Privacy Policy

Last updated: January 8, 2026

1. Introduction

ITZ Adarsh ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, delete, and safeguard your information when you use our Instagram, YouTube, and Google My Business automation services.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

  • Full name
  • Email address
  • Password (stored in encrypted, hashed form)

2.2 Instagram Data

When you connect your Instagram account, we receive:

  • Instagram User ID
  • Instagram Username
  • OAuth Access tokens (used to send messages and process comments on your behalf)

We do NOT store your Instagram password. We use official OAuth 2.0 authentication directly with Instagram/Meta.

2.3 Google & YouTube User Data

When you connect your Google or YouTube account for YouTube comment automation, video/shorts management, or Google Business review automation, we access and collect:

  • Google account email address and basic profile details
  • YouTube Channel ID, Channel Name, and channel metadata
  • YouTube Video and Shorts details, comments, and community posts (to process automated replies)
  • Google My Business Location IDs, names, and reviews
  • OAuth Access Tokens and Refresh Tokens (to perform user-authorized actions via APIs)

We do NOT store your Google or YouTube password. Authentication is completed securely via Google OAuth 2.0.

2.4 Usage Data

We automatically collect:

  • Log data (IP address, browser type, operating system, timestamp)
  • Automation flow performance metrics
  • Feature usage statistics

3. How We Use Your Information

We use the collected information strictly to provide, maintain, and improve our services, including to:

  • Provide and maintain our core automation platform
  • Send automated messages and replies on your behalf through Instagram and YouTube
  • Fetch YouTube comments and video metadata to trigger your custom automation flows
  • Display channel analytics, flow performance, and execution logs in your user dashboard
  • Send essential account notifications, password resets, and service updates
  • Respond to customer support requests and troubleshoot technical issues

4. YouTube API Services & Google Data Policies

Our service connects to YouTube using YouTube API Services. By connecting your YouTube account or using our YouTube features, you acknowledge and agree to the following:

  • YouTube Terms of Service: Your use of YouTube integration features is subject to the YouTube Terms of Service.
  • Google Privacy Policy: Google user data accessed via YouTube API Services is also governed by the Google Privacy Policy.
  • Google API Services User Data Policy (Limited Use): Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Revoking Access: You may view or revoke ITZ Adarsh's access to your Google and YouTube data at any time via the Google Security Settings Page.

5. Data Sharing, Transfers & Restrictions

We do NOT sell, rent, or trade your personal information or Google user data to third parties. We share data only in the following limited operational circumstances:

  • Meta/Instagram: To transmit automated direct messages and comment replies.
  • Google/YouTube API Services: To interact with your YouTube channel for comment responses and video management as authorized by you.
  • AI Reply Generation (Gemini AI): Message and comment content may be processed via AI models solely to generate instant automated replies configured by you.
  • Payment Processors (Razorpay): Transaction details required to process secure payments.
  • Legal Obligations: When disclosure is required by law, subpoena, or valid legal order.

Explicit Data Handling & Transfer Restrictions

In strict compliance with Google OAuth and User Data policies:

  • We do NOT transfer or disclose Google user data to third parties for targeted advertising, personalized advertisements, retargeted ads, or interest-based advertising.
  • We do NOT sell Google user data to data brokers or information resellers.
  • We do NOT use Google user data for determining credit-worthiness or lending purposes.
  • We do NOT use Google or YouTube user data to develop, improve, or train non-personalized artificial intelligence (AI) or machine learning (ML) models.

6. Data Security Mechanisms

We implement robust, industry-standard administrative, technical, and physical security measures to protect your personal information and Google user data from unauthorized access, alteration, disclosure, or destruction:

  • Encryption in Transit: All web traffic and API calls are encrypted using SSL/TLS (HTTPS).
  • Encryption at Rest: Sensitive credentials, OAuth access tokens, and refresh tokens are stored using strong encryption algorithms.
  • Password Protection: Account passwords are hashed using secure bcrypt algorithms.
  • Access Control: Strict operational policies limit server and database access exclusively to authorized system processes.

7. Data Retention & Deletion Disclosures

We store your personal data and connected account information only for as long as necessary to provide the services you have requested or to fulfill legitimate business and legal obligations.

  • Retention Period: Google OAuth tokens and channel metadata are retained while your account remains active and connected to our service. Log data is retained for a maximum period necessary for service debugging and analytics.
  • Data Deletion Request: You have the right to request deletion of your account and all associated data at any time.
  • Account Disconnection: Disconnecting your Google/YouTube account from your dashboard immediately stops data access, invalidates OAuth tokens, and schedules stored token records for permanent deletion.
  • Requesting Manual Deletion: You can submit a formal data deletion request by emailing [email protected]. Upon receipt, your account and all stored personal/Google user data will be permanently purged from our primary database and backup servers within 30 days.

8. Your Rights

Depending on your location, you have the following rights regarding your data:

  • Access and obtain a copy of your personal data
  • Rectify or update inaccurate information
  • Request permanent erasure of your personal and connected account data
  • Restrict or object to processing of your data
  • Revoke connected social media and Google permissions at any time

9. Cookies

We use essential session cookies strictly for authentication and security management. We do not use tracking or third-party advertising cookies.

10. Children's Privacy

Our service is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect operational, legal, or policy changes. We will notify you of material changes by updating the "Last updated" date at the top of this page.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

Email: [email protected]