DOC. 002 Privacy Policy
Privacy Policy
01Who we are
The data controller is Metatron Software Engineering di Stefano Rifici, a sole proprietorship registered in Italy ("Metatron", "we"). You can reach us at stefano.rifici@metatronsoftwareengineering.com.
02What this policy covers
This website and the in-house tools we use to run advertising for our own products on third-party platforms, including our TikTok integration. It does not cover data that Appointly processes on behalf of its business customers.
03This website
The website sets no cookies, runs no advertising or cross-site tracking and has no forms. Fonts are served from our own domain.
We use Vercel Web Analytics, provided by our hosting provider, to count page views and see which pages are visited and from which countries, devices and referring sites. It uses no cookies and collects no personal identifiers: a visit is recognised only by a hash of the request, which is discarded after 24 hours, and we see aggregated statistics only. The legal basis is our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).
Our hosting provider, Vercel Inc., processes technical request data (IP address, browser user agent, date and time, requested page) in server logs to deliver the site and keep it secure. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
04When you email us
If you write to us, we process your email address and the content of your message to reply. The legal basis is your request and our legitimate interest in answering it. We keep correspondence only as long as needed to handle it, unless Italian law requires us to keep it longer, for example for accounting.
05How we use TikTok
Metatron has registered a developer app on TikTok for Business and uses the TikTok API for Business (Marketing API) for one purpose: to create, manage and measure advertising campaigns that promote our product Appointly, on Metatron's own TikTok advertiser account.
- Accounts: the app connects only to advertiser accounts owned by Metatron, authorised by us through TikTok's own login. It is not offered to other businesses or to TikTok users.
- Data used: the settings of the campaigns, ad groups and ads we create, and aggregate campaign performance figures such as spend, impressions and clicks.
- Data not used: we do not access, collect or store personal data of TikTok users, we do not use TikTok Login Kit, and we do not build audiences from TikTok user data.
- Access credentials: the access token TikTok issues to our app is stored securely on our own systems and used only for the purpose above. We can revoke it at any time from TikTok for Business, and we do so when it is no longer needed.
- No selling or sharing: we never sell data obtained through TikTok or share it with anyone.
If you see one of our ads on TikTok, TikTok's own privacy policy governs what TikTok processes about you.
06How we use Meta
We apply the same rules to the Meta Marketing API, which we use to run Appointly campaigns on Facebook and Instagram from Metatron's own ad account: only our own accounts, only campaign settings and aggregate performance figures, no personal data of users.
07Who receives data
We do not sell personal data. The only parties that process it for us are our service providers, acting on our instructions: our hosting provider (Vercel Inc.) and our email provider.
08Transfers outside the EU
Vercel Inc. is based in the United States. Where personal data leaves the European Economic Area, it is protected by safeguards recognised under the GDPR, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
09Your rights
Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its processing, and receive it in a portable format. Write to stefano.rifici@metatronsoftwareengineering.com. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority in your own country.
10Children
This website and our products are not directed at children under 16.
11Security
We protect data with access controls, encrypted connections (HTTPS) and by keeping only what we need.
12Changes
If this policy changes, we will publish the new version on this page with a new date.
13Contact
For any question about this policy or your data: stefano.rifici@metatronsoftwareengineering.com.