Privacy Policy
This Privacy Policy explains how DigitalVisionAir S.r.l. ("LookVay", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use the LookVay platform and its products, including FeedVay. It also explains, in detail, how we handle data accessed through social media accounts you choose to connect.
Controller: DigitalVisionAir S.r.l., Rome, Italy. For any privacy request, contact info@lookvay.com.
- Scope & who we are
- Information we collect
- Connected social media accounts
- How we use information
- Legal bases (GDPR)
- How we share information
- AI processing & sub-processors
- Data retention
- Security
- Your rights
- Data deletion & disconnection
- Children
- International transfers
- Changes to this policy
- Contact
1. Scope & who we are
LookVay is a multi-product platform operated by DigitalVisionAir S.r.l., a company registered in Rome, Italy. This policy applies to all LookVay products and services, including FeedVay (our AI-powered social content product), and to the websites, dashboards, and APIs through which they are delivered.
When you use LookVay, DigitalVisionAir S.r.l. acts as the data controller for the personal data described here, except where we act as a processor on behalf of a business customer, in which case that customer is the controller.
2. Information we collect
We collect only what we need to provide and operate the service:
Account information
- Email address, name, and password (stored hashed) when you register.
- Billing and subscription details processed through our payment provider.
- Configuration you create: boards, pages, widgets, and their settings.
Content you provide
- Photos, text prompts, captions, and other inputs you upload to generate content.
- Media that FeedVay generates on your behalf at your direction.
Technical information
- Log data such as IP address, browser type, and timestamps, used for security, abuse prevention, and diagnostics.
- Limited cookies strictly necessary to keep you logged in and operate the dashboard.
3. Connected social media accounts
FeedVay lets you connect one or more social media accounts so that content you approve can be published to them on your behalf. Connecting an account is always optional and is initiated by you through a secure OAuth flow run by the platform itself. We never see or store your social media password.
What we store today: for each connected account we store only the OAuth access token (and, where applicable, a refresh token) needed to publish on your behalf, plus basic profile identifiers used to show you which account is connected — typically the account or page name, a profile or channel identifier, and a profile picture URL. We do not currently collect or store your posts' performance analytics, your follower lists, your private messages, or content you did not create through FeedVay.
The specific data accessed depends on the platform you connect and the permissions you grant during the OAuth consent screen:
Meta — Instagram & Facebook
When you connect an Instagram Business account or a Facebook Page, we request only the permissions required to publish content you approve and to identify the connected account. We access your Instagram or Page profile information (such as account/page name and profile picture) and the ability to publish content. We store the resulting access token and the basic profile identifiers described above. We use this data solely to publish content at your direction and to display which account is connected. We do not use Meta Platform Data for advertising, and we do not sell it. Our use of information received from the Meta APIs adheres to the Meta Platform Terms and Developer Policies.
Google — YouTube
When you connect a YouTube channel, we request access to upload videos to your channel and to read basic channel information (such as the channel name) so we can confirm which channel is connected. We store the resulting access and refresh tokens and the basic channel identifiers described above.
Limited Use disclosure: LookVay's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to provide and improve the user-facing publishing feature you requested; we do not transfer it to third parties except as needed to provide the service, to comply with law, or as part of a merger; we do not use it for advertising; and no humans read this data except as necessary for security, to comply with law, or with your explicit consent.
TikTok
When you connect a TikTok account, we request access to query your creator information (required by TikTok to show you the correct privacy options before posting) and to publish video content you approve. We store the resulting access and refresh tokens and basic account identifiers. We use this data solely to publish content at your direction and to honor the privacy and interaction settings you select. Our handling of TikTok data complies with the TikTok Developer Terms of Service and applicable TikTok policies.
When you connect a LinkedIn profile or organization page, we request the permissions needed to share posts on your behalf and to read your basic profile (name and picture) to confirm the connected identity. We store the resulting access token and basic profile identifiers, used solely to publish content at your direction.
You can disconnect any connected account at any time from within FeedVay. Disconnecting deletes the stored tokens and profile identifiers for that account from our systems. See Data deletion below.
4. How we use information
- To provide, operate, and maintain the platform and its products.
- To generate content you request and, where you connect a social account and approve a post, to publish that content on your behalf.
- To authenticate you, secure your account, and prevent abuse.
- To communicate with you about your account, including approval and confirmation emails for social posts.
- To comply with legal obligations.
We do not sell your personal data, and we do not use data obtained from connected social accounts for advertising or for any purpose other than delivering the features you requested.
5. Legal bases (GDPR)
Where the EU General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to provide the service you signed up for), consent (for connecting optional social accounts, which you may withdraw at any time), legitimate interests (security, abuse prevention, and service improvement, balanced against your rights), and legal obligation (where we must retain or disclose data by law).
6. How we share information
We share information only in these limited circumstances:
- Social platforms you connect: when you approve a post, the content is sent to the relevant platform's API to publish it.
- Service providers / sub-processors: infrastructure, email delivery, and the AI providers listed below, strictly to operate the service.
- Legal: where required by law, regulation, or valid legal process.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with continued protection under this policy.
We never sell personal data or social account data to third parties.
7. AI processing & sub-processors
To generate text, images, and video, the content inputs you provide may be processed by third-party AI providers acting as our sub-processors, which may include OpenAI, Anthropic, Google, xAI, fal.ai, and Black Forest Labs. We send these providers only the inputs necessary to fulfil your request. We host the platform on infrastructure located in the European Union (Amsterdam) and use a managed database provider for storage. A current list of sub-processors is available on request at info@lookvay.com.
8. Data retention
We keep account and configuration data for as long as your account is active. Social account tokens and identifiers are kept only while the account remains connected, and are deleted when you disconnect or when your account is closed. Generated content is retained according to your product settings. Logs are kept for a limited period for security and diagnostics, then deleted or anonymized.
9. Security
We protect data with encryption in transit (HTTPS/TLS), hashed passwords, signed OAuth state to prevent CSRF, access controls, and isolation of each customer's data. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard practices.
10. Your rights
Subject to applicable law, you may have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact info@lookvay.com. EU residents may also lodge a complaint with their local data protection authority.
11. Data deletion & disconnection
You are always in control of connected accounts and your data:
- Disconnect a social account: open FeedVay, go to the Social settings of the relevant widget, and click Disconnect for that platform. This immediately removes the stored access token and profile identifiers for that account.
- Delete your account and data: email info@lookvay.com from your registered address, or use the in-dashboard account deletion option where available. We will delete your personal data and all connected-account tokens, except where we must retain limited records to comply with law.
You can also revoke LookVay's access directly from each platform's own settings (for example, Meta Business Settings, your Google Account permissions page, TikTok's connected-apps settings, or LinkedIn's permitted-services page).
12. Children
LookVay is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
13. International transfers
We process data primarily within the European Union. Where data is transferred to a sub-processor outside the EU, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
14. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
15. Contact
DigitalVisionAir S.r.l.
Rome, Italy
Privacy & general requests: info@lookvay.com
© 2026 DigitalVisionAir · Terms of Service