Privacy Policy

 

Last updated: November 28, 2025

At TwiceBox, accessible from https://www.twicebox.com, we are committed to protecting the privacy of our website visitors and clients who use our digital services, including our proprietary social media management tool, Postiz.

This Privacy Policy explains the information we collect, how we use it, and how we ensure compliance, particularly concerning third-party social media integrations.

1. Consent and Scope

By using our Services, including our website and the Postiz platform, you hereby consent to our Privacy Policy and agree to its terms. This policy applies to our online activities and the management of information related to our agency services.

2. Information We Collect

We collect information in two primary ways: directly from you, and through the use of our digital services.

A. Information You Provide Directly

When you inquire about our services, register as a client, or contact us, we may collect:

• Contact Information: Name, company name, email address, phone number, and physical address.

• Correspondence: The contents of messages and attachments you send us.

B. Information Collected via Postiz (Third-Party Integrations)

When you, as our client, authorize TwiceBox to manage your social media presence using the Postiz tool, we collect the following:

Data Type	Description and Purpose (CRITICAL)
API Access Tokens / Authorization Keys	This is the primary credential collected when you link your social media accounts (e.g., TikTok, Pinterest, LinkedIn, Facebook, Instagram, YouTube). We collect and securely store these tokens solely for the purpose of communicating with the respective social media platform’s API to schedule and publish content on your behalf, as directed by you.
Basic Account Data	We may receive and display basic public information from your connected accounts (e.g., profile name, account ID, profile picture, content posting history, and follower count) to enable our agency staff to monitor and manage your accounts within the scope of our contract.
Content Metrics	We may collect non-personal analytics (e.g., views, likes, engagement rates) on content posted via Postiz for reporting and service improvement purposes.

TwiceBox does not store or access your social media account passwords.

3. How We Use Your Information

We use the information we collect in various ways, including to:

• Provide, operate, and maintain the TwiceBox website and services.

• Fulfill our client management contracts, specifically by using the Authorization Keys within Postiz to post content to the authorized social media platforms.

• Improve, personalize, and expand our services and the Postiz platform.

• Communicate with you regarding your service updates, promotional materials, or customer service.

• Monitor and analyze platform usage to prevent fraud and ensure security.

4. Data Retention and Security

A. Retention of API Access Tokens

We retain the API Access Tokens/Authorization Keys only for the duration of our client contract or as long as the specific social media account remains actively connected to the Postiz service. These tokens are deleted immediately upon the termination of the client contract or when the client revokes the connection/authorization.

B. Security Measures

We implement a variety of security measures to protect the integrity and confidentiality of your personal information and access tokens. This includes secure encryption, access control, and other security best practices.

5. Third-Party Links and Policies

TwiceBox’s Privacy Policy does not apply to the policies of TikTok, Facebook, or any other social media platform we connect to. When you authorize our service, you are also bound by the privacy policies and terms of those platforms. We advise you to consult the respective policies of these third-party services.

6. Your Data Protection Rights (GDPR and CCPA)

We respect your privacy rights and ensure that all users can exercise them. We adhere to the requirements of the GDPR and CCPA.

• The right to access, rectification, erasure, and data portability. You have the right to request copies of your personal data or have us correct/delete inaccurate information.

• The right to restrict or object to processing. You have the right to restrict our processing of your personal data.

• Exercising Rights: If you make a request, we have one month to respond to you. Please contact us using the details below to exercise any of these rights.

7. Children’s Information

Our Services are intended for business use by adults (over the age of 18) and their authorized representatives, as detailed in our Terms and Conditions. TwiceBox does not knowingly collect any Personal Identifiable Information from children under the age of 18. If you believe your child has provided such information, please contact us immediately.

8. Contact Us

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us:

• Email: contact@twicebox.com

• Phone: +212.5.22.70.81.33

• Mail: Boulevard de la Résistance &, Bd de Londres, Casablanca, Casablanca 20250, Morocco