← Coach@home

Privacy policy

Last updated: 21 July 2026

This policy describes how Coach@home processes personal data in connection with the coachathome.fr website and services related to online / social media presence (Facebook, Instagram, TikTok, YouTube, Pinterest, Google Business Profile, etc.), including when applications or automations connect to these platforms.

1. Data controller

Matthieu Lhote, Sole trader trading under the commercial name Coach@home (SIRET 527 835 284 00011), 21 Allée du Haut Bastion, 06370 Mouans-Sartoux.

Contact (including to exercise your rights): mlh@coachathome.fr — 06 68 71 19 71

2. Scope

  • Visitors to the coachathome.fr website
  • Prospects and clients contacting us (phone, email, social media)
  • Social media accounts and content managed on behalf of Coach@home or its clients (salons, shops, businesses), when we are authorised to do so
  • End users of platforms when APIs / OAuth are used (TikTok, Meta, Google/YouTube, Pinterest, etc.)

3. Data concerned

Category Examples
Contact data Name, email, phone, message, if you contact us voluntarily
Browsing data (site) Page views, duration, device / browser, source — via Google Analytics 4
Business / local listing data Name, address, hours, reviews and aggregated statistics (calls, clicks, directions) via Google Business Profile where applicable
Connected social account data Public account IDs, username, authorisation tokens (OAuth), publication metadata, lists of media / videos published by automation
Published content Texts, photos, videos, captions, hashtags, links, publishing schedules — on behalf of the client or Coach@home
Performance statistics Views, interactions, reach, clicks — aggregated, for tracking and reporting purposes

We do not knowingly collect sensitive data within the meaning of the GDPR via the Site. Data available on social platforms remains subject to each network’s rules.

4. Social networks & APIs (platform requirements)

As part of our “Content & social media” services and technical integrations, we may connect to the following platforms (depending on the assignments and authorisations granted):

4.1 TikTok

When Coach@home applications or automations use TikTok for Developers services (e.g. Content Posting API, Login Kit):

  • Data that may be processed: public identifier / username of the connected TikTok account, access tokens (access / refresh tokens), information needed for publishing, videos or metadata published via automation.
  • Purposes: account connection, automated or assisted content publishing, operational publishing follow-up.
  • Basis: consent / OAuth authorisation given when connecting the TikTok account; legitimate interest / contract for the client service.
  • We do not use TikTok data to sell profiles, nor for advertising unrelated to the authorised account.
  • Revocation: you can revoke access at any time from your TikTok account settings (connected apps).
  • TikTok data deletion: upon written request to mlh@coachathome.fr, we delete authorisation tokens and data obtained via the TikTok API within 30 days, unless otherwise required by law. If access to TikTok developer services ends, this data is also deleted.

For more information on TikTok’s practices: tiktok.com/legal/privacy-policy.

4.2 Facebook & Instagram (Meta)

When pages, Instagram professional accounts or Meta applications (Facebook Login, Graph API, Meta Business Suite) are used:

  • Data that may be processed: Page / account IDs, public name, access tokens, granted permissions, published content, page or post insights / statistics, messages that may be processed as part of a community management assignment.
  • Purposes: publishing and scheduling content, moderation / replies as part of an assignment, performance reporting, managing the Facebook & Instagram presence of the client or Coach@home.
  • Basis: OAuth / Business Manager authorisation; contract or legitimate interest related to the service.
  • Revocation: Facebook / Instagram settings → Apps and websites, or removal of Business Manager roles.
  • Deletion: upon request to mlh@coachathome.fr, deletion of Meta integration tokens and data under our control within 30 days (content already published on Facebook/Instagram remains managed via the Meta platform).

Meta policies: facebook.com/privacy, privacycenter.instagram.com.

4.3 YouTube (Google)

When the YouTube Data API / YouTube Studio is used for an authorised account:

  • Data: channel ID, titles / descriptions, video metadata, OAuth tokens, aggregated view statistics according to authorised scopes.
  • Purposes: uploading or updating videos, channel organisation, reporting.
  • Use in accordance with the YouTube API Services Terms of Service and the Google Privacy Policy. Use of information received from Google APIs complies with the YouTube API Services Terms of Service, including the Google Privacy Policy.
  • Revocation: myaccount.google.com/permissions.
  • Deletion of YouTube API tokens / data under our control: upon request to mlh@coachathome.fr, within 30 days.

4.4 Pinterest

When the Pinterest API or a Business account is connected:

  • Data: account / board ID, access tokens, published pins and metadata, engagement statistics according to permissions.
  • Purposes: publishing pins, organising boards, visual performance tracking.
  • Revocation: Pinterest account settings (authorised applications).
  • Deletion of integration data under our control: request to mlh@coachathome.fr, within 30 days.

Pinterest policy: policy.pinterest.com/privacy-policy.

4.5 Google Business Profile

For business listing management: public listing data, Google OAuth tokens, statistics (calls, clicks, directions, reviews) for local visibility tracking.

5. Purposes

  • Operate and improve the coachathome.fr website
  • Respond to contact requests and provide commercial follow-up
  • Create, schedule and publish social media content for Coach@home or its clients
  • Measure performance (site Analytics, social insights, Google Business Profile)
  • Ensure access security (tokens, revocation, limited technical logging)
  • Measure any Google Ads campaigns

6. Legal bases

  • Consent: OAuth connection to platforms, certain non-essential cookies / trackers
  • Contract / pre-contractual measures: delivery of a content, IT or coaching engagement
  • Legitimate interest: security, Site audience, service improvement, aggregated reporting
  • Legal obligation: where applicable (limited retention, responses to authorities)

7. Recipients & processors

  • OVH SAS — hosting of the Site
  • Google LLC — Analytics 4, Ads, YouTube, Google Business Profile
  • Meta Platforms — Facebook, Instagram
  • TikTok / ByteDance — TikTok API and services
  • Pinterest Inc. — Pinterest API and services
  • Make (Celonis SE) or equivalent automation tools — publication orchestration / workflows when used

No data is sold to third parties. Social platforms act under their own terms as controllers or joint controllers for the processing they carry out on their services.

8. Transfers outside the EU

Some providers (Google, Meta, TikTok, Pinterest) may process data outside the European Economic Area. These transfers rely on the mechanisms offered by these parties (standard contractual clauses, compliance programmes, etc.) and on each platform’s settings.

9. Retention periods

  • Contact messages: for the duration needed to handle the request, then limited archiving if follow-up is required
  • OAuth tokens: for as long as the connection is needed for the assignment; deleted upon revocation or on request (within 30 days)
  • Aggregated statistics: reasonable retention for client reporting / internal improvement
  • Analytics (GA4): according to the retention period configured in Google Analytics

10. Cookies and trackers (site)

The Site uses Google Analytics 4 (identifier G-597XP7P4FD). Cookies or local storage may be placed. You can limit tracking via your browser, extensions, or Analytics opt-out mechanisms.

Buttons or links to Facebook, Instagram, TikTok, YouTube or Pinterest may result in cookies being placed by these third parties if you interact with their services.

11. Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to define post-mortem directives.

To exercise them (including copy or deletion of data linked to TikTok / Meta / YouTube / Pinterest APIs under our control): mlh@coachathome.fr.

We respond within the legal timeframes. You may also contact the CNIL (www.cnil.fr).

12. Deletion & disconnecting applications

In addition to your email request, you can at any time:

  • Revoke the application’s access from TikTok, Facebook/Instagram, Google/YouTube or Pinterest
  • Request permanent deletion of integration tokens and data stored by Coach@home — processed within 30 days

Revocation or deletion on Coach@home’s side does not automatically remove posts already visible on social networks: they remain subject to each platform’s tools.

13. Security

Reasonable measures: HTTPS, restricted access, professional hosting, limited token retention. No system is infallible.

14. Minors

Our services are primarily aimed at professionals and adults. We do not knowingly target minors via our applications or the Site. Each social network’s age rules apply.

15. Changes

This policy may be updated (new APIs, Ads, automation tools, regulations). The date at the top of the page prevails.

16. Contact

Privacy & data deletion: mlh@coachathome.fr

Legal notice — Terms of use