Privacy Policy

Last updated: October 12, 2026

1. Who we are

RCT Publish is operated by RC TRAINING PRO (Richmond Baiden), France. It is a content publishing tool used to prepare, schedule and publish content to the operator's own social media accounts. Contact: web@rctraining.pro.

2. Data we access

When you connect an account, RCT Publish accesses only what is needed to publish and show the status of your posts:

• YouTube (scope youtube.force-ssl): channel ID, channel name and avatar; upload of your videos and thumbnails; reading and updating the status of the videos you publish with the app; adding them to your playlists.
• Instagram (scopes instagram_business_basic, instagram_business_content_publish, instagram_business_manage_comments, instagram_business_manage_insights): account ID, username and profile picture; publishing your posts, reels, carousels and stories; posting the first comment you write; reading your publishing quota and post statistics.
• TikTok (scopes user.info.basic, video.publish, video.upload): open ID, display name and avatar; the posting options of your account (visibility, interactions, maximum duration); publishing your videos and photo posts, or sending them to your TikTok inbox as drafts.

We also store the OAuth tokens issued by these platforms, the content you upload (videos, images, text) and the publishing status and logs of each post.

3. How we use it

This data is used only to publish and schedule your content and to show its status. It is never used for advertising, never sold, never shared with third parties and never used to train artificial intelligence models.

RCT Publish's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. YouTube API Services

RCT Publish uses YouTube API Services. By using its YouTube features, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke RCT Publish's access to your Google account at any time from Google security settings.

5. Storage and security

• Data is stored on a server located in the European Union (Contabo).
• OAuth tokens are encrypted at rest (AES-256-GCM) and never leave the server.
• Access to the app is protected by a passkey. The connection is always encrypted (HTTPS).
• Video files are deleted 7 days after publication. Images are kept until you delete them.
• Encrypted database backups (which contain encrypted tokens and post metadata) are kept for up to 180 days in Cloudflare R2, in the EU jurisdiction.

6. Retention and deletion

• Disconnecting an account in RCT Publish deletes its tokens immediately.
• Data obtained from the platforms' APIs is refreshed or deleted within 30 days.
• You can revoke access from the platforms themselves: Google security settings (see above), the TikTok app (Settings and privacy, then Security and permissions, then Manage app permissions), and Instagram (Settings, then Apps and websites).
• Any request for access, correction or deletion sent to web@rctraining.pro is handled within 30 days. You may also lodge a complaint with the CNIL (France).

7. Cookies

RCT Publish uses a single session cookie, which is required to sign in. There are no analytics, advertising or tracking cookies, and no third-party scripts.

8. Changes

This policy may be updated. The date at the top of the page shows the latest version.