Platform Data Use Notice

What this document covers

Moyeo uses data from the external platforms you connect only for the tasks you request. Below you can find, for each platform, the permissions we request, the data we receive, the purposes of use, and how the data is retained and deleted. This document forms part of the Privacy Policy and is read consistently with it.

Moyeo is an independent service and is not operated or officially endorsed by Meta, Google or Kakao.

You can choose the features you want to use before connecting. The basic connection permission is required, and publishing, comment and performance permissions are requested only to the extent needed for the features you choose. If you add a feature later, we request permissions again. Depending on the platform, one feature may need several permissions, and you can use only the features that are approved.

Instagram

When you connect an Instagram professional account, we request the permissions below on Meta's official authorization screen. Moyeo does not receive your Instagram account password.

When we fetch posts, we also receive whether Instagram has attached an "AI info" label to each post and display it as-is on the post and comment screens. Moyeo does not add or change this label on its own, and includes the label in a publish request sent to Instagram only for posts where you turned on the AI info label yourself on the compose screen.

When you publish a bio page, we show the following Instagram data on a public page that anyone can view, depending on the blocks you place on that page. It appears only when you choose it or place the block yourself; Moyeo does not make it public on its own.

• Visitor reviews (comments pinned as reviews): We show only comments for which you chose "Pin as bio page review" ("소개 페이지 후기로 고정" in the app) on the Comments screen. The public page shows only the comment text, an Instagram mark, the date of the comment and the author name masked except for its first one or two characters (for example "da***", or "Guest" if there is no name); it does not show the author's profile image, account identifier or account link. Moyeo does not keep a separate copy of the comment text; when the public page is opened, we read it from the comment records received with the instagram_business_manage_comments permission above. If you unpin it, if the comment is hidden or deleted on Instagram, or if you disconnect the channel and the comment records are deleted, it is removed from the public page immediately.
• Recent posts: We show only your own posts that finished publishing through Moyeo, in order of most recent publishing. The public page shows a preview made from the photo you uploaded to Moyeo, part of the text you wrote, an Instagram mark and the post link Instagram returned as the publishing result. Posts not published through Moyeo and posts of other accounts are not shown, and when you disconnect the channel, that channel's posts are removed.

Auto-replies that send only a bio page link by DM to an Instagram comment without a public reply, or that reply to a received DM with a bio page link attached (link DMs), are processed in the same way as Send DM and DM auto-replies under the instagram_business_manage_comments and instagram_business_manage_messages permissions above. The link can only be set to your moyeo.io bio page address.

Data received is used only within the connected workspace, is not made public except for the bio page display you choose above, and is not used for ad targeting, sale or profiling. If you request an AI feature and have reviewed the processing notice, we pass the minimum input necessary to process the request to the AI processor. The items passed and how they are processed are described in the Privacy Policy. Authentication tokens are stored encrypted. If you disconnect a channel, delete a workspace or delete your account, we delete the authentication information and that channel's comment, performance and media reference data, the auto-replies you created and their logs, and AI suggestions made using that data.

We handle both the Deauthorize callback and the Data Deletion Request callback provided by Meta. When you remove Moyeo's connection in your Meta account settings, we verify the signed request sent by Meta, stop using the revoked credentials, delete the stored tokens and start deleting that channel's data. A revocation request for a previous connection is not applied to credentials from a newer connection. You can also request deletion by disconnecting in Moyeo's channel settings or through the data deletion procedure below. However, because Moyeo connects using Instagram Login, removing the app in your Meta account settings may not send a Deauthorize callback to Moyeo. To be sure the connection is removed, disconnect directly in Moyeo's channel settings or submit a request via the Data Deletion Instructions. When you request data deletion through Meta, we record the request, start the deletion procedure, and return to Meta a confirmation code and a URL where the processing status can be checked. You can check progress on the status page opened with the confirmation code.

Threads

When you connect a Threads profile, we request the permissions below on Meta's official authorization screen.

Data is retained and deleted on the same basis as Instagram. Mention logs are kept for no longer than 30 days. Meta's Deauthorize callback and Data Deletion Request callback also apply to Threads connections, and the possibility that the callback may not arrive and the reliable way to disconnect are also the same as for Instagram.

Public display on bio pages is also the same as for Instagram. For Threads replies you pin as reviews, we show only the text, a Threads mark, the date and the masked author name from the records received with the threads_read_replies permission above, and your own Threads posts that finished publishing through Moyeo are shown in the recent posts block with a preview, part of the text and the post link. If you unpin a reply, if it is hidden or deleted, or if you disconnect the channel, it is removed from the public page. Threads does not provide DMs, so link DMs do not apply to it.

YouTube

Moyeo uses YouTube API Services.

By using the YouTube integration features, you agree to the YouTube Terms of Service, and Google's processing of personal information is governed by the Google Privacy Policy. The same document is also available at https://policies.google.com/privacy.

Data received from the YouTube API is refreshed differently depending on its type. Performance metrics are refreshed once a day for each connected channel, and comments are refreshed by re-fetching recent activity about every 3 hours and re-fetching the entire history period once a day. For workspaces not used for more than 14 days, recent comment activity is re-fetched at intervals of up to 12 hours. When the entire history period is re-fetched, videos whose comment count has not changed may be skipped for up to 7 days. Channel information such as channel name, handle, profile image and description is received and stored when you connect or re-authorize the channel, and refreshed by re-fetching about every 3 days. When a comment deleted on YouTube is confirmed as deleted during a run that fetches the entire history period, we erase its text immediately and delete its record within one day. Comments that have not been re-fetched for 30 days are deleted. Video information is re-fetched starting 27 days after it was last checked, and videos that have been deleted or could not be checked for 30 days are deleted together with their related performance data. Performance metrics and viewer aggregates received from YouTube Analytics are kept only for the last 30 days regardless of your plan, and performance metrics older than 30 days are deleted even while the channel stays connected. If you disconnect a channel, delete a workspace or delete your account, we delete the related data stored by Moyeo and ask Google to revoke the authentication token. Authentication tokens are stored encrypted.

If you disconnect a channel, delete your account, or request deletion in the Moyeo app, we delete the YouTube data stored by Moyeo within 7 days; if you revoke Moyeo's access in your Google Account security settings, we delete it within 30 days. The same deadlines apply to data of channels that can no longer be fetched because token refresh failed.

Data received is used only to provide the features displayed to you. It is not used for advertising purposes, is not provided for ad targeting or credit assessment, and is not provided to third parties or combined with information from other sources without your separate request or consent.

If you place a recent posts block on a bio page, we show your own Shorts that finished uploading through Moyeo with a preview, part of the title and description you wrote and the video link. If you disconnect the channel, its videos are removed. YouTube comments cannot be pinned as bio page reviews, and comments and author information received through the YouTube API are not shown on public pages.

Moyeo does not create its own metrics from YouTube data. The screens show the metrics provided by YouTube as-is; we do not combine them with figures from other channels or platforms, or calculate and display new values from YouTube figures such as changes from or comparisons with a previous period, engagement rates, recommendations, rankings or scores. Deleting information stored in Moyeo does not delete videos or comments published on YouTube.

You can revoke Moyeo's access at any time in Manage third-party apps with account access in your Google Account.

Google sign-in

When you sign in with a Google account, we request the openid, email and profile permissions on Google's official consent screen. The information received under these permissions is your Google account identifier, email address, display name and profile image URL, and it is used only to create your account and to check that it is the same person when you sign in again.

Google Sign-In provides personal information to a business outside Korea, so we disclose the recipient and destination country together.

If you disconnect Google Sign-In in your account settings or delete your account, we delete the connection record kept by Moyeo. However, because Moyeo does not store the token used for Google Sign-In, we cannot confirm on your behalf whether the app permission has been revoked in your Google Account. Please revoke it yourself in Manage third-party apps with account access in your Google Account.

Google API Services Limited Use Disclosure

Moyeo's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The detailed requirements are available in the Google API Services User Data Policy.

• Information received is used only to provide and improve the features displayed to users.
• We do not transfer or sell information to third parties for any purpose, including advertising.
• Humans do not read the information. However, a minimal number of staff may access it with the user's explicit consent, or where necessary for security investigations, compliance with laws, or support requested by the user.

Kakao login

When you log in with a Kakao account, we ask for your consent to provide the items below on Kakao's official consent screen.

Because Kakao is a domestic business, this provision does not constitute a cross-border transfer. You can disconnect Kakao Login under login connection management in your account settings. If you delete your Moyeo account, Redband asks Kakao to unlink your account, removing the connection between Moyeo and your Kakao account. If the unlink result cannot be confirmed, you can unlink it yourself under connected services management in your Kakao account settings. Kakao's processing of personal information is governed by the Kakao Privacy Policy.

Data deletion

You can delete data and revoke permissions for each platform as follows. For detailed procedures and contact channels, please see the Data Deletion Instructions.

• Instagram and Threads: Disconnect in the workspace's channel settings, or submit a request using the app data deletion feature in your Meta account settings. If you request deletion through Meta, you can receive a confirmation code and a status check URL.
• YouTube: Disconnecting in the workspace's channel settings deletes the stored data and asks Google to revoke the authentication token. You can also revoke access in Manage third-party apps with account access in your Google Account.
• Google Sign-In and Kakao Login: Disconnect under login connection management in your account settings.
• Reviews and posts shown on bio pages: If you unpin a review on the Comments screen or in the bio page editor, or remove the block, it is removed from the public page immediately. Disconnecting the channel also removes that channel's reviews and posts.
• Your entire Moyeo account: Deleting your account in account settings also deletes the connections above and related data.
• Browser push notifications: Turning off the switch for the current device, or pressing "해제" (Remove) next to another device, under "푸시 알림" (Push notifications) in Settings > Notifications immediately deletes that device's subscription information. A push subscription is a value issued by the browser and is not linked to any external platform account.
• If you cannot log in: Send your sign-up email and the scope of deletion to support@moyeo.io, and we will process the request after verifying your identity.

Revision history