Privacy Policy
1. Who we are
This policy applies to the website lowkeybakery.ch, the Lowkey Bakery customer app (https://app.lowkeybakery.ch) and our services. The controller is Fabio Dias Marques, Lowkey Bakery, Köniztalstrasse 8, 3098 Köniz, Switzerland ("we"). Contact: [email protected]. We process personal data under the Swiss Federal Act on Data Protection (nDSG) and, where it applies, the GDPR.
2. What this website does
The public website sets no tracking or advertising cookies and loads no third party scripts or fonts. It stores only your language choice in your browser, if your browser allows it. Our hosting provider may keep standard server logs (IP address, time, requested page) for security and operations.
3. Data we process for our service
- Contact and contract data: name, company, email, and the content of your enquiries and orders.
- Project material: briefs, footage, finished videos, captions and schedules you give us or we produce for you.
- Connected account data: if you book publishing and connect a social account, the platform gives us your account identifier, display name, profile picture and access tokens.
We use this data to deliver the service you ordered, to communicate with you, to invoice, and to keep the service secure. The legal basis is performing our contract with you, our legitimate interest in running the service securely, and your consent where we ask for it.
4. TikTok
If you connect a TikTok account, we use TikTok's Content Posting API with TikTok Login. You authorise this on TikTok's own login screen. We never receive your TikTok password.
- Permissions:
user.info.basic(account identifier, display name, avatar),video.uploadandvideo.publish(to send and post a video you approved). - What we store: your TikTok account identifier, display name, avatar, the access and refresh tokens, the videos and captions you approved, and the publishing status of each post.
- What we do with it: publish the videos you approved to your TikTok account, with the privacy, comment, duet, stitch and commercial content settings you choose. We do not use TikTok data for advertising, profiling or analytics of other people, and we do not sell or share it.
- Revoking access: disconnect the account in our app, or in TikTok under Settings, Security and permissions, Manage app permissions. We then delete the tokens. To have the remaining data erased, email us.
TikTok processes your data under its own privacy policy as an independent controller.
5. Who receives data
We share data only as needed: with our hosting provider (servers located in Germany), with the social platforms you connect (TikTok, Meta, LinkedIn, Google/YouTube, X) when we publish for you, and with service providers for email and accounting. Some recipients, such as the platforms, may process data outside Switzerland and the EU, including in the United States. Where required we rely on adequacy decisions or standard contractual clauses.
6. Retention
Connection tokens are deleted when you disconnect an account or end the service. Project material and account data are deleted within 30 days after the end of the contract or on your request, unless the law requires us to keep it (for example, accounting records for ten years).
7. Your rights
You can ask for access to your data, correction, deletion, restriction, a copy of your data, and you can withdraw consent at any time. Email [email protected]. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your supervisory authority.
8. Changes
We will update this policy when our service changes. The date at the top shows the current version.