Privacy policy
Update: .
Controller and purpose of the service
KLINGLER BROTHERS, company established in France, publishes Lola : Social Feed. For any questions regarding your data, contact info@frenchmotoshop.com.
Lola : Social Feed allows merchants Shopify to view the profiles and posts of accounts Instagram, Facebook, YouTube and TikTok that they choose to connect. The widget offers a grid or carousel, with a number of visible posts adjustable from 1 to 10 and a post consultation window. The merchant chooses the accounts, the content displayed and the presentation settings of his store.
Data used
- Shopify store and access: domain and store ID, sessions, permissions and widget settings. Depending on the information returned by Shopify, a session may also include the username, name and email address of the administrator user.
- Social accounts: account or Page identifiers, name and username, profile photo, profile link and number of followers when available.
- Posts: identifiers, titles or captions, dates, original links, thumbnails, images, videos and carousel elements available from the network. The number of posts retrieved may differ from the number displayed on the screen.
- Connection and operation: authorization tokens, expiration dates, temporary connection states, refresh dates, errors and counters used to limit attempts and calls to external services.
- Support: contact details and information that you provide to us, in particular captures or videos useful for resolving a problem. Avoid including passwords, tokens or data unrelated to your request.
Instagram uses the official login of a professional account. Facebook uses the Pages that the user authorizes and selects. TikTok uses the holder's permission to read their profile, available counters and public videos. YouTube uses public information from the chosen channel. The old Instagram per nickname mode, which used Apify, is disabled on current hosting.
Lola : Social Feed does not ask for permission to publish for you, read your private messages or manage your advertisements. The application does not use orders or customer files Shopify to produce flows and does not create visitor profiles.
Purposes and basis of processing
The data is used to connect authorized accounts, update profiles and posts, display the widget, save settings, provide support and protect the service against errors and abuse. The processing necessary for the requested service is based on its execution; those relating to the security and management of professional exchanges are based on our legitimate interest in providing and protecting this service. Permissions granted to social networks can be withdrawn at any time.
We do not sell the data collected by Lola : Social Feed and do not use it for advertising targeting.
Public display, media and cookies
The selected profiles and posts become visible to visitors when the merchant displays the widget on his store. Access tokens and server keys are not passed to the public widget. Connections to the application and networks use session mechanisms and technical security cookies.
Loading an image, video or embedded player, as well as opening a link to a post, may communicate the IP address, browser information and page viewed to the service providing the content. External readers may use their own cookies or similar technologies. The practices of Meta for Facebook and Instagram, of Google for YouTube and TikTok apply to these services. The merchant must take these loadings into account in the information and confidentiality choices offered to visitors to his store.
Service providers and other recipients
In addition to the social networks necessary for connections and displaying content, the following services are involved:
- Render Services, Inc.: hosting of the application, updates and the database.
- Shopify: access to the application, sessions, storage of widget settings and transmission of feed data to the store.
- GitHub: hosting of the private repository and development documentation. Examples of profiles and counters from testing may appear in this documentation.
- OpenAI — ChatGPT and Codex: assistance with development and problem solving. Captures, videos or examples of data communicated for this work can be analyzed by these tools. This use concerns development and assistance; the application does not automatically transmit store feeds to them.
Information transmitted for development or assistance must be limited to what is useful for this work. The data communicated to these services is also processed according to their applicable conditions and policies.
Hosting, transfers and protection
The application server, update service and database are hosted at Render in the Frankfurt region, Germany. The data and connections of each store are attached to this store. Tokens Instagram, Facebook and TikTok are encrypted before storing on the server side.
This accommodation in Germany does not mean that all processing remains within the European Economic Area. Providers and social networks may process data in other countries, including in the United States, including for infrastructure, security or support purposes. Render states in particular in its data processing agreement that its main processing operations take place in the United States.
Depending on the service provider and the transfer, their documents describe the use of adequacy decisions or standard contractual clauses, as well as the associated guarantees. Consult the information of Render, of Shopify, of GitHub andOpenAI. You can contact us to obtain details on the recipients and the guarantees applicable to your data.
Retention and deletion
- Profiles, posts and tokens: the latest results of a successful update replace the previous ones in the active database. The data is retained as long as the connection is maintained, then deleted from that database when you disconnect the network in Lola : Social Feed.
- Temporary authorization: connection states expire after ten minutes; they are consumed during the journey or cleaned by the application treatments.
- Security counters: certain attempt counters remain associated with the store after a disconnection to prevent circumvention of the limits. They are deleted along with the store data upon uninstallation.
- Uninstallation: upon receipt and validation of the notification Shopify of uninstallation or deletion of the store, the application deletes the flows, tokens, sessions and associated counters in its active database. The settings hosted at Shopify also relate to the operation of this platform.
- Assistance, backups and development copies: the elements useful for monitoring a request, for a diagnosis or for a restoration can remain separately from the active database. Their deletion depends on their medium and the retention rules of the service provider; Development copies may require manual intervention. Disconnecting does not automatically erase them. Contact us to request their deletion and find out the applicable terms and conditions.
Removing an authorization in a network settings can also interrupt access. Valid takedown or deletion notifications received from Meta and TikTok result in the corresponding removal being processed. Lola : Social Feed does not delete original social media posts.
Your rights and your requests
To remove a stream, open the Lola : Social Feed dashboard, then use 'Manage', 'Disconnect' and 'Confirm Disconnect' for the affected network. You can also uninstall the application from Shopify.
Depending on the applicable regulations, you can request access to your data, their rectification or erasure, limitation of processing, portability of the data concerned, or object to processing based on legitimate interest. To exercise these rights or request deletion of data received from Facebook or Instagram, write to info@frenchmotoshop.com by specifying your store and the account or Page concerned, without attaching a password or token. We may request the information necessary to verify your link to this data and protect its owner.
We respond to requests within the time limits provided for by the applicable regulations, in principle within one month for a request under the GDPR, with extensions authorized when necessary. You can also send a complaint to the CNIL or the competent data protection authority.
Evolution of this policy
This page describes how Lola : Social Feed currently works. It is updated when functionalities, providers or treatments evolve; the date of the last update appears at the top of the page.