Home Privacy Policy

Privacy Policy

Effective date: 18 July 2026
This Policy explains how personal data is processed when you use https://potik.live (the “Site”).
Data controller: Individual Entrepreneur VASYLIEV VIKTOR SERHIIOVYCH (Ukrainian: ФОП ВАСИЛЬЄВ ВІКТОР СЕРГІЙОВИЧ), Ukrainian taxpayer number 3574508553, registered and actual residence: Odesa, Ukraine, privacy email: support@potik.live (“Potik”, “we”).

1. Data we process

Depending on the features used, we may process:
  • account data: name or nickname, email, phone number and authentication identifiers;
  • Order and recipient data: UID, login, server, region, platform, product, amount, time and status;
  • payment metadata: payment identifier and status, amount, currency, masked card number or token;
  • agency application and participation data: application status, creator profile, linked channels and accounts, their identifiers, topics, language, schedule, audience and available statistics;
  • creator cooperation data: communications, participation in campaigns, events and tournaments, and contractual, payment and tax details where provided;
  • support requests, reviews and related files;
  • technical data: IP address, device and browser type, language, security logs, and action dates and times;
  • cookie preferences, consent records and marketing choices.
Potik does not receive or store the full payment card number, expiry date or CVV/CVC. The payment provider processes this data.

2. Connected platforms and OAuth

Potik uses YouTube/Google, Twitch and TikTok APIs and OAuth services. Connection is optional: we receive data only after the User selects a platform, sees the requested permissions on that platform’s consent screen and approves them. Refusing or withdrawing access does not restrict Potik features that do not require this data.
Depending on the connected platform, Potik may receive:
  • YouTube/Google: channel ID and title, name or nickname, email address, avatar, channel description, subscriber, view and video counts, and available channel analytics, including views, watch time, average view duration, subscriber changes, likes, comments and shares. Potik uses OpenID, basic Google profile and email permissions, YouTube read access and YouTube Analytics read access;
  • Twitch: ID, login, display name, email address, avatar, channel data, follower count and available stream information. Potik uses the user:read:email and moderator:read:followers permissions;
  • TikTok: ID, display name, username, avatar, profile description, verification status, public profile statistics, and the list and metrics of public videos. Depending on the selected feature, Potik may request the user.info.basic, user.info.profile, user.info.stats and video.list permissions.
Potik uses this data to sign the User in and link accounts, display a creator profile, synchronise statistics, review agency applications and organise agreed cooperation. Potik does not publish, modify or delete content on a connected platform and does not sell data received through platform APIs. Access is limited to authorised personnel and technical providers to the extent necessary to operate Potik.
Access and refresh tokens are stored encrypted on the server and used only for requests authorised by the User. When a platform is disconnected, Potik stops synchronisation and deletes the stored tokens. When an account is deleted, Potik immediately deletes all stored OAuth tokens and permissions and sends the revocation request supported by the platform. A minimal record needed to restore an account deleted by mistake may be retained for up to 30 days; it does not contain OAuth tokens.
Access can also be revoked directly in the platform settings:
Potik’s use of YouTube API Services is governed by the YouTube Terms of Service: https://www.youtube.com/t/terms. Google’s processing is governed by the Google Privacy Policy: https://policies.google.com/privacy.
We process data to:
  • create and protect accounts;
  • conclude, pay for, perform and support Orders;
  • send necessary data to Suppliers and platforms;
  • review agency applications, maintain creator profiles, analyse channels, and organise cooperation, campaigns, events, tournaments and payouts;
  • prevent fraud, abuse and cyberattacks;
  • provide support, refunds, claims handling and dispute resolution;
  • meet accounting, tax and other legal obligations;
  • analyse and improve the Site where the required consent has been given;
  • send marketing messages based on consent or another lawful basis with an opt-out.
The legal bases are performance of a contract or pre-contract steps, compliance with a legal obligation, consent, and Potik’s legitimate interests in security, fraud prevention, service operation and defence of rights. Where legitimate interests apply, we consider the User’s rights and reasonable expectations.

4. Required data

Data marked as required is necessary for the relevant feature, Order or agency application. Without it, we may be unable to create an account, accept payment, supply a product, review an application or handle a request.

5. Recipients

Data may be shared to the minimum necessary extent with:
  • banks, payment institutions and payment aggregators;
  • Digital Product Suppliers and third-party platforms;
  • streaming and social platforms, advertisers, brands and partners involved in cooperation agreed with the creator;
  • hosting, security, authentication, analytics, communication and support providers;
  • accountants, auditors and legal advisers bound by confidentiality;
  • public authorities, courts or law enforcement where required by law.
We do not sell personal data.

6. International transfers

Suppliers and technical providers may be outside Ukraine or the User’s country. Transfers are made where necessary to perform an Order, based on consent or another lawful basis, and subject to legally required safeguards.
Where the GDPR applies, transfers outside the European Economic Area rely on an adequacy decision, standard contractual clauses or another mechanism permitted by Articles 44–49 GDPR. Information about the relevant mechanism may be requested through the privacy email.

7. Retention

We retain data for the following periods unless the law, an audit or an unresolved dispute requires longer retention:
  • account data — until account deletion; active data is then deleted within 30 days and backup copies within 90 days;
  • connected-platform OAuth tokens — until the platform is disconnected or the account is deleted; they are then deleted immediately and Potik sends the revocation request supported by the platform;
  • Order, payment, refund and settlement records — for 5 years from the later of the relevant transaction or submission of the related tax return;
  • support communications, claims and performance evidence — for 3 years after the request is closed or the Order is performed;
  • agency applications that do not result in cooperation — for 12 months after the application decision;
  • data relating to active creator cooperation — during the cooperation and for 5 years after it ends;
  • security and technical logs — for 12 months, and records relating to a confirmed incident for 3 years after the incident is closed;
  • marketing data — until consent is withdrawn or an objection is made; a minimal suppression record may be retained to prevent marketing from resuming by mistake;
  • cookie data — for the periods stated in the cookie settings and Cookie Policy.
After the relevant period, data is deleted or anonymised. Where continued retention is required by law, access is restricted until the mandatory period expires.

8. User rights

Subject to applicable law, the User may:
  • obtain information about the source, location and purpose of processing;
  • access and receive a copy of the data;
  • request correction, deletion or restriction;
  • object to processing;
  • withdraw consent without affecting earlier lawful processing;
  • receive portable data where the right applies;
  • complain to the Ukrainian Parliament Commissioner for Human Rights, a competent data protection authority or a court.
Requests may be sent to support@potik.live. We may request sufficient information to verify identity. We respond within the period required by applicable law.

9. Automated checks

We may automatically evaluate technical and payment signals to prevent fraud. Where a decision produces legal or similarly significant effects and applicable law grants this right, the User may request human review and provide an explanation.

10. Security

We use organisational and technical measures proportionate to risk, including access controls, protected transmission, logging, backups and need-to-know access restrictions. No transmission or storage method can guarantee absolute security.

11. Minors

The Site is not intended for independent purchases by persons who lack the necessary legal capacity. If you believe a minor’s data is processed without a proper basis, contact us.

12. Cookies

Information about cookies, their purposes and consent controls is in the Cookie Policy: https://potik.live/en/cookie.

13. Changes and contact details

The current version is published on the Site. We notify Users electronically of material changes where required by law.
  • Individual Entrepreneur: VASYLIEV VIKTOR SERHIIOVYCH
  • Ukrainian taxpayer number: 3574508553
  • Registered and actual residence: Odesa, Ukraine
  • Privacy email: support@potik.live