Privacy and data management
Last updated: 1 October 2026
Application and operator
TÜM Social Management is a restricted-access social media and customer communication workspace operated by Tüm Holding GmbH (Bethmannstraße 7-9, 60311 Frankfurt am Main, Germany). There is no public self-registration; only authorized workspace owners and invited team members can sign in.
Information processed
Information may include account and team details, workspace profiles, drafts, files and delivery records, connected social-account identifiers, permissions and access tokens, as well as contacts, channel identities, messages, attachments, consent evidence and activity history. Limited session, audit and technical logs support security and error investigation. Sign-in uses a session cookie.
Purposes
Information is used to operate the workspace, connect social accounts, deliver explicitly approved publications and replies, provide a shared inbox, apply consent and blocking decisions, display measurements, create backups and protect security. Data is not sold for advertising.
Meta and other services
After an account is connected, the application exchanges data with the relevant platform APIs only within granted permissions. For WhatsApp Business, this may include business-account and phone identifiers, templates, messages, status events and the required access token. Access tokens are encrypted on the server and are not returned to the browser. When a user starts an AI operation, necessary text, context and selected files may be sent to the chosen provider. Copies held by platform providers are governed by their own terms and privacy policies.
Retention
YouTube, Facebook and TikTok API measurements and cached comments are retained for no more than 30 days and excluded from portable backups. Other content, communications and activity records may remain until deleted by a user, the workspace is closed, or operational, security or legal needs end. The server retains its latest 30 automatic backup archives; deleted content leaves backups when the relevant archive is retired.
Security and access
Workspaces are separated, and role and workspace boundaries are enforced on the server. Secrets and selected sensitive content are stored encrypted. No system can guarantee absolute security; access is restricted to authorized people who need it to operate and support the service.
Choices and deletion
Authorized users can disconnect accounts, clear measurement caches and remove supported content in the panel. Platform permission can also be revoked in the relevant Meta, Google or other platform account. See Data deletion for complete steps and the limits of provider-held copies.
Contact
For privacy or data requests, write to info@tuemholding.com. Do not send passwords, access tokens or one-time verification codes.
Google Privacy Policy · YouTube Terms of Service · Google app permissions · Terms of use