Toucan Creator Privacy Policy

Effective Date: 10/27/2025
Last Updated: 12/10/2025

Introduction

Welcome to Toucan Creator, a social media management platform provided by Wagware Digital Solutions, LLC (“Wagware,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Toucan Creator (the “Service”). By using our Service, you agree to the collection and use of information in accordance with this policy.

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, DO NOT USE TOUCAN CREATOR.

Table of Contents

  1. Information We Collect
  2. How We Use Your Information
  3. How We Share Your Information
  4. Third-Party Platform Integration
  5. Data Storage and Security
  6. Data Retention
  7. Your Privacy Rights
  8. Cookies and Tracking Technologies
  9. International Data Transfers
  10. Children’s Privacy
  11. California Privacy Rights
  12. GDPR Compliance (European Users)
  13. YouTube API Services Disclosure
  14. Changes to This Privacy Policy
  15. Contact Us

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

  • Name
  • Email address
  • Password (encrypted)
  • Company/Organization name (if applicable)
  • Billing address
  • Phone number (optional)

Payment Information:

  • Credit card details (processed by Stripe – we do not store full card numbers)
  • Billing history
  • Transaction records

Profile Information:

  • Profile photo
  • Bio/description
  • Preferences and settings
  • Time zone

Content You Create:

  • Social media posts and scheduled content
  • Images, videos, and other media files
  • Comments and replies
  • Analytics data and reports
  • Team collaboration data (comments, approvals, assignments)

Communications:

  • Support requests and correspondence
  • Feedback and survey responses
  • Email communications with our team

1.2 Information We Collect Automatically

Usage Information:

  • Pages visited and features used
  • Time spent on the Service
  • Actions taken (posts created, comments replied to, etc.)
  • Device information (browser type, operating system, IP address)
  • Referral source

Log Data:

  • IP address
  • Browser type and version
  • Access times and dates
  • Pages viewed
  • Error logs and diagnostic data

Cookies and Similar Technologies:

  • Session cookies (authentication)
  • Preference cookies (settings, theme)
  • Analytics cookies (usage patterns)

See Section 8 for details.

1.3 Information from Third-Party Platforms

When you connect social media accounts to Toucan Creator, we collect, store, and process data returned via those platforms’ APIs, including YouTube API Services.

From YouTube (via YouTube API Services):

  • Channel name and ID
  • Channel/profile photo
  • Associated Google account email (where permitted)
  • Video metadata (titles, descriptions, thumbnails, tags, publish dates, privacy status)
  • Video- and channel-level analytics (e.g., views, watch time, likes, comments count, subscribers gained/lost, engagement metrics available from the YouTube Analytics API)
  • Comments on your videos and replies you send through Toucan Creator

From Other Platforms (if connected):

Facebook, Instagram, LinkedIn, X/Twitter, TikTok, and others may provide:

  • Page/account name and ID
  • Profile photo
  • Post/tweet content and metadata
  • Platform-provided analytics (impressions, reach, engagement, clicks)
  • Comments, replies, mentions
  • Follower/connection counts

Important: We only access data you explicitly authorize via OAuth or similar mechanisms. You can revoke access at any time through your account settings or directly on each platform (see Sections 4 and 13 for YouTube-specific details).

1.4 Information from Other Sources

Payment Processors (Stripe):

  • Payment confirmation
  • Billing status
  • Refund/chargeback information

Email Service Providers:

  • Email delivery status
  • Open and click rates (for our communications to you)

2. How We Use Your Information

We use your information for the following purposes:

2.1 Provide and Improve the Service

  • Create and manage your account
  • Process payments and subscriptions
  • Publish content to connected social media platforms, as you direct
  • Monitor and respond to social media interactions (e.g., Universal Inbox)
  • Generate analytics and reports based on platform data
  • Provide AI-powered features (reply suggestions, sentiment analysis)
  • Enable team collaboration features
  • Sync data from connected platforms (including YouTube API Services)

2.2 Communicate with You

  • Send service updates and announcements
  • Respond to support requests
  • Send billing and payment notifications
  • Request feedback and conduct surveys
  • Send marketing communications (with your consent – you can opt out)

2.3 Ensure Security and Prevent Fraud

  • Detect and prevent unauthorized access
  • Monitor for suspicious activity
  • Investigate and prevent violations of our Terms of Service
  • Comply with legal obligations

2.4 Analyze and Improve

  • Understand how users interact with the Service
  • Identify bugs and technical issues
  • Improve features and user experience
  • Develop new features
  • Conduct research and analytics

2.5 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests (subpoenas, court orders)
  • Protect our rights and property
  • Enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Your Consent

  • Publishing content to social media platforms (as you direct)
  • Sharing with team members (if you use team features)
  • Any other purpose you explicitly authorize

3.2 Service Providers

We share information with third-party service providers who help us operate the Service, including:

  • Infrastructure and Hosting: cloud hosting providers, database services, CDNs
  • Payment Processing: Stripe (payment processing and billing)
  • Email Communications: transactional and bulk email providers
  • Analytics and Monitoring: usage analytics and error tracking services
  • AI Services: AI providers only when you use AI features or provide your own key

These providers are contractually obligated to protect your data and to use it only for the purposes we specify.

3.3 Social Media Platforms

When you connect platforms and authorize actions:

  • Content you schedule may be published to those platforms
  • We access the data you authorize via OAuth or API scopes
  • The platform’s own privacy policy governs data on that platform

3.4 Legal Requirements

We may disclose information if required by law or in good faith belief that such disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Protect users’ rights, property, or safety
  • Investigate fraud or security issues
  • Respond to government requests

3.5 Business Transfers

If Wagware is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.6 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you individually (for example, overall feature usage statistics). We do not share or sell identifiable YouTube data or use YouTube data to create audience profiles for third parties.

4. Third-Party Platform Integration

4.1 OAuth Authorization

When you connect social media accounts, you authorize Toucan Creator to access specific data via OAuth or other platform-approved methods. We:

  • Request only the permissions necessary for Service functionality
  • Do not receive or store your platform passwords
  • Respect platform rate limits and policies
  • Cache platform data temporarily for performance

4.2 Platform Privacy Policies

Your use of connected platforms is governed by their own privacy policies. For example:

  • Google Privacy Policy (for YouTube and Google Accounts): https://www.google.com/policies/privacy
  • Facebook Privacy Policy
  • Instagram Privacy Policy
  • LinkedIn Privacy Policy
  • X/Twitter Privacy Policy
  • TikTok Privacy Policy

Please review these policies to understand how each platform handles your data.

4.3 Revoking Access

You can revoke Toucan Creator’s access to your social media accounts:

  • Through your Toucan Creator account settings, and/or
  • Directly on each platform.

For YouTube (Google account), you can revoke access at: https://myaccount.google.com/connections?filters=3,4&hl=en

Revoking access will disable features that require data from that platform.

4.4 Platform Data Retention

  • Platform data may be cached for short periods (typically 5–60 minutes) for performance.
  • Scheduled posts are stored until published or deleted.
  • Analytics and historical performance data may be stored to provide long-term reporting (see Sections 6 and 13 for YouTube-specific details).
  • You can request deletion of platform-related data from your account as described in Section 7.

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored on secure servers in the United States using:

  • Encrypted databases (e.g., PostgreSQL with encryption at rest)
  • Secure cloud infrastructure
  • Redundant backups for disaster recovery

5.2 Security Measures

We implement industry-standard security measures, including:

Technical Safeguards:

  • SSL/TLS encryption for data in transit (HTTPS)
  • Encryption at rest where applicable
  • Encrypted password storage (e.g., bcrypt)
  • Secure API authentication (e.g., JWT)
  • Regular security updates and patches
  • Firewall and intrusion prevention controls

Administrative Safeguards:

  • Role-based access controls
  • Confidentiality obligations for personnel
  • Security training and incident response procedures

Physical Safeguards:

  • Data centers with physical security controls
  • Environmental protections and redundant power/network systems

5.3 Limitations of Security

No security system is perfect. You acknowledge that:

  • Internet transmission has inherent risks
  • Unauthorized access may occur despite our efforts
  • You use the Service at your own risk

5.4 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

  • Notify affected users as required by law
  • Provide details about the breach and affected data
  • Explain steps we are taking to address the breach
  • Advise on protective measures you can take

6. Data Retention

6.1 Account Data

We retain your account data while your account is active and for a reasonable period afterward:

  • Account information: until account deletion + up to 30 days
  • Content: until you delete it or account deletion
  • Payment records: 7 years (for tax and legal compliance)
  • Support communications: up to 3 years

6.2 Analytics and Logs

  • Usage analytics: may be aggregated and anonymized for long-term reporting
  • Server logs: typically retained for up to 90 days
  • Error logs: typically retained for up to 1 year

6.3 Legal Holds

We may retain data longer if required by law or legal proceedings.

6.4 Backup Retention

Backup copies may persist for up to 90 days after deletion from production systems.

6.5 Deletion Requests

You can request deletion of your data at any time (see Section 7). We will delete or anonymize data as required by law, subject to necessary retention for legal, security, and operational purposes.

7. Your Privacy Rights

You have the following rights, which you may exercise subject to applicable law:

7.1 Access Your Information

You may:

  • Access your personal information
  • Request information about how we process your data

How to exercise: log into your account settings or contact support@wagware.com.

7.2 Correct Your Information

You may:

  • Update inaccurate or incomplete information

How to exercise: update directly within your account settings or contact support@wagware.com.

7.3 Delete Your Information

You may delete your account and associated data at any time. Deleting your information is permanent and cannot be undone. You may:

  • Delete your full account and organization data
  • Request deletion of specific stored data (contact support@wagware.com)
  • Remove or disconnect connected platform accounts (including YouTube)
  • Revoke Toucan Creator’s access to your connected accounts

Disconnecting a platform (such as YouTube) immediately stops all data syncing and prevents any further API access for that platform. Revoking access through Google’s Security Settings page disables all YouTube API permissions granted to Toucan Creator.

7.3.1 Deleting Your YouTube Data & Revoking Access

Toucan Creator provides clear ways for users to delete their stored YouTube data and disconnect their YouTube account at any time.

Disconnect Toucan Creator

If you wish to disconnect Toucan Creator from further access to YouTube, you may:

  1. Navigate to Social Media Management
  2. Click the Disconnect Icon for the connected channel (disconnect icon at the right of the channel)
  3. To disconnect all YouTube channels, you may click the Disconnect All button under the YouTube panel.

Revoking Toucan Creator’s Access to Your YouTube Account

Users may revoke Toucan Creator’s access to their YouTube account at any time by visiting Google’s Security Settings page:

🔗 https://myaccount.google.com/connections?filters=3,4&hl=en

Then:

  1. Locate Toucan Creator
  2. Select Delete all connections you have with Toucan Creator

Once access is revoked:

  • Toucan Creator can no longer access YouTube data
  • All YouTube API requests for the user are immediately disabled
  • The user may reconnect later if they choose
Deleting All Stored YouTube Data

Users may delete all stored YouTube-related data by:

  1. Navigating to Organization Settings
  2. Scrolling to the bottom of the page
  3. Selecting Delete Organization
  4. Typing “I AGREE” and clicking DELETE ORGANIZATION

Note: This action permanently deletes all data associated with your organization and account, including cached analytics and connected social media data. Deletion is immediate and irreversible.


7.4 Object or Restrict Processing

You may:

  • Object to certain processing activities
  • Request restrictions on processing

How to exercise: contact support@wagware.com.

7.5 Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

How to exercise: adjust settings in your account, revoke platform access (for example, at the Google URL in Section 4.3 for YouTube), or contact support@wagware.com.

7.6 Data Portability

You may:

  • Request a copy of your data in a structured, machine-readable format

How to exercise: use any export tools provided in the Service or contact support@wagware.com.

7.7 Complaints

You may:

  • Lodge a complaint with your local data protection authority if you believe your rights have been violated.

We encourage you to contact us first at support@wagware.com so we can try to resolve your concerns.

7.8 Response Time

We will respond to privacy-related requests within the timeframes required by law (generally within 30–45 days).

8. Cookies and Tracking Technologies

(unchanged in substance – still covers session, functional, analytics, and marketing cookies, controls via browser and account settings, and non-response to Do Not Track, etc.)

You can keep your existing Section 8 text here; it is already compatible with the YouTube requirements.

9. International Data Transfers

(keep your existing language, with references to US hosting, SCCs for EU/UK/EEA where applicable, etc.)

10. Children’s Privacy

Toucan Creator is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, contact support@wagware.com and we will delete the information and terminate the account.

11. California Privacy Rights

(keep your existing CCPA/“Shine the Light” language, but ensure all contact routes use support@wagware.com only.)

12. GDPR Compliance (European Users)

(keep your existing GDPR rights and legal basis sections; ensure all contact references use support@wagware.com and not any other email.)

13. YouTube API Services Disclosure

This section is provided to comply with YouTube API Services Terms of Service and related Google policies.

  1. Use of YouTube API Services
    Toucan Creator uses YouTube API Services to allow you to connect your YouTube channel, upload and manage videos, view analytics, and manage comments from within the Service.
  2. Access to YouTube Data
    When you authorize Toucan Creator via Google OAuth, we access YouTube data associated with your channel, including channel information, video metadata, analytics metrics, and comments, as described in Sections 1.3, 2, 3, and 4 of this Privacy Policy. We only access and use YouTube data as necessary to provide the features you choose to use.
  3. No Selling or Unapproved Sharing of YouTube Data
    We do not sell YouTube data or use YouTube data to build profiles for advertising or resale. We do not share YouTube data with third parties except as necessary to provide the Service (for example, secure hosting and infrastructure providers) or as required by law.
  4. Revoking Access to YouTube Data
    You may revoke Toucan Creator’s access to your YouTube data at any time by visiting your Google Account settings:
    https://myaccount.google.com/connections?filters=3,4&hl=en
    Once access is revoked, Toucan Creator will no longer be able to access YouTube data from your account and related features will stop functioning.
  5. Google Privacy Policy
    Your use of YouTube and Google services is governed by the Google Privacy Policy, available at:
    https://www.google.com/policies/privacy
  6. Retention of YouTube Data
    We may retain YouTube-related data (such as video metadata, analytics summaries, and comment threads) for longer than 12 months to provide historical analytics and reporting for your channel, consistent with Section 6. You may request deletion of such stored YouTube data by contacting support@wagware.com. After deletion or account closure, any residual data may remain in backups for a limited period, as described in Section 6.4.
  7. Changes to YouTube Integration
    If we materially change how we use YouTube API Services or YouTube data, we will update this Privacy Policy and, where required, obtain additional consent.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our data practices. When we make material changes, we will:

  • Post the updated policy on our website
  • Update the “Last Updated” date at the top of this page
  • Provide additional notice (such as in-app notifications or email) where required

Your continued use of the Service after any update constitutes acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us:

Email: support@wagware.com
Subject line: “Privacy Inquiry”

We aim to acknowledge privacy inquiries within 5 business days and respond fully within 30–45 days, depending on the complexity of the request.

Toucan Creator is a product of Wagware Digital Solutions, LLC.

© 2025 Wagware Digital Solutions, LLC. All rights reserved.

Version 1.1
Effective: 10/27/2025
Last Updated: 12/03/2025

BY USING TOUCAN CREATOR, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.