← Joanna Olive

Privacy Policy

Last updated: 2026-10-14. Applies to the website joannaolive.com and to the Joanna Olive Ops Center publishing tool.

1. Who we are

Joanna Olive is an independent beauty and lifestyle brand operated as a sole operator established in Romania (the "operator", "we"). Contact: joannaolivelive@gmail.com. We are the data controller for the processing described here.

2. This website

This website is a static site. It sets no cookies, runs no analytics and loads no third-party scripts. It is served through Cloudflare, Inc., whose edge network processes the technical data needed to deliver web pages (such as IP address, user agent and request logs) under Cloudflare's own privacy policy. We do not receive personal data from this website other than what you choose to send us by e-mail.

3. The publishing tool ("Joanna Olive Ops Center")

Joanna Olive Ops Center is software we operate for ourselves to prepare, schedule and publish our own content to our own social media accounts and to read the statistics those platforms provide. It is not offered to the public and has no public registration. The only people who sign in to the platforms through it are the operator and people the operator has explicitly authorised to manage the Joanna Olive accounts.

When the operator connects a platform account, the tool receives, for the permissions approved on that platform's consent screen:

Purpose: publishing and managing our own content and understanding how it performs. We use this data for no other purpose. We do not use it for advertising, we do not sell it, we do not share it with third parties except the processors listed in section 6, and we do not use data obtained from any platform to train artificial-intelligence models.

4. Platform-specific information

Google and YouTube. Joanna Olive Ops Center uses YouTube API Services. By connecting a YouTube channel, the operator also agrees to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. The tool accesses the channel's own videos, uploads videos the operator created, sets their metadata and privacy status, and reads YouTube Analytics reports for the connected channel. Access can be withdrawn at any time on the Google security settings page; the tool then deletes the stored Google authorisation and the data obtained through it within 7 days. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Authorised data obtained from YouTube API Services that is not analytics or reporting data is refreshed or deleted within 30 days.

Meta (Facebook Pages and Instagram). The tool uses Facebook Login for Business to connect the Facebook Page and the Instagram professional account we manage, to publish posts, photos, videos and Reels, to manage comments on our content and to read Page and account insights. Access can be withdrawn in Facebook settings under Business integrations (or Apps and websites); see also our data deletion instructions.

TikTok. The tool uses TikTok's Login Kit and Content Posting API to identify the connected TikTok account (profile information and public statistics) and to send videos we created to that account's TikTok inbox as drafts, which the account owner reviews and publishes inside the TikTok app. Access can be withdrawn in the TikTok app under Settings and privacy → Security and permissions → Apps and services (naming may vary by app version).

5. Storage, security and retention

Data handled by the publishing tool is stored on a server we control in a data centre in Frankfurt, Germany (OVHcloud), with encrypted backups kept in Cloudflare R2 object storage in the European Union. Access to the tool is restricted to the operator by an identity-aware access layer. Platform access tokens are kept only while the account is connected. When a platform account is disconnected, or when access is revoked on the platform, the stored token and the data obtained through it are deleted within 7 days (data obtained through YouTube API Services: within 7 days of an in-tool revocation and within 30 days of a revocation made on Google's side, as required by the YouTube API Services Developer Policies). Statistics are refreshed from the platforms; snapshots that are no longer needed are deleted. Content already published to a platform remains on that platform under its rules and under the control of the account owner.

6. Processors

No other third party receives personal data from us.

7. Your rights

If we hold personal data about you, you have the rights provided by the General Data Protection Regulation: access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority (in Romania: the National Supervisory Authority for Personal Data Processing, ANSPDCP). Write to joannaolivelive@gmail.com; we answer within one month. Deletion requests are handled as described on the data deletion page and completed within 7 days.

8. Children

Neither this website nor the publishing tool is directed to or intended for use by anyone under 18.

9. Changes

If this policy changes materially (for example if the tool is ever offered to other people), we update this page and the date above before the change takes effect.