Integrations & data usage

What uCinema connects to, what data each connection uses, and why.

uCinema is a multi-tenant SaaS platform: each merchant connects their own third-party accounts, and every action below happens only at the merchant's request and only on the accounts they connected. Access tokens are stored encrypted, isolated per tenant, and deleted when the integration is disconnected. This page describes each integration in plain language — including for reviewers at Meta, Google, and TikTok evaluating our API access.

Meta — Facebook & Instagram

Organic publishing & advertising

Merchants connect their Facebook Page and Instagram professional account to publish organic posts and to create and measure ad campaigns from the uCinema Marketing Hub. uCinema uses Meta's Graph API and Marketing API with permissions such as pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish, ads_management, ads_read, read_insights, and business_management.

Data we access and why

Page and Instagram account IDs and names — to list the merchant's assets so they can choose where to publish.
Content the merchant creates in uCinema (captions, images, videos) — sent to Meta to publish the posts the merchant schedules.
Ad account ID, campaign settings, and creatives — to create and manage the campaigns the merchant configures.
Performance metrics (impressions, clicks, spend, conversions) — to show reports and power AI budget/copy suggestions for the merchant's own campaigns.
OAuth access tokens — stored encrypted, used only for the actions above.

How to revoke

Disconnect from the uCinema dashboard (Marketing → Connections), or remove uCinema in Facebook Settings → Business Integrations. See our Data Deletion page for full steps.

WhatsApp Business (Meta)

Customer messaging & AI sales assistant

Merchants connect their own WhatsApp Business Account (WABA) through Meta's Embedded Signup. uCinema acts as a tech provider: each merchant owns their WABA and pays Meta's conversation fees directly. The AI sales assistant answers customer product questions on the merchant's number and escalates to a human when needed, using whatsapp_business_management and whatsapp_business_messaging permissions.

Data we access and why

WABA ID, phone number ID, and display name — to route messages for the correct merchant.
Incoming and outgoing messages and media with the merchant's customers — to display conversation history and generate assistant replies.
Message templates and their approval status — so merchants can send notifications that comply with WhatsApp policy.
Webhook delivery events — to show sent/delivered/read status.

How to revoke

Disconnect WhatsApp from the uCinema dashboard, or remove uCinema's access in Meta Business Settings. Conversation history stored in uCinema can be deleted on request.

Google Ads

Advertising

Merchants connect their Google Ads account via OAuth (scope: https://www.googleapis.com/auth/adwords) so uCinema can create and manage the search/display campaigns they configure in the Marketing Hub and retrieve performance reports. uCinema complies with the Google API Services User Data Policy, including Limited Use.

Data we access and why

Google Ads customer account ID — to operate on the account the merchant selects.
Campaign, ad group, and ad settings created through uCinema — to create and update the merchant's campaigns.
Reporting metrics (impressions, clicks, cost, conversions) — to display dashboards and power AI optimization suggestions for the merchant's own campaigns.
OAuth access and refresh tokens — stored encrypted; never used for any purpose other than the merchant's requested actions.

How to revoke

Disconnect from the uCinema dashboard, or revoke uCinema at myaccount.google.com/permissions. Stored tokens are invalidated and deleted.

TikTok

Organic publishing & advertising

Merchants connect their TikTok account to publish videos they create (Content Posting API) and their TikTok Ads account to run and measure campaigns (Marketing API) from the Marketing Hub.

Data we access and why

TikTok account and advertiser IDs — to identify which accounts the merchant authorized.
Videos and captions the merchant uploads in uCinema — transmitted to TikTok to publish at the merchant's request.
Campaign settings and ad performance metrics — to manage the merchant's campaigns and show reports.
OAuth tokens — stored encrypted and scoped to the authorized account.

How to revoke

Disconnect from the uCinema dashboard, or remove uCinema in TikTok Settings → Security & permissions → Apps and services.

Stripe

Payments

Each merchant connects a Stripe account (Stripe Connect) to accept card payments in their store checkout. Funds settle to the merchant's own Stripe account.

Data we access and why

Connected account ID and onboarding status — to route each store's payments to the right account.
Transaction metadata (amount, currency, status, payment method type, last four digits) — to display orders and support refunds. Full card data never touches uCinema servers; it is handled by Stripe.

How to revoke

Disconnect Stripe from the uCinema dashboard or remove the connected application from the Stripe dashboard.

ATH Móvil

Payments (Puerto Rico)

Merchants can accept ATH Móvil payments — the leading local payment method in Puerto Rico — in their store checkout using their own ATH Móvil Business account.

Data we access and why

Business account tokens configured by the merchant — to initiate and confirm payments.
Transaction references, amounts, and status — to mark orders as paid and support reconciliation.

How to revoke

Remove the ATH Móvil credentials from the uCinema dashboard; payments through the store stop immediately.

Shippo

Shipping labels

Merchants connect a Shippo account to compare carrier rates and buy shipping labels for their orders directly from the uCinema dashboard.

Data we access and why

Merchant's Shippo API credentials — to request rates and purchase labels on their behalf.
Order shipping data (recipient name, address, parcel weight/dimensions) — sent to Shippo to generate the label.
Tracking numbers and label files — synced back to the order and shared with the customer.

How to revoke

Remove the Shippo connection from the uCinema dashboard, or rotate/revoke the API token in Shippo.

Cloudflare

Infrastructure

uCinema serves merchant stores and custom domains through Cloudflare's global network for DNS, SSL certificates, caching, and DDoS protection. This is platform infrastructure — merchants do not connect their own Cloudflare accounts.

Data we access and why

Standard web request logs (IP address, user agent, requested URL) — processed by Cloudflare to serve and protect the sites.
Domain and certificate configuration — to provision each store's custom domain with SSL.

How to revoke

Not applicable — infrastructure provider. Covered by our Privacy Policy as a subprocessor.

For full detail on storage, retention, and deletion of the data above, read our Privacy Policy and Data Deletion Instructions.

Read the Privacy Policy Data Deletion Instructions