Privacy Policy

The controller responsible for processing personal data collected via Uniflo is:
Reverdin Solutions di Marc-André Reverdin
Sole proprietorship
VAT number (Partita IVA): IT17458801002
Address: Corso Vittorio Emanuele II 154, 00186 Roma, Italy
E-mail: contact@uniflo.eu

The Data Protection Officer (DPO) can be contacted at: contact@uniflo.eu.

We collect and process the following data:

• Identification data: e-mail address, name (optional).
• Workspace data: editorial content, channel settings, publication schedules.
• Connected channel data: access tokens, the ID and name of the account or Page, the IDs of published posts, and associated statistics (see section 8).
• Technical data: IP address, connection logs, session data.
• Billing data: payment information processed by our third-party provider (Stripe).

• Active account data: for the entire duration of the subscription + 12 months after termination.
• Billing data: 10 years (accounting obligation).
• Technical logs: rolling 12 months.
• Workspace content: deleted within 30 days of account closure.

Your data may be transmitted to processors operating outside the EU (cloud hosting, AI providers). These transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms guaranteeing an adequate level of protection.

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• Access: obtain a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data (“right to be forgotten”).
• Restriction: restrict certain processing.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, contact us at contact@uniflo.eu. You also have the right to lodge a complaint with your national supervisory authority (e.g. CNIL in France, Garante in Italy).

Uniflo sets the following cookies, on the application's domain only. No advertising cookie is set.

• Session, active workspace and language: strictly necessary for the service to work (sign-in, choice of workspace and interface language).
• py_consent (6 months): necessary, keeps your choice in the banner.
• ph_<key>_posthog (6 months, only after “Accept”): PostHog audience measurement.

Audience measurement

We measure traffic on the platform with two tools.

Without your consent: Umami, an open-source tool we host ourselves on our servers in the European Union. No cookies, nothing stored on your device. Umami computes a visit identifier on the server from the IP address and the browser, with a salt renewed every month; the IP address is not kept, only the country and city derived from it. We count page views (without the address parameters), referrer, device type and a few steps (sign-up, sign-in, creating an item, subscription), without linking them to a person or an account. This data is deleted after 25 months. This measurement is exempt from consent (article 82 of the French Data Protection Act, CNIL guidelines). To object, turn on your browser's Do Not Track or Global Privacy Control setting: the platform then does not load Umami.

With your consent (“Accept” in the banner): PostHog (PostHog Inc., data hosted in the European Union) also sets a cookie on this site only, for 6 months, to follow your journey, link it to your account by its internal identifier (never your email address or name) and to your organisation, and record your sessions, with inputs and text masked. Session recordings are deleted after 30 days. Other PostHog data is deleted no later than 25 months after your last visit. Without your consent, PostHog is not loaded.

Your choice is kept for 6 months in the py_consent cookie. You can change it at any time: Manage cookies. If you withdraw your consent, the PostHog cookie is erased from your browser.

Legal bases: legitimate interest for measurement without an account (Umami), consent for PostHog measurement. Transfers: Umami data stays on our servers. PostHog Inc. is a US company; data is hosted in the European Union and any access from the United States is covered by the Data Privacy Framework and the European Commission's standard contractual clauses.

Retention: measurement without an account, 25 months; PostHog measurement, no more than 25 months after the last visit; session recordings, 30 days.

Uniflo publishes to third-party platforms that you connect yourself and of which you are the owner or administrator: LinkedIn (profiles and company Pages, via Unipile), Facebook (Pages), Instagram (professional accounts), X, TikTok, Threads, YouTube, Bluesky, as well as blogging and newsletter platforms (WordPress, Ghost, Astro blogs, Substack, Medium, Dev.to, Mailchimp, Brevo, Listmonk, MailerLite).

• Explicit consent: each connection is made through the platform's official authorization mechanism (OAuth or application key). LinkedIn is the exception: it is connected through the secure link of Unipile, our sub-processor, which maintains access to your account to publish on your behalf. Uniflo never asks for your account password and never stores it.
• Data we access: the access token issued by the platform, the ID and public name of the connected account or Page, the IDs of the posts Uniflo itself has published, and the public statistics associated with these posts and the Page (impressions, clicks, reactions, followers).
• What we do not access: your private messages, your contact or relationship list, your followers' personal data, and posts you did not create from Uniflo. We do not perform any large-scale data extraction (scraping), except for the public data of people who have commented on or reacted to your LinkedIn posts, collected via Derrick to let you reply to them from Uniflo (see section 10).
• Purposes: publish the content you have written and approved, on the date you have scheduled; display the performance statistics of your posts in your dashboard. No post is published without your explicit approval.
• Legal basis: performance of a contract — art. 6(1)(b) GDPR.
• Security: access tokens are encrypted at rest (AES-256-GCM) and are never exposed in the interface, application logs, or data exports.
• No sharing, no resale: data from your channels is never sold, transferred, used for advertising purposes, or shared with third parties other than the originating platform. It is never used to train an artificial intelligence model, whether by us or by our providers (see section 9).
• Revocation: you can disconnect a channel at any time from Uniflo's “Channels” page (“Disconnect” button). Disconnecting immediately and permanently deletes the access token and the channel configuration from our database. Associated historical statistics are deleted within 30 days. You can also revoke authorization directly from the relevant platform, for example on LinkedIn or Meta.
• Compliance with platform terms: we use the platforms' official APIs and comply with their terms of use, except for LinkedIn, which is connected through Unipile as described above. Data obtained from your channels is deleted once it is no longer needed for the purpose for which it was collected or when you revoke access.

Certain Uniflo features — the ARIA assistant, content generation, editorial plan suggestions — rely on generative AI models. Depending on the provider selected for your workspace (the platform's default provider or the customer's own key — BYOK), your data may be transmitted to one of the following providers:

• Anthropic, PBC — default provider, text generation and conversational assistant — anthropic.com.
• OpenAI: text and image generation, when this provider is selected.
• Google: image and video generation (Veo); text generation (Gemini), when this provider is selected.

• Default models used: Claude Sonnet 5.5 (chat, plans), Claude Haiku 4.5 (content generation).
• No training on your data: Anthropic contractually commits not to use inputs or outputs transmitted via its API to train or improve its models. Alternative providers (OpenAI, Google, Together AI, fal.ai) apply their own data processing policies, available on their respective websites.
• Traceability: every piece of AI-generated content is tagged aiGenerated: true and aiProvider in our systems, and displays a visible “Generated by AI” label in the interface.
• Transfer outside the EU: requests are processed on the servers of the providers listed above (United States). This transfer is governed by Standard Contractual Clauses (SCCs) in accordance with Article 46 of the GDPR.
• Human oversight: by default, every piece of content stays in draft until the user approves it. If the user enables automatic publishing for a workspace, content whose confidence score reaches the threshold they set is approved without review; it can be turned off at any time. The user remains responsible for published content.

For any question regarding the use of AI in Uniflo, contact us at contact@uniflo.eu.

In addition to the AI providers mentioned in section 9, Uniflo relies on the following processors and third-party tools to provide and improve the service:

• Application error tracking (Sentry SDK): no session recording through this mechanism. Audience measurement and any consented recordings are described in the Audience measurement and cookies section.
• Umami (self-hosted): cookie-free audience measurement.
• Unipile: connecting your LinkedIn account to Uniflo.
• Derrick: retrieval of public LinkedIn data of people who have interacted (comments, reactions) with your posts, to let you reply to them from Uniflo.
• Pexels and Unsplash: providing royalty-free photos to illustrate your posts.
• PostHog Inc.: audience measurement and session recording (after consent in the banner), data hosted in the European Union (Frankfurt); any access from the United States covered by the Data Privacy Framework and standard contractual clauses.

If you are subscribed to the Team or Organization plans, see the Data Processing Agreement to understand how we process your data in compliance with the GDPR and EDPB recommendations.

This policy may be updated. In the event of a substantial change, you will be notified by e-mail or via an in-app notification at least 15 days before the changes take effect.