Privacy Policy

TBON GmbH, Schaffhauserstrasse 126, 8302 Kloten (ZH), Switzerland, operates Volta, an analytics and social profile management platform used by the agency on behalf of its clients. TBON GmbH is the data controller; for a client’s profile data, TBON GmbH acts as processor on that client’s behalf.

We collect data through the official APIs of the platforms the client connects — Meta (Instagram and Facebook), TikTok, LinkedIn, Google (Analytics, Ads, Search Console, Business Profile) — specifically:

• Profile and content metrics (reach, interactions, followers, aggregated audience demographics).
• Published content and its metadata (captions, thumbnails, timestamps).
• Assets uploaded by the user for publishing (images, videos).
• Access tokens issued by the platforms to read and, where authorized, publish content.
• Dashboard sign-in data (the user’s email address).

Platform by platform:

• TikTok: from the connected account’s profile we read display name, profile picture, follower, following, like and video counts; for each video we read title or description, cover image, link, publication date and statistics (views, likes, comments, shares). We do not read private messages and we do not publish content.
• LinkedIn: from the company Pages the client authorizes us to administer we read page name, follower count, page views, published posts and their statistics (impressions, clicks, likes, comments, shares). We do not read personal profile data and we do not publish content.
• Meta: connected Instagram/Facebook profiles and Pages, published content, profile and content statistics, and — if the client connects an ad account — campaign metrics.

We do not collect payment card data or special categories of personal data.

• To show analytics and reports on social performance.
• To generate automated advice (insights, editorial plans, campaign briefs) through AI processing of performance data.
• To schedule and, where authorized, publish content.
• To authenticate users and protect access.

Legal basis: performance of the contract with our clients, and legitimate interest in providing the service.

Data is stored on Supabase (data centre in the European Union, Frankfurt) and the application is hosted on Vercel. We keep the data for the duration of the client relationship and delete it on request or when the service ends.

Only with the providers needed to run the service, acting as processors: Meta (Instagram/Facebook APIs), TikTok (if connected), LinkedIn (if connected), Google (if connected), Supabase (database and hosting), Vercel (application hosting), Anthropic (AI processing of performance data to generate advice). We do not sell data to third parties.

You can request access, rectification, restriction, portability and deletion of your data, and withdraw consent at any time. You can also revoke access directly from the source platform, without going through us:

• Meta: Facebook Settings → Apps and websites.
• TikTok: Settings and privacy → Security and permissions → App permissions.
• LinkedIn: Settings and privacy → Data privacy → Other applications → Permitted services.

Once revoked we stop syncing that account; data already collected is deleted through the request described below.

Instructions for requesting deletion are on the dedicated page: Data deletion.

For any privacy request write to hello@tbon.ch, or to TBON GmbH, Schaffhauserstrasse 126, 8302 Kloten (ZH), Switzerland.