Last updated: 11 October 2026

Privacy Policy

This policy explains what personal data REVERB (“we”, “us”) collects, why, how long we keep it and what rights you have. It applies to the website https://reverbsocials.com and the REVERB app.

Who we are

The controller of your personal data is:

Type of Web - Michał Miszczyszyn
ul. Stolema 6H/2, 80-177 Gdańsk, Poland
VAT ID: PL6040080451
Email: hi@reverbsocials.com

For anything related to privacy, write to hi@reverbsocials.com.

What we collect

Your account

  • Name and email address.
  • Your password, stored only as a one-way hash — or, if you sign in with Google, your Google account’s name, email address and profile picture.
  • The teams you belong to and invitations you send or receive.

Content you create

  • Photos, videos, captions, titles and other post settings, and when posts are scheduled.
  • Handle mappings: the usernames (and, for Facebook, Page IDs) of people you tag. These belong to other people; only add them if you are allowed to tag them.

Connected social media accounts

When you connect an account, the platform shares with us only what you approve on its consent screen:

  • Facebook and Instagram (Meta): your Pages and linked Instagram Business or Creator accounts (names, IDs, profile pictures), access tokens, your posts — including ones published outside REVERB — and their insights (views, likes, comments, shares, saves, engagement).
  • TikTok: your TikTok ID, display name, avatar and follower count, creator settings needed for posting, access tokens, and your videos with their view, like, comment and share counts.
  • YouTube: your channel’s ID and name, access tokens, your uploaded videos, and their analytics (views, likes, comments, shares).

Technical data

  • Server logs (IP address, browser, time and outcome of requests), used for security and fixing errors.
  • One strictly necessary cookie that keeps you signed in. We use no analytics, advertising or tracking cookies, and load no third-party trackers.

Why we use it, and on what legal basis

  • To provide REVERB — your account, teams, publishing and scheduling posts, collecting statistics, suggesting posting times, and emailing your team when a post fails or an account disconnects. Basis: performance of our agreement with you (Art. 6(1)(b) GDPR).
  • To keep the service secure and working — logs, abuse prevention, debugging. Basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • To meet legal obligations, such as accounting and tax rules once paid plans exist. Basis: Art. 6(1)(c) GDPR.
  • To answer your messages. Basis: our legitimate interest in replying (Art. 6(1)(f) GDPR).

We do not sell your data, use it for advertising, or use it to train AI models.

Who we share it with

  • The platforms you post to. When you publish, we send your content to the accounts you chose, on your instruction. From then on the platform’s own terms and privacy policy apply.
  • Members of your team see the team’s posts, connected accounts, statistics and handle mappings.
  • Service providers that process data for us under data processing agreements: Cloudflare, Inc. (hosting, database, file storage), our transactional email provider (notification emails), and Google (sign-in, if you choose it).
  • Authorities, when the law requires it.

Some of these providers are based in, or process data in, the United States. Such transfers are protected by the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

YouTube and Google data

REVERB uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

We use YouTube data only to upload the videos you publish, show your uploads on your calendar, and show their statistics in REVERB. We share it only with members of your team.

You can revoke REVERB’s access at any time in your Google security settings or by disconnecting the channel in REVERB. We then delete the YouTube data we stored within 7 days.

REVERB’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

  • Account and team data: while your account exists. After you delete it, we remove it within 30 days.
  • Media and posts: until you delete the post or the team, or your account is deleted.
  • Access tokens: until the account is disconnected, the team is deleted, or the platform revokes them.
  • Data fetched from a platform (posts and statistics): while the account is connected. We delete it within 7 days after it is disconnected or access is revoked.
  • Server logs: up to 30 days.
  • Emails you send us: as long as needed to handle your request.

Deleting your data

You can delete your data at any time:

  • Disconnect a social media account in the team’s settings — its tokens are deleted at once, and the data fetched from it within 7 days.
  • Remove the app from the platform’s own settings (Facebook: Settings → Business integrations; TikTok: Settings → Security → Manage app permissions; Google: Security → Third-party apps) — this has the same effect.
  • Delete your account, or ask us to do it by emailing hi@reverbsocials.com from your account’s address. We confirm once it is done.

Your rights

Under the GDPR you have the right to:

  • access your data and get a copy of it,
  • have it corrected,
  • have it deleted,
  • restrict how we use it,
  • receive it in a portable format,
  • object to processing based on our legitimate interest.

To use any of these, write to hi@reverbsocials.com. You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), or the authority in your own EU country.

Security

All traffic is encrypted with HTTPS. Access tokens are encrypted at rest, and passwords are stored only as hashes. Access to production data is limited to the people who run REVERB.

Children

REVERB is not meant for anyone under 16, and we don’t knowingly collect their data.

Changes to this policy

If we change this policy, we update the date at the top. For important changes we also email account holders before they take effect.