Effective date: 14 June 2026
Free Soda Limited ("we", "us", "our") is the data controller responsible for your personal data processed through the Creator Vision platform ("the Service").
Registered address: Free Soda Limited, 2 Old Bath Road, Newbury,
Berkshire, RG14 1QL, United Kingdom.
Contact: privacy@freesoda.io
We collect and process the following categories of personal data:
We process your data under the following legal bases (GDPR Article 6):
Creator Vision uses YouTube API Services. By connecting a YouTube channel or a YouTube Content Owner (CMS) account, you also agree to be bound by the YouTube Terms of Service. Our access to, and use of, information obtained through the YouTube API Services is additionally governed by the Google Privacy Policy. Where the Service displays data obtained from YouTube, that data is provided by YouTube.
We access YouTube data only with your authorisation (via Google OAuth, or via a Content Owner service account you authorise), and we use it solely to provide the Service to you in respect of your own channels and content — for example to retrieve your channel and video analytics, read your video metadata, and upload videos and thumbnails on your behalf. You can withdraw this authorisation at any time (see section 13).
Creator Vision uses TikTok API Services (Login Kit and the Content Posting API). By connecting a TikTok creator account, you also agree to be bound by the TikTok Terms of Service. Our access to, and use of, information obtained through the TikTok API is additionally governed by the TikTok Privacy Policy.
We access TikTok data only with your authorisation (via TikTok OAuth), and we use it solely to provide the Service to you in respect of your own TikTok creator account — specifically to identify the connected account and to upload videos to your creator inbox on your behalf. We do not post to TikTok publicly without the creator first reviewing and approving the content from their TikTok Studio inbox.
TikTok creator profile data (open ID, display name, avatar, username, profile link) and TikTok access tokens are retained only while your authorisation remains active. When you disconnect your TikTok account (see section 13) we immediately cease accessing TikTok on your behalf and delete the associated tokens and profile data within 7 days.
Creator Vision uses the Meta APIs (Facebook Login for Business, the Facebook Graph API and the Instagram Graph API). By connecting a Meta account, you also agree to be bound by the Meta Terms of Service and the Meta Platform Terms. Our access to, and use of, information obtained through the Meta APIs is additionally governed by the Meta Privacy Policy.
We access Meta data only with your authorisation (via Facebook Login for Business), and we use it solely to provide the Service to you in respect of your own Facebook Pages and linked Instagram professional accounts — specifically to list the Pages and Instagram accounts you authorise and to publish video content to them on your behalf. We do not access your Meta data for any other purpose, and we do not sell or transfer it.
Tech Provider disclosure. Where you use Creator Vision to manage Facebook Pages or Instagram accounts owned by a business, Creator Vision acts as a "Tech Provider" processing Meta Platform Data on behalf of that business for the sole purpose of the publishing services described above, in accordance with the Meta Platform Terms.
Facebook Page access tokens, Page identifiers and names, and the identifiers and usernames of linked Instagram professional accounts obtained through the Meta APIs are retained only while your Meta authorisation remains active. When you revoke access (see section 13) or ask us to delete your data, we immediately cease accessing Meta on your behalf and delete the associated tokens and account data within 7 days.
Creator Vision uses the Snap Public Profile / Marketing API. By connecting a Snap account, you also agree to be bound by the Snap Terms of Service. Our access to, and use of, information obtained through the Snap APIs is additionally governed by the Snap Privacy Policy.
We access Snap data only with your authorisation (via Snap OAuth), and we use it solely to provide the Service to you in respect of your own Snap public profiles — specifically to list the public profiles you authorise and to publish video content to Snapchat Spotlight on your behalf. We do not access your Snap data for any other purpose, and we do not sell or transfer it.
Snap OAuth tokens and public profile data (profile identifiers, display names, usernames and organisation identifiers) obtained through the Snap APIs are retained only while your Snap authorisation remains active. When you revoke access in-app (see section 13) or request deletion of your data, we immediately cease accessing Snap on your behalf and delete the associated tokens and profile data within 7 days.
All AI-generated metadata, content, and assets produced by the Service are the intellectual property of Free Soda Limited. A licence to use such AI-generated materials is granted to you for the duration of your active subscription agreement. Upon termination of the subscription, this licence expires and you must cease use of all AI-generated materials unless a separate written agreement is in place.
We do not sell your personal data and we do not share it with third parties for their own purposes. We do, however, rely on a small number of service providers ("sub-processors") that process data on our behalf and under our instructions, solely to operate and provide the Service. This includes any data we obtain from the connected platforms below (such as account identifiers, usernames and access tokens), which may be stored or processed by these sub-processors only to deliver the Service to you. Our current sub-processors are:
eu-west-1). This is where account
credentials, access tokens and related platform data are stored.
We do not sell your personal data to third parties.
Requests from public authorities. We may occasionally receive requests from government or public authorities for user personal data. For every such request we: review the request for legality and validity before responding, taking legal advice where appropriate; disclose only the minimum information strictly necessary to comply; challenge requests we consider unlawful, overbroad or improperly made; and document each request together with our response, the legal reasoning, and the parties involved. We do not provide any government or authority with bulk or direct, unfettered access to personal data.
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion or subscription termination, we will delete or anonymise your personal data within 28 days, except where retention is required by law (e.g. financial records).
YouTube data. Data we obtain from the YouTube API Services on your behalf — your channel and video analytics and YouTube-sourced metadata (together, "YouTube Authorized Data") — is retained only while your authorisation remains active. When you revoke access (see section 13) or ask us to delete your data, we:
TikTok data. TikTok OAuth tokens and creator profile data (open ID, display name, avatar, username, profile link) obtained through the TikTok API are retained only while your TikTok authorisation remains active. When you disconnect your TikTok account in-app (see section 13) or request deletion of your data, we immediately cease accessing TikTok on your behalf and delete the associated tokens and profile data within 7 days.
Meta (Facebook & Instagram) data. Facebook Page access tokens, Page identifiers and names, and the identifiers and usernames of linked Instagram professional accounts obtained through the Meta APIs are retained only while your Meta authorisation remains active. When you revoke access in-app (see section 13) or request deletion of your data, we immediately cease accessing Meta on your behalf and delete the associated tokens and account data within 7 days.
Snap data. Snap OAuth tokens and public profile data (profile identifiers, display names, usernames and organisation identifiers) obtained through the Snap APIs are retained only while your Snap authorisation remains active. When you revoke access in-app (see section 13) or request deletion of your data, we immediately cease accessing Snap on your behalf and delete the associated tokens and profile data within 7 days.
How to request deletion. To request deletion of the data Creator Vision holds about you — including any YouTube, TikTok, Meta or Snap data described above — revoke the relevant connection on the User Admin page (see section 13) or email privacy@freesoda.io. We complete deletion within 7 days of an in-app revocation or a deletion request.
AI-generated metadata, knowledge-graph data, and other materials the Service generates about your content are the intellectual property of Free Soda Limited (see section 9) and are retained as set out in that section; they are not part of the YouTube, TikTok, Meta or Snap authorised data described above.
You can revoke Creator Vision's access to your connected platform accounts at any time.
YouTube / Google:
TikTok:
Meta (Facebook & Instagram):
Snap:
Under the GDPR, you have the following rights:
To exercise any of these rights, contact us at privacy@freesoda.io. We will respond within 30 days.
The Service uses essential cookies required for authentication and session management. These cookies are strictly necessary for the Service to function and do not require consent under GDPR. We do not use advertising or tracking cookies.
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews.
The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO): ico.org.uk.