Privacy Policy

This Privacy Policy describes how ZeroHanalytics("we," "us," or "our") collects, uses, shares, and protects information when you use Social Command Center(the "Service"), including when you connect social media accounts through official platform APIs (such as Meta, Google/YouTube, and TikTok).

This policy is designed to meet common developer-platform requirements and to be understandable across jurisdictions. Platform-specific disclosures may also apply when you use OAuth or publishing features.

Account information. Email address, display name, profile details, and authentication identifiers provided through our identity provider (e.g., email/password or OAuth sign-in).

Workspace and team data. Workspace names, member roles, invitations, and settings you configure in the Service.

Content you provide. Ideas, captions, hooks, media references, schedules, notes, and other material you create or upload for social publishing workflows.

Connected platform data. When you authorize a connection, we may receive and store platform account identifiers, access tokens (encrypted at rest), publishing permissions, post identifiers, permalinks, and performance metrics returned by platform APIs (e.g., views, comments, likes).

Technical data. Device/browser type, IP address, timestamps, logs, and cookies or similar technologies needed to secure sessions and operate the Service.

Trusted devices. If enabled, device fingerprints or labels you register for additional account security.

We use information to:

• Provide, maintain, and improve the Service;
• Authenticate users and enforce workspace access controls;
• Schedule, publish, and manage posts on platforms you connect;
• Sync analytics and performance reports;
• Generate AI-assisted drafts or media when you request those features;
• Respond to support requests and send service-related notices;
• Detect abuse, fraud, and security incidents;
• Comply with legal obligations and platform developer policies.

We do not sell your personal information. We do not use your private content to train public third-party AI models without your explicit consent.

Depending on your location, we process personal data based on: performance of a contract (providing the Service), legitimate interests (security and product improvement), consent (where required for optional features or marketing), and legal obligations.

We may share information with:

• Social platforms you connect (to publish content and retrieve analytics per your instructions);
• Infrastructure providers (hosting, database, authentication) under contractual confidentiality and security obligations;
• AI providers only when you use AI features, limited to the inputs needed for that request;
• Legal authorities when required by law or to protect rights, safety, and security.

We may share aggregated or de-identified statistics that cannot reasonably identify you.

We retain information while your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal requirements. You may request deletion of your account and associated workspace data subject to limitations (e.g., backups, legal holds, or platform-mirrored publish records).

OAuth tokens are removed when you disconnect a platform or delete the associated account connection.

We use industry-standard measures including encrypted transport (HTTPS), encrypted storage for sensitive tokens where applicable, access controls, and allowlisted authentication for production environments. No method of transmission or storage is 100% secure; please use strong passwords and protect your devices.

Your information may be processed in countries other than where you reside. Where required, we implement appropriate safeguards for cross-border transfers.

Depending on your location, you may have the right to:

• Access, correct, or delete personal information we hold about you;
• Export your data in a portable format where technically feasible;
• Object to or restrict certain processing;
• Withdraw consent where processing is consent-based;
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact franzneandra@gmail.com. We will verify your request before acting on it.

You can disconnect third-party platforms at any time from the Connections area of the Service (when signed in).

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will delete it.

The Service may link to or embed third-party sites and APIs. Their privacy practices are governed by their own policies. We encourage you to review policies for Facebook, Instagram, YouTube, TikTok, and any other services you connect.

We may update this Privacy Policy from time to time. The current version will always be available at http://localhost:3000/privacy with an updated "Last updated" date. Material changes may be communicated via the Service or email where appropriate.

Privacy questions and requests: franzneandra@gmail.com.

See also our Terms of Service.