ATONIMOS LTD

Privacy Policy

Neve social integration · effective 2 September 2026

1. Controller and scope

ATONIMOS LTD is the controller for personal information it determines how and why to use in connection with this integration. Atonimos is registered in England and Wales under company number 17431697. Its registered office is Downlands, Canterbury Road, Ashford, United Kingdom, TN25 4HE.

This policy covers the Neve social-media integration and this public static site. The integration is used privately by authorised Atonimos personnel; it has no public user accounts or public sign-up.

2. Information the integration stores

• OAuth access and refresh tokens issued by the connected platform.
• A one-way fingerprint of the platform account identifier, not the identifier itself.
• Posts the integration drafts and publishes.
• The identity of the person who approved each post and the time of approval.

3. Information the integration does not store

The integration stores no platform password, profile data, follower lists, analytics or messages. Tokens are never written to logs. This static site does not receive, store or forward an OAuth authorisation code.

4. How information is used

The stored information is used only to maintain an authorised connection to the platform, prepare and publish approved content, and retain an attributable approval record. No post is published unless a person has read that exact content and approved it.

Nothing is sold, shared with third parties or used to train any model. The integration’s only outbound transfers are to the connected platform’s own API to perform authorised platform operations.

5. Lawful bases

Where UK data protection law applies, Atonimos relies on its legitimate interests in operating, securing and documenting its own authorised social-media publishing, and on compliance with legal obligations where applicable. The integration does not make solely automated decisions with legal or similarly significant effects.

6. Storage, security and retention

Integration data is held on self-hosted infrastructure in a directory readable only by the service account. Access is restricted to authorised operation of the service. Tokens are deleted when the account is disconnected or when they expire. Draft, publication and approval records are retained while needed for the company’s content and audit record, dispute resolution and legal obligations.

No online service can promise absolute security, but Atonimos applies proportionate access, authentication and operational controls to the data described here.

7. Platform processing and transfers

When an authorised post is published or another authorised platform operation is performed, the relevant information is sent to the platform’s own API. That platform processes information under its own privacy terms. Atonimos does not send integration data to advertising, analytics or model-training providers.

8. This static site

The site code does not enable marketing analytics, advertising pixels, forms, beacons or a marketing mailing list. The hosting provider may process IP address, browser or device information, request details, timestamps and security logs needed to deliver and protect the site.

9. Your rights

Depending on the circumstances, UK data protection law may give you rights of access, rectification, erasure, restriction, objection and data portability, and rights concerning consent and solely automated decisions.

To exercise a right, email privacy@atonimos.com or write to ATONIMOS LTD at the registered office above. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office.

10. Changes

We will review this policy when the integration, providers, information or purposes change. A revised version and effective date will be published here.