Privacy Policy

1. Who we are

Len.Krúpová s. r. o., operating under the brand “Unknown Agency” (the “we” or “Operator”), operates the private analytics application “Dashboard Unknown Agency” (the “Application”) available at dash.unknown-agency.eu. This policy is published on our company website at unkw.agency. The Application connects to social media platforms — currently TikTok, and Instagram and Facebook through the Meta APIs (together, the “Platforms”) — and displays their statistics in one place. We are the controller of the personal data we process within the meaning of the GDPR. Access to the Application is private — it is provided only to clients with whom we have an established business relationship; there is no public self-registration.

2. What data we process

a) Account data: name, business email, and login credentials of authorized users, used to create and secure your account.

b) Data from connected Platforms (obtained only after you connect an account and grant permission via the Platform’s official login):

• basic profile information of the connected account (such as display name, username, avatar and account identifier);
• account statistics such as followers, likes, video/post views, reach, impressions and engagement metrics;
• metrics for your own posts and videos (e.g. views, likes, comments, shares and reach);
• access and refresh tokens needed to keep the connection to the Platform active.

This applies to each Platform you connect (TikTok, Instagram, Facebook). We only access the data covered by the permissions (scopes) you approve. We do not access your private messages or any data outside those permissions.

c) Technical data: log records, IP address and basic device/browser information, processed for the security and proper functioning of the Application.

3. Why we process it and our legal basis

• To provide the Application and display your statistics in one place — performance of our contract with you (Art. 6(1)(b) GDPR), together with the authorization you grant through the relevant Platform’s login.
• To secure accounts, prevent misuse and keep logs — our legitimate interest in operating a safe service (Art. 6(1)(f) GDPR).
• Where required, on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. How we use data from the Platforms

• Platform data is used solely to provide the analytics features of the Application to you, the authorized user.
• We do not sell this data, we do not use it for advertising or profiling, and we do not share it with third parties for their own purposes.
• Our use complies with the TikTok Developer Terms of Service and with the Meta Platform Terms and Developer Policies, as well as the applicable policies of each Platform.
• You can disconnect any connected account at any time, in the Application or in the Platform’s settings. After disconnection we stop accessing that Platform’s data and delete the stored access tokens.

5. Where data is stored and how we protect it

Your data is stored in a secure database protected by row-level access controls (Row-Level Security), with database infrastructure operated within the European Union. Data is transmitted over encrypted connections (HTTPS), access is restricted to authorized persons, and tokens are stored securely. We apply appropriate technical and organizational measures to protect your data.

6. Recipients

We do not sell your data. Your data may be processed only by:

• our cloud database and hosting infrastructure provider with servers located within the European Union, acting as our processor under a data-processing agreement;
• the individual Platforms (TikTok, Meta) as the source of the connected account data.

We may also disclose data where required by law or to competent authorities.

7. International transfers

Your data is kept within the European Union. Should any transfer outside the EU ever be necessary, it will be safeguarded by appropriate measures such as the European Commission’s Standard Contractual Clauses.

8. How long we keep your data

We keep your data for as long as your account is active and our cooperation continues. After the cooperation ends, or upon your request, we delete or anonymize your personal data and stored Platform data without undue delay (typically within 30 days), unless a longer retention period is required by law. Access tokens are deleted immediately upon disconnection.

9. Data deletion

You can request deletion of your data at any time:

• Disconnect a Platform in the Application or in that Platform’s settings — this revokes our access and we delete the stored tokens for that connection.
• To delete your account and all associated personal data, email info@unkw.agency with the subject “Data deletion”. We will delete or anonymize your data without undue delay (typically within 30 days) and confirm completion.

These steps also serve as our data deletion instructions, including for data obtained through the Meta platforms.

10. Your rights

Under the GDPR you have the right to access your data, to rectification, to erasure (“right to be forgotten”), to restriction of processing, to data portability, to object to processing, and to withdraw consent at any time. To exercise any of these rights, contact us at info@unkw.agency. You also have the right to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk).

11. Cookies

The Application uses only essential cookies necessary for login and session security. We do not use advertising or third-party tracking cookies.

12. Children

The Application is a business tool and is not intended for children. We do not knowingly process data of persons under 16.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available at this address, with the effective date shown above.

14. Contact

For any questions about data protection, contact us at info@unkw.agency.