interactions, follows, profile visits and, for reels and stories, watch time and navigation.
• Account insights: reach, views, accounts engaged, interactions, link taps, follows and unfollows.
• Audience: the breakdown of your followers by age, gender, country and city. These are aggregated totals: they include no data about any individual follower.
• The access token Instagram issues to read this data, stored encrypted.

Purpose: only to show you, and the PTP team that manages your account, how your organic content performs inside the portal. The portal does not post, comment, send messages or change anything on your account. We don't use this data for advertising, we don't sell it or share it with third parties, and we don't combine it with other sources to build profiles.

Retention: for as long as the account stays connected. The data updates on its own several times a day and, if you disconnect the account, it is deleted from the portal immediately. The section «How to delete your Instagram data» lists every way to do it.

We process this data in line with Meta's Platform Terms and Instagram's developer policies.

If you connect your channel with the «Connect with YouTube» button, you sign in with your Google account and grant the portal these read-only permissions:

• youtube.readonly: channel and video data.
• yt-analytics.readonly: channel and per-video statistics (YouTube Analytics).

With them, the portal retrieves and stores:

• Channel: ID, name, @handle, picture, number of subscribers, views and videos, and the email of the Google account used to connect it.
• Videos: the 200 most recent, with their title, the start of the description, date, duration, type (Short, video or live), thumbnail and their views, likes and comments.
• Statistics: per day and per video, views, watch time, average view duration, percentage viewed, likes, comments, shares and subscribers gained and lost. These are totals: they include no data about any individual viewer.
• The access token Google issues to read this data, stored encrypted.

Purpose: only to show you, and the PTP team that manages your account, how your channel performs, and for the social media reports you request in the portal. The portal does not upload videos, comment or change anything on your channel. We don't use this data for advertising, and we don't sell it or share it with third parties.

Retention and deletion: for as long as the channel stays connected; the data updates on its own several times a day. If you click «Disconnect» in Social media › YouTube, the portal revokes its access in Google and deletes all the channel's data immediately. You can also revoke access from your Google account permissions page: the portal loses access and, if you write to info@potenciatupresencia.com, we delete anything it had stored.

The portal uses YouTube API Services. By connecting your channel you agree to the YouTube Terms of Service, and Google processes your data under the Google Privacy Policy.

• To provide the service you have contracted with PTP (portal access, content, messages and notifications): performance of the contract.
• Optional connections (Instagram, YouTube, Meta Ads and GoHighLevel) and social media reports: your consent, which you can withdraw at any time by disconnecting them.
• Portal security (captcha, sign-in attempt limits and activity log): our legitimate interest in protecting your account and the platform.
• To meet legal obligations, where they apply.

We don't make automated decisions with legal effects on you, and we don't build profiles for commercial purposes.

We don't sell or share your data. For the portal to work, these providers process it on PTP's behalf and only for that purpose:

Vercel

Website hosting.Servers in Montreal (Canada).

Turso

Portal database.Amazon Web Services servers in Montreal (Canada).

Google

Files in Google Drive, video playback, Google sign-in and the YouTube API (only if you connect your channel).European Union and United States.

Meta Platforms

Instagram and Meta Ads APIs, only if you connect those accounts.European Union and United States.

Anthropic

Artificial intelligence (Claude): the PTP team's assistant and the social media reports, for which it receives the metrics of your connected networks. It doesn't use this data to train its models.United States.

Apple, Google or Mozilla

Delivering notifications to your browser, only if you turn them on.Depends on your browser.

HighLevel (GoHighLevel)

Receiving leads from your CRM, only if you connect it.United States.

We may also disclose data to the authorities when required by law.

The website and the database are in Canada, a country with an adequacy decision from the European Commission. Some providers, such as Google, Meta or Anthropic, may process data in the United States; in that case they do so with the safeguards of the General Data Protection Regulation (GDPR): the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

• Your account and project data, for as long as you are a PTP client or part of its team. When the relationship ends it is deleted, except what we must keep by law and for the period the law sets.
• Instagram and YouTube data, for as long as the account is connected.
• Social media reports, for as long as you are a PTP client or until you delete them.
• Sign-in attempts, 15 minutes: as long as the lockout for failed attempts lasts.
• The notification subscription, until you turn notifications off.

• Encrypted connection (HTTPS) across the whole portal.
• Passwords stored only as a hash (bcrypt); vault logins and connection tokens encrypted with AES-256-GCM.
• Everyone only sees what their role allows, and changing your password signs out every other session.
• Our own captcha, with no external services or tracking cookies, and a limit on sign-in attempts.

The portal only uses technical cookies it needs to work: your session cookie, your language and light or dark mode preferences, and temporary ones while you sign in with Google or connect Instagram or YouTube. We don't use analytics or advertising cookies. If you play a video with the Google Drive player, Google may use its own cookies under its privacy policy.

At any time you can ask to access your data, rectify it, erase it, object to or restrict its processing, and to receive it in a portable format (portability). You can also withdraw your consent for the optional connections, without affecting what was processed before.

Write to us at info@potenciatupresencia.com saying which right you want to exercise and we will reply within one month at most. If you think we haven't handled your request properly, you can complain to the data protection authority in your country; in Spain, the Spanish Data Protection Agency (www.aepd.es).

• From the portal: in the Instagram section, click «Disconnect». The profile, posts, insights and token are deleted immediately.
• From Instagram: in your account settings, go to «Apps and websites» and remove the PTP portal app. We lose access and, if you also ask Meta to delete your data, Meta notifies us and we delete all of it automatically, with a confirmation code.
• By email: write to info@potenciatupresencia.com and we will delete it within one month at most.

If we change this policy, we will update the date at the top and, if the change is significant, we will let you know in the portal's News section.