Privacy Policy

Last updated: July 23, 2026

Karucast (“the Service”) is operated by CURSANOVA SAS, a company registered in France (SIREN 982 207 169), with its registered office at 8 rue de la République, 97110 Pointe-à-Pitre, France (“we”, “us”). This policy explains what data we process when you use Karucast, and why.

1. Data we collect

• Account data — name, email address and password hash when you create a Karucast account.
• Connected social accounts — when you connect a social media account (e.g. TikTok, Instagram, Facebook) through that platform's official login (OAuth), we store the access tokens issued by the platform, your public profile identifiers (such as account ID, display name and avatar), and the technical identifiers of posts published through Karucast (such as publish IDs and post IDs).
• Content — the media files, captions and publishing settings you upload or write in Karucast in order to schedule and publish posts.
• Usage data — standard technical logs (IP address, browser type, timestamps) needed to operate and secure the Service.

2. What we use it for

• To provide the Service: composing, scheduling, approving and publishing content to the social accounts you connected, and tracking the status of those publications.
• To secure the Service and prevent abuse.
• To communicate with you about your account and the Service.

We do not sell your data. We do not use your content or your social account data for advertising. Publishing only ever happens after explicit human approval within your workspace.

3. Third-party platforms

Karucast publishes exclusively through the official APIs of the connected platforms (for example the TikTok Content Posting API and the Meta Graph API). Your use of those platforms remains governed by their own terms and privacy policies. You can revoke Karucast's access at any time, either from Karucast or from the platform's own security settings; revocation immediately prevents any further publishing.

4. Storage, retention and security

Data is hosted within the European Union or with providers offering EU-compliant safeguards. Access tokens are stored encrypted and are accessible only to the Service itself. We keep your data for as long as your account is active; when you delete your account or disconnect a social account, the related tokens are deleted and content data is removed within 30 days, except where law requires longer retention.

5. Your rights (GDPR)

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us at contact@cursanova.fr. You may also lodge a complaint with the CNIL (cnil.fr).

6. Data deletion

You can request the deletion of your account and all associated data at any time by writing to contact@cursanova.fr from your account email. Disconnecting a social account from Karucast deletes its stored tokens immediately.

7. Changes

We may update this policy; material changes will be announced on this page with an updated date above.

8. Contact

CURSANOVA SAS — 8 rue de la République, 97110 Pointe-à-Pitre, France — contact@cursanova.fr