Privacy Policy
Effective .
1. Controller
, , UID , is the controller for personal data processed in MultiLoad (). Privacy contact: .
This policy is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data we process, purposes and legal bases
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, password hash, country, interface language | Account creation, sign-in, email verification, choosing applicable terms and payment provider | Contract, Art. 6(1)(b) |
| One-time sign-in codes, authenticator secret (encrypted), trusted-device marker | Account security (two-factor authentication) | Contract; legitimate interest in security, Art. 6(1)(f) |
| Connected social accounts: platform ID, handle, display name, avatar; access tokens (encrypted) | Publishing videos to your accounts at your request | Contract |
| Only if you turn on “Channel stories”: your Telegram phone number (used to sign in, not kept afterwards), the Telegram login session (encrypted), the ID and title of the chosen channel, and the date of your consent. Your Telegram cloud password is never stored | Posting stories to your Telegram channel on your behalf at your request. No other use of the account is made, including your chats | Consent, which you can withdraw at any time in your account or in Telegram (Settings → Devices); the session is deleted immediately |
| Uploaded videos, captions, titles, links to published posts, publishing status | Publishing and showing your history | Contract |
| Plan, billing period, payment history (amount, date), card brand and last 4 digits, Stripe customer and subscription IDs | Billing, renewals, accounting | Contract; legal obligation (bookkeeping), Art. 6(1)(c) |
| IP address and server logs | Security, brute-force protection, troubleshooting | Legitimate interest |
We do not sell personal data, do not use it for advertising and do not make decisions with legal effects based solely on automated processing. Full card details are entered on Stripe's page and never reach us.
3. Retention
| Data | Retention |
|---|---|
| Uploaded videos | Up to 48 hours after publishing completes; unpublished uploads 7 days |
| One-time codes | 10 minutes |
| Account data, connected accounts, publishing history | Until you delete your account |
| Payment records | 10 years (Swiss bookkeeping obligations, Art. 958f CO) |
| Server logs | 30 days |
4. Recipients and international transfers
| Recipient | Data | Purpose | Location |
|---|---|---|---|
| Hetzner Online GmbH | All Service data (hosting) | Server hosting | Germany (EU) |
| TONVI TECH SL (Upload-Post) | Profile ID, connected social accounts, videos and captions to publish | Publishing via platform APIs | Spain (EU) |
| Stripe Payments Europe, Ltd. and affiliates | Email, customer and subscription data, payment data | Payment processing and subscriptions | Ireland (EU); transfers to the US under Stripe's safeguards |
| Swizzonic (swizzonic.ch) | Your email address and the email containing your code | Sending verification and sign-in codes | Switzerland |
| Platforms you choose (Google/YouTube, Meta/Instagram, TikTok, X, LinkedIn, Bluesky, Telegram, etc.) | Video, caption, authorisation data | Publishing at your request | Per the platform |
Switzerland and the EU recognise each other as providing adequate data protection. Transfers to other countries rely on adequacy decisions or standard contractual clauses as applicable.
YouTube. MultiLoad uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's processing is governed by the Google Privacy Policy. You can revoke MultiLoad's access at any time via Google security settings; disconnecting the account in MultiLoad also removes it from our systems.
5. Browser storage
We do not use advertising or analytics cookies. The app stores in your browser's local storage: your sign-in token, a trusted-device marker (up to 30 days) and your language choice. These are strictly necessary for the Service and are removed when you sign out or clear your browser data.
6. Security
HTTPS encryption, bcrypt password hashing, encryption of social access tokens and 2FA secrets, two-factor authentication, sign-in rate limiting, key-only SSH access to servers and automatic deletion of videos after publishing.
7. Your rights
You have the right to access, rectify, erase, restrict or port your data, to object to processing based on legitimate interest, and to withdraw consent where processing is based on consent. Contact ; we reply within 30 days. You can disconnect social accounts and turn off auto-renewal in your profile yourself.
You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the EU/EEA, with your local supervisory authority.
8. Account and data deletion
To delete your account and all associated data, email from your account email. We delete it within 30 days, except payment records we must keep by law. Disconnecting a social account in MultiLoad deletes its stored tokens immediately.
9. Changes
We may update this policy. The current version is always published on this page; material changes are announced by email.