Legal
Privacy Policy
How LD LATTE and the internal LD LATTE Analytics application access, use, store and delete data.
This Policy applies to the public website ldlatte.org and the internal LD LATTE Analytics application. It must remain consistent with the application’s actual operation and will be updated when integrations change.
1. Data controller
The data controller is Sole Proprietor Zalina Aligadzhievna Vakhieva, Tax ID 052105123968, Registration No. 321508100600451, Moscow Region, Russia. Privacy contact: [email protected].
2. Scope
LD LATTE Analytics is a non-public corporate application for authorized LD LATTE employees. It connects company-owned or company-administered Instagram/Meta, YouTube/Google, TikTok, VK and Pinterest accounts through official authorization mechanisms and APIs.
3. Data we may access
- Authorization data: account identifiers, scopes, access and refresh tokens and expiration dates. We do not collect platform passwords.
- Profile data: profile name, username, identifier, profile image and account type where provided by the API.
- Company channel data: page, channel, business account, board, Pin and content identifiers and metadata.
- Analytics: views, reach, impressions, followers, engagement, clicks, watch time and other aggregate metrics included in approved permissions.
- Technical data: authorization logs, timestamps, IP address, user agent, errors and security events when the internal application is used.
- Support communications: information voluntarily provided to support.
4. Purposes
- authenticate authorized employees;
- connect and maintain integrations with LD LATTE’s official accounts;
- produce internal analytics, reports and period comparisons;
- diagnose errors, secure the application and prevent unauthorized access;
- process revocation and deletion requests;
- comply with applicable law and platform rules.
We do not sell platform data, use it for targeted advertising, credit scoring or training publicly available artificial intelligence models.
5. Legal bases
Processing is carried out for authorized users’ employment and corporate responsibilities, based on their actions and consent through platform OAuth screens, the company’s legitimate interest in analyzing its own channels, and applicable legal obligations.
6. Sharing
Access is limited to authorized staff and technical contractors who require it to operate the system and are bound by confidentiality. Data is exchanged with the relevant platforms: Meta, Google/YouTube, TikTok, VK and Pinterest. Infrastructure may include company-controlled servers, databases and internal reporting tools.
Data may be disclosed to a public authority where legally required. It is not provided to external clients or advertising intermediaries.
7. Retention
- OAuth tokens are retained until access is revoked, the integration is disconnected or the user’s authorization ends, then deleted within a reasonable period, normally no later than 30 days.
- Technical logs may be retained for up to 180 days.
- Imported analytics may be retained for up to 24 months for period comparison unless a longer period is legally required or justified for corporate reporting.
- De-identified aggregate reports may be retained longer.
8. Security
We use role-based access, least privilege, HTTPS, protected secret storage, activity logging and backups. No storage method can guarantee absolute security, so controls are reviewed regularly.
9. Revocation and deletion
Users can revoke access through the platform and submit a deletion request using ldlatte.org/en/data-deletion/. After identity verification, related tokens and identifying data are normally deleted within 30 days unless retention is legally required.
10. International processing
Platform providers may process information in different countries. By using a platform’s official authorization flow, the user also acknowledges that platform’s privacy policy. We use data only for the purposes described here.
11. Children
The website and application are not intended for anyone under 18. The application has no public registration.
12. User rights
Subject to applicable law, a user may request access, correction, restriction, revocation or deletion. Requests must be sent from a corporate address to [email protected]. Identity and authorization may be verified.
13. Changes
The current version is always published at this URL. Material changes are marked with a new effective date.
14. Contact
Sole Proprietor Zalina Aligadzhievna Vakhieva
Tax ID 052105123968 · Registration No. 321508100600451
Email: [email protected]