Privacy policy

Data controller

TRIGGER d.o.o., Gruška ulica 18, 10000 Zagreb, OIB 82537315863. Contact for any question about personal data: info@trigger.hr.

Data we process

• Agency staff: name, e-mail, phone, access rights, log of sign-ins and actions in the app (time, IP address, browser).
• Client contact persons: name, e-mail, phone, language, decisions on posts (approval, change requests, rejection, comments), and the time and IP address of opening the link.
• Data from clients' social media accounts (Facebook, Instagram, YouTube, LinkedIn, TikTok) and Google Business Profiles, read through the official APIs with the client's permission: profile data (name, follower count), posts and their metrics (reactions, comments, shares, views), the text of public comments and mentions with the author's name, and reviews with the reviewer's name.
• Creatives from the agency's Google Drive: local copies of images and videos for faster display.

Read-only access to social networks

The app never publishes, edits, deletes, sends messages or replies to comments or reviews on social networks. It only reads data. It does not read private messages.

Purpose and legal basis

• Performance of the contract with the client: preparing and approving posts, reporting results, reviewing comments and reviews.
• Legitimate interest: security of the app, preventing abuse and keeping a record of who approved what (activity log).

How long we keep data

• Client data for as long as the cooperation lasts. After it ends, or on request, we delete it within 30 days.
• Database backups are kept for 30 days, so deleted data disappears from them at the latest 30 days after deletion.
• Sign-in codes are valid for 10 minutes; personal client links until the date stated in the e-mail.

Who we share data with

We do not sell data or share it for advertising. It is processed only by providers needed to run the app: the hosting provider (server and e-mail) and Google (the agency's Google Drive). Meta, Google, LinkedIn and TikTok are sources of the data the app reads.

Cookies

We use only essential cookies: for signing in (session) and, if you choose it, for a remembered device (30 days). No tracking or advertising cookies.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. Send your request to info@trigger.hr; we reply within 30 days. You can lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).

Deleting data from social networks

To have us delete data read from your page or account, send a request to info@trigger.hr with the name of the page or account. You can also remove the app's access yourself: on Facebook and Instagram under Business integrations, on Google at myaccount.google.com/permissions, and on LinkedIn and TikTok in the connected apps settings. Once access is removed the app can no longer read data, and data already read is deleted on request within 30 days.