Privacy Policy

1. Introduction

Sayanura ("we," "us," "our") operates an automation platform that helps creators publish content across YouTube, Facebook, Instagram, and other connected platforms. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

2. Information We Collect

• Account information: email address, password (hashed, never stored in plain text)
• Connected platform data: OAuth access tokens and refresh tokens for Google (Drive, YouTube), Meta (Facebook, Instagram), and any other platforms you choose to connect
• Content data: video files (temporarily processed, not permanently stored), AI-generated metadata (titles, descriptions, hashtags, captions)
• Third-party AI provider credentials: API keys you provide for services such as Groq, OpenAI, or Anthropic, used solely to generate content on your behalf
• Usage data: workflow configurations, run history, error logs
• Payment information: processed entirely by our payment processor (Razorpay); we do not store your full card or bank details

3. How We Use Your Information

We use your data solely to:

• Operate the automation workflows you configure (e.g., fetching a video from your Drive, generating metadata, publishing to your connected accounts)
• Maintain and improve the Service
• Communicate with you about your account, billing, or Service updates
• Provide optional remote setup assistance, if purchased

4. Google API Services User Data Policy Compliance

Sayanura's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising purposes, and we do not sell Google user data to third parties.

5. Data Storage & Retention

• OAuth tokens and API credentials are encrypted at rest and can only be decrypted by our secure server-side infrastructure at the moment they are needed to perform an action you've configured — never exposed in your browser.
• Video files are processed temporarily during a workflow run and are not retained after successful publishing; source files are deleted from your connected Drive only after you've enabled that option and all target platforms confirm successful publishing.
• You may disconnect any third-party account at any time, which immediately revokes and deletes the associated stored tokens.
• You may request full deletion of your account and all associated data by contacting us.

6. Data Sharing

We do not sell your personal data. We share data only with:

• The third-party platforms you explicitly connect (Google, Meta, AI providers), solely to perform the actions you configure
• Our payment processor (Razorpay), solely to process your subscription payment
• Law enforcement or regulators, only where legally required

7. Security

We use industry-standard encryption (PGP symmetric encryption) for stored credentials, Row Level Security to ensure users can only access their own data, and restrict credential decryption to secure server-side functions only.

8. Your Rights

You have the right to: access the data we hold about you, request correction of inaccurate data, request deletion of your account and data, and revoke third-party platform access at any time.

9. Contact Us

For privacy questions, data deletion requests, or concerns, contact us at sahanuralam3421@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice.

11. Cookies & Tracking Technologies

We use essential cookies to manage your secure session and authentication state. Optional analytics tracking (such as Google Analytics 4) is deployed only on public marketing pages and only after you provide explicit consent via our cookie banner. You can manage or revoke your cookie consent preferences at any time. We never track authenticated in-app customer workflows or sensitive data through marketing analytics cookies.