Privacy policy

1. Controller and contact

Alltocast is a brand of TEAMNET, a limited liability company (SARL) under Tunisian law, registered with the Tunisian National Business Register (RNE) under unique identifier 1598561E, with its registered office at 1st floor, Soukra Palace, avenue du Maghreb Arabe, 2036 La Soukra, Ariana, Tunisia. TEAMNET is the controller of the processing described on this page, for the Alltocast website and application.

Contact for any question about your data: contact@alltocast.com. Postal address: TEAMNET, 1st floor, Soukra Palace, avenue du Maghreb Arabe, 2036 La Soukra, Ariana, Tunisia.

2. Data we process

• Account: name, email address, type of space (creator or advertiser), organization and access rights.
• Content: videos, audio tracks, transcripts, thumbnails, clips, titles, descriptions and publishing information.
• Connected social accounts: account or Page identifiers, name, profile picture, granted permissions and access tokens (encrypted).
• Statistics: results of your posts and, if you allow it, your audience breakdown (age, gender, country, cities) provided by the network.
• Declared audience: the screenshots of your statistics that you choose to upload, and the percentages we read from them.
• Smart Opportunities profile: rates, accepted or refused categories, exclusivities, favorites and exclusions (private), payment details (creators).
• Advertiser profile: company, sector, shops, products and services, range.
• Deals: offers, briefs, previews, messages exchanged, promo codes and clicks on tracking links, declared payments, ratings.
• Directories: public information about creators and companies (see section 6).

Right after sign-up: preparing your space

To save you from typing everything again, right after sign-up we look for what your name (as a creator or brand) and, for a business email address, the domain of your address allow us to find publicly: your website, your public accounts, the life moments you announced publicly and the profiles in our directories. This search is done with the help of artificial intelligence. What it finds only fills information that is still empty in your space, is labeled “AI” and can be corrected or removed; a network account is only attached to you if you confirm it.

3. How we use data

• Run your account and your access.
• Prepare, transcribe and publish your content; show its results.
• Suggest relevant matches between brands and creators (see section 5).
• Follow a deal from start to finish: check that a post is online, count clicks, send payment reminders.
• Send you messages about your account and your deals.

We do not sell your data. We do not use it to target ads at you.

4. Social network accounts

You connect an account through the network’s authorization page. You never give us your password. You can disconnect an account at any time in “Networks” and remove the authorization in the network’s settings.

Verifying an account without linking it: you can also prove that an account is yours without connecting anything, with a 4-digit code. We then read your bio publicly (or your YouTube channel description), or the comments of a video on Alltocast’s YouTube channel, to find that code. We only keep the proof: the network, the account link and the date. You can remove the code or delete your comment right afterwards.

Publishing a deal: when you publish the content of a deal, we check that it is published on the account you gave, and after the offer (on YouTube, by publicly reading the video’s channel and date; on other networks, the Alltocast team looks at it). This publication also proves that the account is yours: we keep the same proof (network, account link, date).

Verifying a company: a company proves it is who it says with a confirmed email address on its website’s domain, with a 4-digit code put for a few minutes in the bio of its official Instagram or TikTok page (the one on its listing in our directory), which we read publicly, or with an adviser who calls its official number. We only keep the method used and the date.

What we read, network by network

• YouTube: channel information, videos and their statistics; with your consent, your viewers’ breakdown (age, gender, country).
• Instagram (professional account): profile, posts and their statistics; with your consent, your followers’ breakdown (age, gender, country, cities).
• Facebook (Page): list of the Pages you manage, posts of the chosen Page, statistics; followers’ countries and cities; posting to the Page when you ask for it.
• TikTok: profile, number of followers, likes and videos, public videos and their views; for a TikTok Business account, with your consent, your followers’ breakdown.

These networks also process your data under their own rules: Google (YouTube), Meta (Facebook, Instagram) and TikTok. For YouTube, you can also remove access from the Google permissions page.

YouTube and Google data

Alltocast uses YouTube API Services. By connecting your YouTube channel, you agree to the YouTube Terms of Service; Google processes your data under the Google Privacy Policy.

Alltocast’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use this information only for the features you see in Alltocast; we do not sell it, do not use it for advertising and do not use it to train artificial intelligence models.

5. Smart Opportunities

Smart Opportunities computes how well a creator’s content and audience match a brand’s product and target.

• Your audience is only used with your consent (“Use my audience to suggest advertisers”). If you withdraw this consent, we stop using it immediately: advertisers then find you based on your content only.
• By default, brands do not see your detailed percentages: they see a match score and where the data comes from (“Verified” by the network or “Declared” by you). If you turn on “Show my detailed statistics to advertisers”, they also see the views, reach, saves and shares of your posts, and the age, gender and top countries of your audience, read with your connected accounts. You can turn this option off at any time.
• We never infer sensitive data (health, religion, opinions), whether with artificial intelligence or otherwise.
• Life moments: to suggest brands at the right time, we take into account the moments you declare in your profile, and moments publicly announced on your accounts (wedding, birth, new home…), which you can confirm or remove. A pregnancy, the “new mum” period or a tahour (circumcision) are never guessed: they are only used if you declare them yourself, with your express consent, and you can remove them at any time.
• Payment details: your bank account number (RIB) is encrypted; together with the account holder’s name and the payment methods you accept, it is only shown to a brand you have a deal with, when it pays you. No money goes through Alltocast.
• Messages and ratings: a conversation thread is attached to each deal; we keep it with the deal, in case of disagreement, as long as both accounts exist (deleting an account erases its deals). Ratings are revealed once both parties have rated, or 14 days after payment.
• Favorites and exclusions: they stay private; the other party is never told.

6. Directories and outreach

To present opportunities to creators and companies who have not signed up yet, Alltocast keeps two directories built from public information: public pages and websites, official network interfaces (for example the public figures of Instagram professional accounts), and research by our team, assisted by artificial intelligence. Information found by artificial intelligence is labeled as such until it is verified.

• We do not read any private data of people who have not connected their account. A profile may mention a life moment the person announced publicly (wedding, birth…), never sensitive data.
• We contact people sparingly — at most one message and two reminders — always written or reviewed by our team.
• You can ask at any time not to be contacted: with the “Stop contacting me” link in our messages (taken into account immediately), by replying STOP or by email at contact@alltocast.com (taken into account as soon as our team reads it). Your address or number then joins our list of people not to contact. To remove your profile, use the “Stop contacting me and remove my profile” link on your profile page, or write to us: it disappears from the directories, and on request we also erase its information.

7. Recipients and service providers

• Authorized users of your organization; the other party to a deal, for the information that deal requires.
• Social networks you publish to.
• Hosting and email sending: OVHcloud.
• Cloudflare (Turnstile), on the email forms (sign-up, sign-in, forgotten password), to check that you are not a robot: it receives your IP address and technical information about your browser; Google Fonts, for the website’s fonts.
• Artificial intelligence: OpenAI and Anthropic, for transcription, text suggestions, content classification, reading the statistics screenshots you upload and searching public information for the directories and to prepare your space after sign-up; transcription and content comparison can also be done by services hosted by Alltocast.

8. Retention and security

Social account tokens and payment details are encrypted. Access to data is limited according to the permissions of each user and their organization.

An audience declared by screenshot is valid for 30 days; after that, it is no longer used until you update it.

9. Deleting your data

You can delete your data at any time:

1. Disconnect a network: in the app, “Networks”, “Remove access” button. Alltocast immediately revokes its access with the network and deletes everything that came from that account (account name and identifier, links of your posts on the network, statistics, comments, audience).
2. Remove access from the network’s settings: Facebook and Instagram (“Apps and websites”), TikTok (“Security › Manage apps”), Google (permissions page).
3. Delete your account and all your data: in the app, “Profile” › “Delete my account”. Deletion is immediate and permanent, and Alltocast’s access to your networks is removed. If you can no longer sign in, email contact@alltocast.com from your account’s address with the subject “Data deletion request”.
4. Remove a directory profile: “Stop contacting me and remove my profile” link, or by email.

Content already published on a network stays on that network: delete it from the network itself. Step-by-step details are on the Data deletion page.

Timeframes: immediately for account deletion, disconnection or a removal notified by Facebook, Instagram or TikTok; access removed from Google or refused by a network is detected within one day and the data is deleted 7 days later unless the account is reconnected. YouTube data is never kept more than 30 days without being refreshed from YouTube.

10. Your rights

You can ask to access, correct or erase your data, object to a processing and withdraw your consent when a processing relies on it. Write to contact@alltocast.com.

In Tunisia, personal data protection is governed by Organic Law No. 2004-63 of July 27, 2004; you can contact the National Authority for the Protection of Personal Data (INPDP). If you live in the European Union, you can also contact the authority of your country, for example the CNIL in France.

11. Browsing data

We do not use any advertising cookie or audience measurement tool. What is stored in your browser is detailed on the Cookies page.