1. Introduction
Welcome to Escalium (Escalium.io, "we", "our", or "us"). We are committed to protecting your privacy and handling your personal data in a transparent and secure manner.
This Privacy Policy explains how we collect, use, and protect your personal information when you use https://escalium.io ("the Service").
Escalium operates globally and is based in Spain. We comply with the General Data Protection Regulation (GDPR) and, where applicable, other international privacy laws.
By using our Service, you agree to the practices described in this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
Escalium
Based in Fuengirola, Málaga, Spain
Contact: hello@escalium.io
3. Information We Collect
3.1 Information you provide directly
- Name (if provided)
- Email address
- Password (stored in encrypted form)
- Billing and subscription information (processed securely via Stripe)
- Content you upload (text, images, videos, links, files, and other materials)
- Any communications with us (support requests, emails)
3.2 Content uploaded by users
Users may upload content related to their marketing activities (including music promotion, media files, and related assets). This content is processed solely for the purpose of providing the Service. We do not claim ownership over your content.
3.3 Information collected automatically
When you use the Service, we automatically collect:
- IP address
- Device information
- Browser type
- Operating system
- Pages visited and interactions
- Date and time of access
- Usage events (e.g. page views, sign-ups, checkout events, purchases)
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide and operate the Service
- To create and manage user accounts
- To process payments and subscriptions
- To deliver customer support
- To improve platform performance and user experience
- To detect fraud, abuse, or security issues
- To send transactional communications (e.g. account or billing emails)
- To send marketing communications (where legally permitted)
5. Legal Basis for Processing (GDPR)
- Contractual necessity: to provide access to the Service
- Legal obligations: accounting, tax, and compliance requirements
- Legitimate interest: security, fraud prevention, service improvement
- Consent: marketing communications, cookies, and tracking technologies where required
6. Payments
Payments are processed securely via Stripe. We do not store or have access to full credit card details. Stripe acts as a third-party payment processor and handles payment information according to its own privacy policy.
7. Third-Party Services
We use third-party service providers to operate the Service, including:
- Analytics providers (e.g. Google Analytics)
- Advertising platforms (e.g. Meta Pixel)
- Payment processors (e.g. Stripe)
- Email service providers (e.g. Resend)
- Hosting and infrastructure providers (VPS hosting, databases, and cloud storage such as S3)
- Google (Google Sign-In and YouTube API Services), only if you use them — see section 8
- TikTok (Login Kit, Content Posting API and Display API), only if you connect a TikTok account — see section 9
- Affiliate tracking systems (cookie-based attribution with 12-month duration)
These providers may process personal data on our behalf under their own privacy policies and/or data processing agreements.
8. Google User Data (Google Sign-In and YouTube API Services)
This section explains how Escalium accesses, uses, stores and shares data from your Google account ("Google user data"). We only access Google user data when you choose to sign in with Google or to connect your YouTube channel, and only after you approve it on Google's consent screen.
8.1 Google Sign-In
If you sign up or log in with Google, we receive your name, email address and Google account identifier. We use them only to create your Escalium account and let you sign in. We do not receive your Google password.
8.2 YouTube API Services
Escalium's Publish feature uses YouTube API Services so you can connect your YouTube channel, schedule and publish your videos to it, and see its statistics inside Escalium. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's use of your data is governed by the Google Privacy Policy. When you connect your channel, we request two permissions:
- Upload videos to your YouTube channel (youtube.upload): to publish the videos you schedule in Escalium, at the time you choose, with the title, description and settings you choose.
- View your YouTube account (youtube.readonly): to show your channel's name, picture and statistics (subscribers, total views, number of videos) and your videos' public figures (title, thumbnail, publication date, duration, views, likes and comments) inside Escalium.
8.3 How we use Google user data
Google user data is used only to provide the features you request: signing in, publishing the videos you schedule, and showing you your own YouTube statistics. We do not use it for advertising, we do not sell it, we do not show it to other users, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models. We do not modify or delete videos on your channel, other than uploading the ones you schedule.
8.4 How we store and protect it
- Your name, email address and Google account identifier are stored with your Escalium account.
- The access tokens Google issues for your YouTube channel are stored encrypted (AES-256) and are used only by our servers.
- Your channel's ID, name and picture are stored so Escalium can show the connected channel.
- YouTube statistics are fetched when you view them and kept only briefly in memory; they are not stored in our database.
- Video files you upload for publishing are kept on our servers only until they are published or the scheduled post is removed, and are then deleted.
8.5 Sharing
We do not share, transfer or disclose Google user data to third parties, except to the service providers that host our infrastructure (our servers and database) on our behalf and under confidentiality obligations, or where required by law.
8.6 Limited Use
Escalium's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8.7 Revoking access and deleting your data
You can disconnect your YouTube channel at any time in Escalium's Publish section. Disconnecting revokes Escalium's access with Google and deletes the stored tokens, the channel information and any scheduled posts for that channel, together with their video files. You can also revoke Escalium's access at any time from your Google account's security settings: https://security.google.com/settings/security/permissions. If you revoke access there, or delete your Escalium account, we delete the Google user data we hold about you within 30 days (except where the law requires us to keep it). To request deletion at any time, contact hello@escalium.io.
9. TikTok Data (Login Kit, Content Posting API and Display API)
Escalium's Publish feature lets you connect your TikTok account to post your own videos to it and see its statistics inside Escalium. We only access TikTok data after you connect your account and approve it on TikTok's authorization screen. TikTok's handling of your data is governed by the TikTok Privacy Policy.
9.1 What we access
- Your basic profile (user.info.basic, user.info.profile): your TikTok account ID, display name, username, profile picture and profile link, to show which account is connected and where you are posting.
- Your account statistics (user.info.stats): follower count, likes count and number of videos, shown only to you.
- Your videos (video.list): your videos' titles, covers, links, publication dates, duration, and view, like and comment counts, shown only to you.
- Posting (video.publish, video.upload): to post the videos you choose in Escalium to your account, at the time you choose, with the caption, privacy and settings you choose — or to send them to your TikTok inbox as drafts for you to finish and post in TikTok.
We never access your TikTok password, messages or any other data.
9.2 How we use, store and share it
- TikTok data is used only to provide the features you request: connecting your account, posting your videos, and showing you your own statistics. It is not used for advertising, not sold, not shown to other users, and not used to train artificial intelligence or machine learning models.
- The access tokens TikTok issues are stored encrypted (AES-256) and are used only by our servers.
- Your account ID, display name, username and profile picture are stored so Escalium can show the connected account.
- Statistics are fetched from TikTok when you view them and kept only briefly in memory; they are not stored in our database.
- Video files you upload for posting are sent from our servers directly to TikTok, are never published at a public link by us, and are deleted once posted or when the scheduled post is removed.
- We do not share TikTok data with third parties, except the service providers that host our infrastructure on our behalf, or where required by law.
9.3 Revoking access and deleting your data
You can disconnect your TikTok account at any time in Escalium's Publish section. Disconnecting revokes Escalium's access with TikTok and deletes the stored tokens, the account information and any scheduled posts for that account, together with their video files. You can also remove Escalium's access in the TikTok app (Settings and privacy → Security & permissions → Apps and services permissions). If you remove access there, or delete your Escalium account, we delete the TikTok data we hold about you within 30 days (except where the law requires us to keep it). To request deletion at any time, contact hello@escalium.io.
10. Cookies and Tracking Technologies
We use cookies and similar technologies for essential functionality, analytics, marketing, and affiliate tracking. Where required by law, we request your consent via a cookie consent banner before activating non-essential cookies.
You may control or disable cookies through your browser settings. See our Cookie Policy for full details.
11. Data Retention
We retain personal data only for as long as necessary:
- Account data: while the account remains active + up to 90 days after deletion
- Transaction data: up to 10 years (legal/tax obligations)
- Analytics data: limited retention depending on provider settings
- Support communications: up to 12–24 months
- Google user data: as described in section 8 (YouTube data until you disconnect your channel; statistics are not stored)
- TikTok data: as described in section 9 (until you disconnect your account; statistics are not stored)
After retention periods, data is deleted or anonymized.
12. Data Deletion
You may request deletion of your account at any time. Upon deletion:
- Your personal data is removed or anonymized within 30–90 days
- Certain data may be retained where required by law (e.g. financial records)
13. Your Rights (GDPR)
If you are located in the EEA or other applicable jurisdictions, you have the following rights:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise your rights, contact: hello@escalium.io
14. International Data Transfers
Your data may be processed outside the EEA, including in the United States or other countries where our service providers operate. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
15. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted passwords
- Secure hosting infrastructure
- Access controls and authentication systems
- Secure storage systems (including S3-based storage)
- Monitoring for unauthorized access or abuse
However, no system is completely secure, and we cannot guarantee absolute security.
16. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify:
- Affected users, and
- Relevant supervisory authorities, as required by GDPR
17. Children's Privacy
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under this age. If we become aware of such data collection, we will delete it promptly.
18. Affiliate Tracking
We use affiliate tracking cookies to attribute referrals and conversions. These cookies use last-click attribution, have a duration of up to 12 months, and may be set by our affiliate system when users interact with referral links.
19. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with an updated “Last updated” date. If changes are significant, we may notify users via email or in-app notification.
20. Contact
If you have any questions about this Privacy Policy or your data, contact us at: hello@escalium.io
© 2026 Escalium. All rights reserved.