Privacy Policy

Introduction

ETERNO ("we," "our," or "us") operates the ETERNO mobile application and related services (collectively, the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App.

By creating an account or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App. Please also review our Terms of Use.

Information We Collect

Account Information

When you create an account, we collect:

• Name and display name
• Email address
• Phone number (optional)
• Profile photo (optional)

Communications

The App provides messaging functionality. We store:

• Messages you send and receive within the App
• Email correspondence routed through the platform
• File attachments shared in conversations

Connected Social Media Accounts

You may choose to connect your social media accounts (such as Instagram, TikTok, YouTube, Snapchat, LinkedIn, or X) to the App. When you do, we collect and store:

• Your public profile information (username, display name, profile photo, bio)
• Follower and following counts
• Public engagement metrics (likes, comments, views on public content)
• Post and media counts
• Profile URL

We access this information through each platform's official API using OAuth authentication. We only request read-only access to public profile data. We do not post content, send messages, or take actions on your behalf on any connected platform.

OAuth Tokens

When you connect a social media account, we receive and securely store OAuth access tokens and refresh tokens. These tokens allow us to periodically fetch updated metrics from the connected platform on your behalf. Tokens are encrypted at rest and are never shared with third parties.

Automatically Collected Information

We may collect certain information automatically, including:

• Device type and operating system version
• App version
• General location (country/region, derived from IP address)
• Usage patterns (features accessed, session duration)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Authenticate your identity and secure your account
• Facilitate communications between platform participants
• Display your connected social media metrics within the App
• Generate aggregated analytics and reporting (such as follower growth over time)
• Send transactional notifications (such as new messages or account updates)
• Ensure compliance with applicable laws and our Terms of Use

We do not use your information for targeted advertising. We do not sell your personal data.

Social Media Data

What We Access

When you connect a social media account, we request the minimum permissions necessary to read your public profile and metrics. Specifically:

• Instagram: Public profile, follower count, media count, engagement metrics on public posts
• TikTok: Public profile, follower count, video count, engagement metrics on public videos
• YouTube: Channel statistics, subscriber count, video count, view counts
• Snapchat: Public profile information and metrics as provided by the platform API
• LinkedIn: Public profile, connection count, post engagement metrics
• X (Twitter): Public profile, follower count, tweet count

How Often We Refresh Data

We periodically refresh your social media metrics (typically once daily) to keep your information current. This happens automatically in the background using the OAuth tokens you granted when connecting your account.

How to Disconnect

You may disconnect any social media account at any time through the App settings. When you disconnect an account:

• We immediately revoke and delete the stored OAuth tokens
• We stop collecting new data from that platform
• Previously collected metrics are retained in your account history unless you request deletion

You may also revoke access directly from the connected platform's settings (e.g., Instagram > Settings > Apps and Websites). We honor all platform-initiated deauthorization requests.

Data Storage & Security

Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States. We implement industry-standard security measures, including:

• Encryption at rest and in transit (TLS 1.2+)
• OAuth tokens stored in encrypted database columns
• Access controls with role-based permissions
• Regular security reviews and infrastructure monitoring
• No plaintext storage of credentials or tokens

While we take extensive measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service providers: We use trusted third-party services (such as cloud hosting and email delivery) that process data on our behalf under strict confidentiality agreements
• Legal requirements: We may disclose information if required by law, legal process, or government request
• Safety: We may share information when necessary to protect the safety, rights, or property of ETERNO, our users, or the public
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction

We do not share your connected social media data with other users of the App unless you explicitly authorize it. Aggregated metrics visible within the platform are only accessible to authorized participants in your organization.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account exists
• Social media metrics: Historical snapshots retained for trend analysis while your account is active
• OAuth tokens: Retained until you disconnect the account or the token is revoked
• Messages and files: Retained while your account exists

Upon account deletion, we delete or anonymize your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (such as resolving disputes or enforcing agreements).

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data for certain purposes
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at the address below. We will respond to your request within 30 days.

International Users

The App is operated from the United States. If you are accessing the App from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the App, you consent to this transfer.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection regulations, we process your data on the legal bases of consent, contractual necessity, and legitimate interests. You have the right to lodge a complaint with your local data protection authority.

Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will promptly delete that information.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

Data Deletion Requests

You may request deletion of your data at any time by:

• Using the account deletion option within the App settings
• Contacting us directly at the email address below

For connected social media accounts, you may also initiate a data deletion request through the respective platform's settings. We process all platform-initiated deletion requests in accordance with each platform's requirements.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by other appropriate means. The updated policy will be effective when posted, and your continued use of the App constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us at privacy@witheterno.com

ETERNO
State of Florida, United States

Governing Law

This Privacy Policy is governed by the laws of the State of Florida, United States. Any disputes arising from this policy shall be resolved in accordance with the laws of the State of Florida.