Privacy Policy — LMVI Conseil and TheDiffuseur
Last updated: September 13, 2026
1. Who we are
This Privacy Policy explains how LMVI Conseil (“we”, “us”, “our”) handles personal data when you visit https://lmvi-conseil.fr (the “Website”) or use TheDiffuseur (the “Service”), our web application for scheduling and publishing videos to TikTok and YouTube.
Data controller: LMVI Conseil — SARL, SIREN 949 417 620
Registered office: [address]
Privacy contact: jmh@lmvi.eu
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
2. Data we collect through TheDiffuseur
2.1. Your TheDiffuseur account
When you create or use a TheDiffuseur account, we may collect:
- your name and email address;
- login information (your password is stored only in hashed form);
- your settings and preferences.
2.2. Data from TikTok
When you click “Connect TikTok” and authorize TheDiffuseur through TikTok’s consent screen, we receive only the data covered by the permissions you grant.
This may include:
Basic profile information (user.info.basic)
Your open_id, display name and avatar.
We use this information to identify the TikTok account connected to TheDiffuseur and display the creator’s name and profile information on the publishing screen.
Creator posting information
Before publishing content, TheDiffuseur may retrieve information required by TikTok to determine the available publishing options, including:
- available privacy options;
- whether comments can be enabled;
- whether Duets can be enabled;
- whether Stitches can be enabled;
- the maximum video duration allowed.
Authentication tokens
We store the access and refresh tokens provided by TikTok. These tokens allow TheDiffuseur to perform authorized actions, including publishing content on your behalf.
Publication information
We receive publication identifiers and statuses returned by TikTok so that TheDiffuseur can determine whether a publication is pending, successful or has failed.
2.3. Data from Google / YouTube
TheDiffuseur uses YouTube API Services.
When you authorize TheDiffuseur through Google’s consent screen, we may receive:
Channel information (youtube.readonly)
This may include your channel ID, channel name and thumbnail.
We use this information to show you which YouTube channel is connected to TheDiffuseur.
Upload permission (youtube.upload)
This permission is used only to upload the videos that you choose to publish through TheDiffuseur.
Authentication tokens
We store the access and refresh tokens required to maintain the authorized connection with your Google/YouTube account.
Publication information
We receive video identifiers and upload statuses returned by YouTube so that TheDiffuseur can track the result of your publications.
2.4. Content you submit
When you prepare or schedule a publication, we process the information you provide, including:
- videos;
- titles;
- descriptions;
- publication dates and schedules;
- privacy settings;
- interaction settings;
- commercial content disclosures;
- other publication parameters supported by the relevant platform.
2.5. Technical data
For security, maintenance and troubleshooting purposes, we may collect technical information such as:
- IP address;
- date and time of connection;
- actions performed within the Service;
- technical errors;
- application and security logs.
2.6. Data we do not collect
We never ask for or store your TikTok or Google password.
We do not access your private messages, contact lists, your viewers’ personal data, or videos that you have not submitted through TheDiffuseur, except where specific information is technically required by an API feature that you have explicitly authorized.
3. How we use your data
We use the personal data described above only to:
- provide TheDiffuseur and its features;
- connect your TikTok and YouTube accounts;
- show you which account or channel you are publishing to;
- verify the publication options and constraints imposed by each platform;
- publish or schedule the content you request;
- keep you informed about the status of your publications;
- maintain the security of your connections;
- detect expired or invalid authentication tokens;
- prevent misuse, fraud and unauthorized access;
- troubleshoot technical problems;
- comply with our legal obligations.
We do not:
- sell or rent your personal data;
- use your personal data for advertising or profiling;
- use data obtained through TikTok or Google APIs to develop, improve or train generalized artificial intelligence or machine learning models.
4. Google API Services — Limited Use
TheDiffuseur’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:
In particular:
- Google user data is used only to provide the user-facing features described in this Privacy Policy;
- it is not transferred to third parties except where necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition subject to appropriate safeguards;
- it is not used for advertising;
- humans do not read Google user data unless you have given your explicit consent, access is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.
By connecting a YouTube account, you also agree to the YouTube Terms of Service:
Your use of Google and YouTube services is also subject to the Google Privacy Policy:
5. Legal bases for processing
Depending on the type of processing, we rely on the following legal bases under the GDPR:
Performance of a contract
To provide the Service you requested, including your TheDiffuseur account, connected accounts and publications.
Consent
When you choose to connect a TikTok or YouTube account and, where applicable, for optional cookies used on the Website. You may withdraw your consent at any time.
Legitimate interests
For security, technical logging, troubleshooting and fraud prevention.
Legal obligations
Where applicable law requires us to retain, process or disclose certain information.
6. Who we share data with
We share personal data only where necessary with:
TikTok and Google/YouTube
Data is exchanged with these platforms solely to authenticate your account, retrieve the information required for the Service and carry out the publications you request.
Their processing is governed by their respective privacy policies:
TikTok Privacy Policy:
https://www.tiktok.com/legal/privacy-policy-eea
Google Privacy Policy:
https://policies.google.com/privacy
Our technical service providers
We may use technical providers for services such as hosting and email delivery. Where these providers process personal data on our behalf, they act as processors under contract and are subject to appropriate confidentiality and data protection obligations.
Hosting provider: INFOMANIAK
Hosting location: SWIZZERLAND
Public authorities
We may disclose information when required to do so by applicable law, regulation, court order or a competent public authority.
We do not share your personal data with other parties for their own advertising or marketing purposes.
7. International data transfers
TheDiffuseur is hosted in [country / European Union].
TikTok, Google and some technical providers may process personal data outside the European Economic Area (EEA).
Where required by applicable data protection law, such transfers are subject to appropriate safeguards, which may include an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses, or another legally recognized transfer mechanism.
8. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
TikTok and YouTube access and refresh tokens
Kept until you disconnect the relevant account. The tokens are then deleted immediately from TheDiffuseur.
Profile and channel information
Names, avatars, channel information and platform identifiers are kept while the relevant account remains connected. They are deleted within 30 days after disconnection.
Videos uploaded for publication
Videos stored by TheDiffuseur for publication are deleted within 30 days after publication, or earlier if you delete them from the Service.
Publication history
Publication information such as titles, dates, statuses and platform identifiers is kept for 12 months.
Technical logs
Technical and security logs are kept for up to 12 months.
TheDiffuseur account data
Your account information is kept while your TheDiffuseur account remains active. After account closure, it is deleted within 30 days, except where applicable law requires us to retain certain information for a longer period.
9. How to disconnect your accounts and delete your data
You can revoke TheDiffuseur’s access to your connected accounts at any time.
From TheDiffuseur
Remove the relevant connected account. The associated access and refresh tokens stored by TheDiffuseur will be deleted immediately.
From TikTok
You can manage connected applications from:
Settings and privacy → Security and permissions → Manage app permissions.
From Google / YouTube
You can manage and revoke TheDiffuseur’s access from your Google Account:
Deleting your TheDiffuseur account
To request deletion of your TheDiffuseur account and associated personal data, contact:
jmh@lmvi.eu
We will process your request and delete the relevant data within 30 days, except for information that we are legally required to retain.
Revoking access directly through TikTok or Google prevents TheDiffuseur from accessing the relevant platform account but does not, by itself, necessarily delete your TheDiffuseur account.
10. Security
We use appropriate technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration or loss.
These measures include:
- encrypted connections using HTTPS/TLS;
- platform tokens and application secrets stored securely and not stored in plain text;
- restricted access to systems and data;
- access limited to authorized personnel;
- monitoring of technical errors and security events;
- regular review of connected accounts and authentication-token validity.
No Internet-based service can guarantee absolute security, but we take reasonable measures appropriate to the nature of the data we process.
11. Your rights
Under the GDPR, depending on the circumstances, you have the right to:
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- restrict certain processing;
- object to certain processing;
- receive certain personal data in a portable format;
- withdraw your consent at any time where processing is based on consent.
You may also provide instructions concerning the handling of your personal data after your death, in accordance with applicable French law.
To exercise your rights, contact:
jmh@lmvi.eu
We may ask you to provide information necessary to verify your identity.
We will respond within the time limits required by applicable data protection law, normally within one month of receiving a valid request.
If you believe that your data protection rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL):
12. Website visitors
This section applies when you visit:
Comments and contact forms
When you submit a comment or contact form, we may collect the information you provide, such as:
- your name;
- email address;
- message;
- IP address;
- browser user agent.
Technical information may also be processed to help detect spam, fraud and abuse.
Comments and contact requests are retained only for as long as necessary for their purpose and, where applicable, for a maximum of 3 years after the last relevant interaction, unless a longer retention period is required by law.
Cookies and audience measurement
The Website may use cookies and similar technologies, including audience-measurement tools.
Where required by applicable law, non-essential cookies are used only after obtaining your consent.
For more information, see our Cookie Policy:
Embedded content
Pages on the Website may contain embedded content from third-party websites, such as videos, images or other external content.
Embedded content may behave in the same way as if you had visited the third-party website directly. These third parties may collect information, use cookies or other tracking technologies, subject to their own privacy policies.
13. Children
TheDiffuseur is not intended for persons under 18 years of age.
We do not knowingly collect personal data from minors through the Service.
If we become aware that personal data from a minor has been collected through TheDiffuseur contrary to this policy, we will take appropriate steps to delete it.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, particularly to reflect changes to TheDiffuseur, the APIs we use, our technical infrastructure, or applicable legal requirements.
The “Last updated” date at the top of this page indicates when this Privacy Policy was last revised.
If we make a material change affecting TheDiffuseur users, we may notify them through the Service or by email before the change takes effect, where appropriate.
15. Contact
For any question about this Privacy Policy, your personal data or the exercise of your rights, contact:
LMVI Conseil
SARL — SIREN 949 417 620
[address]
France
Email: jmh@lmvi.eu
Website: https://lmvi-conseil.fr