QNET Social StudioSocial Studio privacy notice
Last updated 1 October 2026
This notice supplements the QNET Privacy Policy and applies only to QNET Social Studio ("Social Studio"). Where it says nothing different, the QNET Privacy Policy applies. It explains how Social Studio handles data. Social Studio is an internal tool operated by QNET for its own employees. It is used to measure the performance of QNET's own official social media accounts and, in later phases, to publish to them and answer comments and messages on them.
Who is responsible
The data controller is QNET Ltd, Units G-L, 21/F, MG Tower, 133 Hoi Bun Road, Kwun Tong, Kowloon East, Hong Kong. Contact: privacy@qnet.net. Security issues: security@qnet.net.
Who uses Social Studio
Only QNET employees and contractors, signed in with their QNET company account. Access is limited by role and by region. We do not sell, rent, license or share data with advertisers, data brokers or any other third party.
What data we collect
When an authorised QNET administrator connects one of QNET's accounts, Social Studio receives, through that platform's official API:
- the account's public profile: ID, name, handle, profile picture and follower count;
- QNET's own posts: ID, text, media link, publication time and link to the post;
- aggregate statistics for the account and its posts, such as views, reach, reactions, comments, shares and follower growth;
- an access token that lets Social Studio read this data on QNET's behalf.
The current version does not collect the identity of people who comment on, message or follow QNET's accounts. If the planned inbox is enabled, comments and messages sent to QNET's accounts will be processed to let our team reply, and this policy will be updated before that happens.
About Social Studio users, we keep name, company email, role, region and an audit log of actions (sign-ins, connections, exports, deletions).
How we use it
Only to report on and manage QNET's own social media presence: dashboards, monthly reports and performance targets for QNET's teams. We do not use platform data for advertising, profiling individuals or any purpose unrelated to managing QNET's own accounts.
Where data is stored and who processes it
- Data is stored with Cloudflare (Cloudflare D1 and R2) in the European Union. Requests are processed on Cloudflare's global network.
- Sign-in is handled by Microsoft Entra ID (QNET's company directory).
- All connections use encrypted HTTPS. Stored data is encrypted at rest (AES-256). Access tokens are additionally encrypted by Social Studio, kept on the server only and never sent to a browser.
How long we keep data
| Data | Kept for |
|---|---|
| Facebook, Instagram, Threads statistics | While the account stays connected, up to 36 months. Deleted within 30 days of disconnection or a deletion request. |
| YouTube Analytics data | While authorisation is active. Other YouTube data (titles, thumbnails, channel details) is refreshed or deleted at least every 30 days. Everything is deleted within 7 days of revoking access in Social Studio, and within 30 days of revoking it in Google settings. |
| LinkedIn page statistics | 12 months. LinkedIn post content: 6 months. Member data: not stored. |
| TikTok, Pinterest, Telegram statistics | While the account stays connected. Deleted within 30 days of disconnection or a deletion request. |
| X statistics | While the account stays connected. Content deleted or changed on X is deleted or updated within 24 hours. |
| Access tokens | Deleted, and revoked where the platform allows, as soon as an account is disconnected. |
| Social Studio audit log | 36 months. |
Deleting data
Data for a connected account is deleted when the account is disconnected in Social Studio, when access is removed from the platform's own settings, or on request. See data deletion for how to ask and how long it takes.
Google and YouTube
Social Studio uses YouTube API Services. The Google Privacy Policy applies to data Google processes. You can revoke Social Studio's access to a YouTube channel at any time at security.google.com/settings/security/permissions.
Your rights
Depending on where you are, you may have the right to access, correct or delete personal data about you, or to object to its use. Write to privacy@qnet.net. We answer within 30 days.
Changes
We update this policy before Social Studio starts collecting new kinds of data. The date at the top shows the latest version.