Privacy

Privacy Policy

Public legal and informational pages should feel clear and lightweight, not like another landing-page hero.

Page content

TERMS AND CONDITIONS

Service: social.cloudzero.ro
Operator: CLOUDZERO SRL
Effective date: 13 July 2026
Last updated: 13 July 2026


1. Who We Are

social.cloudzero.ro (the "Platform", "Service", "we", "us", "our") is operated by:

  • Legal entity: CLOUDZERO SRL
  • Company registration (CUI): 46180740
  • Trade Register number: J12/2983/2022
  • Registered office: Sesul de Sus 184A, Floresti, Cluj County, Romania
  • Email: [email protected]
  • Telephone: +40 733 403 403

These Terms and Conditions ("Terms") form a legally binding agreement between CLOUDZERO SRL and you ("User", "you", "your"). By registering an account, accessing, or using the Platform, you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must not use the Service.

2. Description of the Service

social.cloudzero.ro is a social media management and publishing platform. Subject to your subscription plan, the Service allows you to:

  • Connect social media accounts, pages, and profiles that you own or are authorised to manage;
  • Compose, schedule, queue, recycle, and publish content to those connected accounts;
  • Use a visual content calendar, drafts, bulk CSV scheduling, and RSS-driven auto-posting;
  • Upload, store, edit, and organise media assets in a file manager;
  • Generate or refine post captions and hashtags using integrated third-party AI providers;
  • View analytics and reporting on published content and connected accounts;
  • Collaborate with team members via roles, permissions, and post-approval workflows;
  • Manage subscriptions, invoices, and support tickets.

The Platform is built on licensed third-party software and integrates with third-party APIs. We may add, modify, suspend, or discontinue any feature at any time, particularly where a third-party provider changes or withdraws its API.

3. Eligibility and Accounts

3.1 Eligibility. You must be at least 18 years old and have the legal capacity to enter into a binding contract. If you register on behalf of an organisation, you warrant that you are authorised to bind that organisation, and "you" refers to both you and that organisation.

3.2 Account security. You are responsible for maintaining the confidentiality of your credentials and for all activity occurring under your account. You must notify us immediately at [email protected] of any unauthorised access or suspected breach. We are not liable for losses arising from your failure to safeguard your credentials.

3.3 Accuracy of information. You agree to provide accurate, current, and complete registration information and to keep it up to date.

4. Connecting Social Media Accounts

The Platform acts solely as a tool that publishes content to social networks on your instruction and with your authorisation. We are not affiliated with, endorsed by, or sponsored by Meta Platforms (Facebook, Instagram, Threads), LinkedIn Corporation, X Corp., TikTok, Google, or any other social network.

4.1 Authorisation via OAuth. To connect a social account, you authorise the Platform through the relevant provider's official OAuth authorisation flow. During that flow, the provider — not us — presents you with the specific permissions (scopes) being requested. By completing the flow, you grant CLOUDZERO SRL permission to act on your behalf strictly within those scopes.

4.2 Your warranties. By connecting any social media account, page, profile, or channel, you represent and warrant that:

  • You are the rightful owner of that account, or you are an authorised administrator/agent with express permission from the owner to connect it to third-party tools and to publish content on their behalf;
  • You have obtained all necessary consents from any client, employer, or third party whose accounts you manage through the Platform;
  • Your use of the Platform in connection with that account does not violate the terms of service, developer policies, platform policies, or community standards of the relevant social network;
  • You will not use the Platform to circumvent any rate limit, restriction, ban, or enforcement action imposed by a social network.

4.3 Scope of access. We access only the data and permissions necessary to deliver the features you use. We do not access private messages, direct messages, or friend/follower personal data except where a feature you have explicitly enabled requires it and the provider has granted the corresponding permission.

4.4 Revoking access. You may disconnect any social account from within the Platform at any time. You may also revoke our application's access directly from the social network's own settings:

  • Facebook / Instagram: Settings → Apps and Websites (or Business Integrations) → remove the application
  • LinkedIn: Settings & Privacy → Data Privacy → Permitted Services → remove the application
  • X (Twitter): Settings → Security and account access → Apps and sessions → revoke access
  • TikTok: Settings → Security & Permissions → Manage app permissions

Upon disconnection or revocation, we cease all access to that account and delete the associated access and refresh tokens from our systems.

4.5 Compliance with platform policies. Your use of connected accounts remains subject to the terms of the respective social network. In particular, and without limitation, you agree to comply with:

  • Meta Platform Terms and Developer Policies, and the Instagram Platform Policy;
  • LinkedIn API Terms of Use and LinkedIn User Agreement;
  • X Developer Agreement and Policy;
  • TikTok Developer Terms of Service.

Where these Terms conflict with a social network's policy in respect of that network, the network's policy prevails.

5. Your Content

5.1 Ownership. You retain all ownership rights in the text, images, video, audio, and other material you upload, create, or publish through the Platform ("Your Content"). We claim no ownership over it.

5.2 Licence to us. You grant CLOUDZERO SRL a limited, worldwide, non-exclusive, royalty-free licence to host, store, reproduce, reformat, transmit, and display Your Content solely to the extent necessary to operate the Service — namely to store your drafts and media, render previews, and transmit content to the social networks you have designated at the times you have scheduled. This licence terminates when you delete the content or close your account, subject to the retention periods in our Privacy Policy.

5.3 Your responsibility. You are solely responsible for Your Content, including its legality, accuracy, and its compliance with the rules of the destination social network. You warrant that you hold all necessary rights, licences, and permissions in Your Content, including in any third-party images, music, fonts, trademarks, or likenesses it contains.

5.4 AI-generated content. Where you use AI-assisted content generation, output is produced by third-party AI providers. Such output may be inaccurate, biased, non-original, or unsuitable. You are responsible for reviewing, editing, and verifying all AI output before publication and you assume full responsibility for it once published. We make no warranty as to the ownership, originality, or fitness of AI-generated output.

6. Acceptable Use

You must not use the Platform to create, schedule, publish, or distribute content, or to engage in conduct, that:

  • Is unlawful under Romanian, EU, or any other applicable law;
  • Constitutes spam, bulk unsolicited messaging, engagement farming, artificial amplification, or coordinated inauthentic behaviour;
  • Impersonates any person or entity, or misrepresents your affiliation with any person or entity;
  • Infringes any copyright, trademark, patent, trade secret, moral right, privacy right, or right of publicity;
  • Is defamatory, harassing, threatening, abusive, or incites violence or hatred against any individual or group;
  • Is sexually explicit, or depicts or promotes the sexual exploitation or abuse of minors;
  • Promotes terrorism, extremism, self-harm, or illegal goods and services;
  • Contains malware, viruses, or code intended to disrupt or gain unauthorised access to any system;
  • Constitutes fraud, phishing, deceptive advertising, or a financial scam;
  • Involves scraping, harvesting, reselling, or otherwise misusing data obtained via social media APIs, or storing such data beyond what the relevant provider permits;
  • Attempts to reverse engineer, decompile, resell, sublicense, or create a derivative platform from the Service;
  • Circumvents rate limits, security controls, subscription limits, or authentication mechanisms of the Platform or of any connected social network;
  • Places an unreasonable or disproportionate load on our infrastructure or on any third-party API.

We may investigate suspected violations and may suspend or terminate your account, remove content, and disconnect social accounts without prior notice where we reasonably believe a violation has occurred or where required by a social network or by law.

7. Subscriptions, Fees, and Payment

7.1 Plans. Access to certain features requires a paid subscription. The features, usage limits (such as number of connected accounts, scheduled posts, team members, or AI tokens), and prices of each plan are displayed on the Platform at the point of purchase.

7.2 Billing. Subscriptions are billed in advance on a recurring basis (monthly or annually, as selected) and renew automatically until cancelled. Payments are processed by third-party payment providers; we do not store your full card details. All prices are exclusive of VAT unless stated otherwise; VAT is applied in accordance with Romanian and EU law based on your status and location.

7.3 Cancellation. You may cancel your subscription at any time from your account settings. Cancellation takes effect at the end of the current billing period; you retain access until that date. We do not provide pro-rata refunds for partial periods except where required by law.

7.4 Consumer right of withdrawal. If you are a consumer resident in the EU, you have a statutory right to withdraw from a distance contract within 14 days. However, by purchasing a subscription and requesting immediate access, you expressly consent to the immediate performance of the Service and acknowledge that you lose your right of withdrawal once the Service has been fully performed, in accordance with Romanian Government Emergency Ordinance 34/2014 and Directive 2011/83/EU. Business users (B2B) are not covered by this right.

7.5 Price changes and non-payment. We may change our prices with at least 30 days' notice, effective from your next renewal. If payment fails, we may suspend your account, including pausing scheduled posts, until payment is resolved.

8. Third-Party Services

The Platform integrates with third-party services including social media APIs, AI providers, cloud storage providers, payment gateways, and stock image libraries. Your use of those services may be subject to their own terms. We are not responsible for the availability, accuracy, content, or practices of any third-party service.

API dependency disclaimer. Social networks may change, restrict, deprecate, or revoke API access at any time without notice to us. This may cause features to degrade or stop working, may cause scheduled posts to fail, and may require you to reconnect accounts. We will make reasonable efforts to restore functionality but we do not guarantee it and we are not liable for such failures.

9. Availability and Support

We aim to keep the Service available but we do not guarantee uninterrupted or error-free operation. The Service is provided on an "as is" and "as available" basis. We may perform scheduled or emergency maintenance. Support is provided by email at [email protected] and via the in-platform ticketing system during Romanian business hours.

10. Disclaimers

To the fullest extent permitted by law, we disclaim all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that:

  • Scheduled posts will always publish successfully or at the exact scheduled time;
  • Analytics data supplied by third-party APIs is accurate or complete;
  • Your social media accounts will not be restricted, rate-limited, or suspended by their respective networks;
  • AI-generated content will be accurate, original, or fit for any purpose.

11. Limitation of Liability

To the fullest extent permitted by Romanian law, CLOUDZERO SRL shall not be liable for any indirect, incidental, special, consequential, or punitive damages, nor for loss of profits, revenue, data, goodwill, business opportunity, or social media reach or followers, arising out of or in connection with your use of the Service.

Our total aggregate liability arising out of or relating to these Terms or the Service shall not exceed the total amount you paid to us in the twelve (12) months immediately preceding the event giving rise to the claim, or EUR 100, whichever is greater.

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot be excluded under applicable law.

12. Indemnity

You agree to indemnify and hold harmless CLOUDZERO SRL, its directors, employees, and agents against any claim, demand, loss, liability, damage, cost, or expense (including reasonable legal fees) arising from: (a) Your Content; (b) your breach of these Terms; (c) your violation of any law or of any social network's terms; or (d) your infringement of any third party's rights.

13. Suspension and Termination

You may terminate your account at any time from your account settings or by emailing us. We may suspend or terminate your account immediately if you materially breach these Terms, if we are required to do so by law or by a social network provider, if we reasonably suspect fraud or abuse, or if you fail to pay applicable fees.

On termination: your right to use the Service ceases; all connected social accounts are disconnected and their tokens deleted; scheduled posts are cancelled and will not publish. Your data is retained and then deleted as described in our Privacy Policy. You should export any content you wish to keep before terminating.

14. Intellectual Property

All rights in the Platform itself — including its software, design, trademarks, and the "CLOUDZERO" name and logo — remain the property of CLOUDZERO SRL or its licensors. Underlying licensed third-party software remains the property of its respective owner. Nothing in these Terms transfers any such rights to you. You receive only a limited, revocable, non-exclusive, non-transferable right to access and use the Service in accordance with these Terms.

15. Data Protection

Our processing of personal data is described in our Privacy Policy, which forms part of these Terms. Where you use the Platform to process personal data of your own clients or audience, you act as the data controller and we act as your data processor; in such cases the data processing terms in our Privacy Policy apply.

16. Changes to These Terms

We may update these Terms from time to time. Material changes will be notified by email or via an in-platform notice at least 15 days before taking effect. Continued use of the Service after the effective date constitutes acceptance. If you do not accept the changes, you must stop using the Service and may cancel your subscription.

17. Governing Law and Disputes

These Terms are governed by the laws of Romania. Any dispute shall be subject to the exclusive jurisdiction of the competent courts of Cluj-Napoca, Romania, save that consumers may bring proceedings in the courts of their country of residence where mandatory consumer law so provides.

EU consumers may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr, or the Romanian National Authority for Consumer Protection (ANPC) at anpc.ro.

18. Miscellaneous

Severability. If any provision is held invalid, the remainder continues in full force.
No waiver. Our failure to enforce any right does not constitute a waiver of it.
Assignment. You may not assign these Terms without our written consent. We may assign them in connection with a merger, acquisition, or sale of assets.
Entire agreement. These Terms, together with the Privacy Policy, constitute the entire agreement between you and us regarding the Service.
Force majeure. We are not liable for failure to perform due to events beyond our reasonable control, including third-party API outages, hosting failures, natural disasters, or acts of government.

19. Contact

CLOUDZERO SRL
Sesul de Sus 184A, Floresti, Cluj County, Romania
CUI 46180740 · J12/2983/2022
Email: [email protected]
Telephone: +40 733 403 403



PRIVACY POLICY

Service: social.cloudzero.ro
Data Controller: CLOUDZERO SRL
Effective date: 13 July 2026
Last updated: 13 July 2026


This Privacy Policy explains what personal data social.cloudzero.ro collects, why we collect it, how we use and share it, how long we keep it, and what rights you have. It is written to comply with Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018, and it describes in detail our handling of data obtained through the Meta (Facebook & Instagram), LinkedIn, X (Twitter), and TikTok platform APIs.

1. Data Controller and Contact

  • Controller: CLOUDZERO SRL
  • Registration (CUI): 46180740
  • Trade Register: J12/2983/2022
  • Address: Sesul de Sus 184A, Floresti, Cluj County, Romania
  • Privacy contact: [email protected]
  • Telephone: +40 733 403 403

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. All privacy enquiries, access requests, and deletion requests should be sent to [email protected].

2. What Personal Data We Collect

2.1 Data you provide directly

Account data — Name, email address, password (hashed), profile photo, timezone, language preference.

Billing data — Billing name, billing address, company name, VAT number, invoice history, subscription plan. Full card numbers are never stored on our servers; they are handled directly by our payment processors.

Content data — Post text, captions, hashtags, uploaded images and videos, drafts, scheduling times, campaign labels, caption templates.

Team data — Names and email addresses of team members you invite, their assigned roles and permissions.

Support data — Support tickets, messages, and any information you include in them.

2.2 Data collected automatically

Technical data — IP address, browser type and version, operating system, device type, screen resolution.

Usage data — Login timestamps, pages visited, features used, posts created and published, error logs.

Cookies — Session cookies, authentication cookies, preference cookies (see Section 9).

2.3 Data obtained from social media platforms

When you connect a social media account, the relevant provider gives us access to certain data via its official API, strictly within the permissions (scopes) you approved during the OAuth authorisation flow. This is set out per platform below.

We never ask for, collect, or store your social media passwords. Authentication is performed exclusively via the provider's own OAuth flow. We receive only an access token, which is an authorisation credential — never your password.

3. Platform-Specific Data Handling

3.1 Meta Platforms — Facebook and Instagram

What we receive:

  • Facebook: Your Facebook user ID; your name and profile picture; the list of Facebook Pages you administer, including Page ID, Page name, Page access token, and Page profile picture; Page insights/analytics metrics for Pages you connect; the publish status and IDs of posts we publish on your behalf.
  • Instagram: Your Instagram Business or Creator account ID; account username and profile picture; the list of connected accounts; media and account insights metrics; the publish status and IDs of media we publish on your behalf.

Permissions we request and why:

  • pages_show_list — To display the list of your Facebook Pages so you can choose which to connect
  • pages_read_engagement — To read Page metadata required to publish and to display Page details in the dashboard
  • pages_manage_posts — To publish, schedule, and delete posts on the Pages you have connected, at your instruction
  • read_insights / pages_read_user_content — To retrieve analytics for content published on your connected Pages
  • business_management — To identify Pages and Instagram accounts held within a Business Manager you administer
  • instagram_basic — To identify your connected Instagram Business/Creator account and display its username and avatar
  • instagram_content_publish — To publish images, videos, carousels, Reels, and Stories to your Instagram account, at your instruction
  • instagram_manage_insights — To retrieve analytics for your Instagram account and its published media
  • instagram_manage_comments — Where enabled, to post the automatic first comment on a published post (used for hashtags)

What we do NOT do with Meta data: We do not access your private messages or Messenger conversations. We do not access your friends list or personal Facebook timeline. We do not use Meta Platform Data for advertising, targeting, credit assessment, insurance eligibility, employment decisions, or any determination of eligibility. We do not sell, license, or transfer Meta Platform Data to any data broker, ad network, or third party. We do not use Meta Platform Data to build user profiles or train AI models. We do not combine Meta Platform Data with data from other sources to create a unified profile.

Deletion: Meta Platform Data is deleted when you disconnect the account, when your account is deleted, when your access token expires or is revoked, or when Meta instructs us to delete it — whichever occurs first. See Section 8 and Section 12.

3.2 LinkedIn

What we receive: Your LinkedIn member ID; your first name, last name, and profile picture; your email address (if you use LinkedIn social login); the list of Company Pages you administer, including organisation ID and name; post IDs and publish status for content we publish on your behalf; basic engagement statistics for that content.

Permissions we request and why:

  • openid, profile — To identify you and display your name and avatar in the dashboard
  • email — To retrieve your email address where you sign in with LinkedIn
  • w_member_social — To publish text, link, image, and video posts to your personal LinkedIn profile, at your instruction
  • w_organization_social — To publish posts to Company Pages you administer, at your instruction
  • r_organization_social — To read posts and engagement data for Company Pages you administer, for analytics
  • rw_organization_admin — To list the Company Pages you administer so you can select which to connect

What we do NOT do with LinkedIn data: We do not access, scrape, store, or export your LinkedIn connections or your connections' personal data. We do not access LinkedIn InMail or private messages. We do not use LinkedIn data for lead generation, sales prospecting, recruitment sourcing, or resale. We do not copy, cache, or store LinkedIn member data beyond what is necessary to render the Service, and we do not retain it after you disconnect. We comply with the LinkedIn API Terms of Use.

3.3 X (Twitter)

What we receive: Your X user ID, username (handle), display name, and profile picture; tweet IDs and publish status for content we publish on your behalf; public engagement metrics for that content.

Scopes: tweet.read, tweet.write, users.read, offline.access — used to identify your account, publish tweets and media at your instruction, and maintain the connection without repeated re-authorisation.

We do not access your direct messages. We do not scrape or store the X user data of any third party. We comply with the X Developer Agreement and Policy.

3.4 TikTok

What we receive: Your TikTok open ID, display name, and avatar; the status of videos uploaded on your behalf.

Scopes: user.info.basic, video.publish / video.upload — used to identify your account and to upload video content and captions at your instruction. We do not access your TikTok private data, messages, or followers. We comply with the TikTok Developer Terms of Service.

3.5 Access tokens

Access tokens and refresh tokens are stored encrypted at rest in our database. They are used exclusively to make API calls to the relevant platform on your behalf, in order to perform the actions you have instructed (publishing scheduled content, refreshing analytics). Tokens are never shared with any third party, never logged in plaintext, and are permanently deleted from our database when you disconnect an account or delete your account.

4. Purposes of Processing and Legal Bases

PurposeData usedLegal basis (GDPR Art. 6)
Creating and administering your accountAccount dataArt. 6(1)(b) — performance of a contract
Connecting your social accounts and publishing your scheduled contentSocial platform data, access tokens, content dataArt. 6(1)(b) — contract; Art. 6(1)(a) — consent given via the OAuth flow
Displaying analytics for your connected accountsSocial platform insights dataArt. 6(1)(b) — performance of a contract
Generating AI-assisted captions where you request itPrompts and content you submitArt. 6(1)(b) — performance of a contract
Processing payments, issuing invoices, meeting accounting obligationsBilling dataArt. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation
Providing customer supportSupport data, account dataArt. 6(1)(b) — performance of a contract
Securing the Platform, preventing fraud and abuseTechnical data, usage dataArt. 6(1)(f) — legitimate interests
Improving and debugging the ServiceAggregated usage data, error logsArt. 6(1)(f) — legitimate interests
Sending service and transactional emailsAccount dataArt. 6(1)(b) — performance of a contract
Sending marketing emailsAccount dataArt. 6(1)(a) — consent (withdrawable at any time)
Establishing, exercising, or defending legal claimsAs relevantArt. 6(1)(f) — legitimate interests

5. Who We Share Data With

We do not sell your personal data. We do not share it with data brokers, ad networks, or advertisers. We share data only with the following categories of recipient, and only to the extent necessary:

RecipientPurposeData shared
Social media platforms (Meta, LinkedIn, X, TikTok)To publish the content you have scheduled and to retrieve analyticsPost content, media files, scheduling instructions, access tokens
AI providers (e.g. OpenAI, Google Gemini, DeepSeek)Only where you actively use an AI feature: to generate or refine captions and hashtagsThe prompt and content you submit for that specific request
Payment processorsTo take payment and prevent fraudBilling data, transaction amount, email
Hosting and infrastructure providersTo host the Platform, its database, and stored mediaAll data, stored at rest under contract
Email delivery providersTo send transactional and, with consent, marketing emailEmail address, name
Cloud storage services (only if you connect them)To import media you select from Google Drive, Dropbox, or OneDriveOnly the specific files you choose to import
Professional advisers and authoritiesWhere legally required, or to establish or defend legal claimsAs strictly necessary

Note on AI providers. Content you submit to an AI feature is transmitted to the relevant AI provider for processing. Do not submit confidential or sensitive personal data to AI features. We do not authorise AI providers to use your submissions to train their models, and we use API endpoints configured accordingly where the provider offers that option.

6. International Transfers

Some of our processors are located outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, we rely on one or more of the following safeguards under Chapter V GDPR:

  • An adequacy decision of the European Commission (including the EU–US Data Privacy Framework, where the recipient is certified);
  • Standard Contractual Clauses approved by the European Commission;
  • Supplementary technical measures such as encryption in transit and at rest.

You may request a copy of the relevant safeguards by contacting [email protected].

7. Data Security

We implement appropriate technical and organisational measures under Article 32 GDPR, including:

  • TLS/HTTPS encryption for all data in transit;
  • Encryption at rest for OAuth access tokens and refresh tokens;
  • Passwords stored using a strong one-way hashing algorithm (bcrypt); passwords are never stored in plaintext and are never recoverable;
  • Role-based access controls and the principle of least privilege for staff access;
  • Regular security patching of the application, framework, and server infrastructure;
  • Regular backups, held encrypted;
  • Logging and monitoring of authentication and administrative events.

No system is perfectly secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Romanian supervisory authority (ANSPDCP) within 72 hours and, where the risk is high, notify affected users without undue delay.

8. Data Retention

DataRetention period
Account dataFor the life of your account, then deleted within 30 days of account deletion
OAuth access and refresh tokensDeleted immediately upon disconnection, revocation, or account deletion
Social platform profile and insights dataDeleted immediately upon disconnection; and in any event not retained beyond the period permitted by the relevant platform
Content and media you uploadedUntil you delete it, or 30 days after account deletion
Published post records and publish logsUp to 12 months, for troubleshooting and analytics
Invoices and accounting records10 years, as required by Romanian fiscal legislation (Law 82/1991)
Support tickets24 months after resolution
Server and security logsUp to 12 months
BackupsRotated and overwritten within 90 days

9. Cookies

TypePurposeConsent required?
Strictly necessarySession management, authentication, CSRF protection, load balancingNo — exempt under Art. 5(3) ePrivacy Directive
PreferenceRemembering your language, timezone, and dark-mode settingNo, where set at your explicit request
AnalyticsUnderstanding aggregate usage to improve the ServiceYes — set only with your consent

We do not use advertising or cross-site tracking cookies. You can manage cookies through your browser settings; disabling strictly necessary cookies will prevent the Platform from functioning.

10. Your Rights Under GDPR

Subject to the conditions in the GDPR, you have the right to:

  • Access (Art. 15) — obtain confirmation of whether we process your data and receive a copy of it;
  • Rectification (Art. 16) — have inaccurate or incomplete data corrected;
  • Erasure (Art. 17) — have your data deleted (the "right to be forgotten");
  • Restriction (Art. 18) — limit how we process your data in certain circumstances;
  • Data portability (Art. 20) — receive your data in a structured, machine-readable format;
  • Object (Art. 21) — object to processing based on our legitimate interests, and to object to direct marketing at any time;
  • Withdraw consent (Art. 7(3)) — withdraw any consent you have given, without affecting the lawfulness of prior processing;
  • Not be subject to automated decision-making (Art. 22) — we do not carry out automated decision-making producing legal effects concerning you.

To exercise any right, email [email protected]. We will respond within one month, extendable by two further months for complex requests. We may ask you to verify your identity. Exercising your rights is free of charge unless the request is manifestly unfounded or excessive.

Right to complain. If you believe we have processed your data unlawfully, you may lodge a complaint with the Romanian supervisory authority:

Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
Email: [email protected] · Web: www.dataprotection.ro

You may also complain to the supervisory authority in your EU country of residence or place of work.

11. How to Disconnect a Social Account

You may disconnect any connected social account at any time:

  1. Log in to social.cloudzero.ro;
  2. Go to Accounts (or Channels);
  3. Select the account and click Disconnect / Remove.

This immediately deletes the stored access token and all associated profile and analytics data for that account, and cancels any pending scheduled posts to it.

You can also revoke our application's access directly from the platform itself:

  • Facebook: Settings & Privacy → Settings → Apps and Websites → remove social.cloudzero.ro
  • Instagram: Settings → Apps and Websites → Active → Remove
  • LinkedIn: Settings & Privacy → Data Privacy → Other applications → Permitted Services → Remove
  • X (Twitter): Settings → Security and account access → Apps and sessions → Connected apps → Revoke access
  • TikTok: Settings and Privacy → Security & Permissions → Manage app permissions

12. Data Deletion Instructions

This section is provided to satisfy the data deletion callback requirements of the Meta, LinkedIn, X, and TikTok developer platforms.

12.1 Deleting your account and all associated data. You may permanently delete your account and all associated data at any time:

  • In-app: Log in → Settings → Account → Delete Account. Confirm the action. This is irreversible.
  • By email: Send a request from your registered email address to [email protected] with the subject line "Data Deletion Request". We will verify your identity and complete the deletion within 30 days, confirming to you by email when it is done.

12.2 What is deleted. On account deletion we permanently erase: your profile and account record; all OAuth access and refresh tokens; all social platform data received via any API (including Meta Platform Data); all uploaded media and content; all drafts and scheduled posts; all analytics records; and all team membership records. Deletion from live systems is immediate; deletion from encrypted backups completes within 90 days as backups rotate.

12.3 What is retained, and why. We retain invoices and transaction records for 10 years where required by Romanian accounting and fiscal law (Law 82/1991 and the Fiscal Code). This retained data is limited to what the law requires and is not used for any other purpose. We may also retain data where necessary to establish, exercise, or defend legal claims.

12.4 Meta data deletion callback. In accordance with Meta Platform Terms, we operate a Data Deletion Request Callback endpoint. If you remove our application via your Facebook or Instagram settings, Meta sends us a signed deletion request and we delete all Meta Platform Data associated with your account. A confirmation code and status URL are returned so you can verify completion. You can also trigger deletion directly by emailing [email protected].

13. Children

The Service is not directed at, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

14. Our Role When You Manage Clients' Accounts

If you use the Platform to manage social media accounts belonging to your own clients, then in respect of that client data you are the data controller and CLOUDZERO SRL is your data processor. In that capacity we will: process personal data only on your documented instructions; ensure staff are bound by confidentiality; apply the security measures in Section 7; not engage a sub-processor without notifying you; assist you with data subject requests and breach notification; and delete or return the data on termination. You warrant that you have a lawful basis and all necessary authorisations for the client data you process through the Platform. A separate Data Processing Agreement is available on request.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified by email or an in-platform notice at least 15 days before they take effect. We encourage you to review this page periodically.

16. Contact

CLOUDZERO SRL
Sesul de Sus 184A, Floresti, Cluj County, Romania
CUI 46180740 · J12/2983/2022
Email: [email protected]
Telephone: +40 733 403 403