Overview
NextGen Baloch ("we", "the platform") is a multi-tenant social media automation service. This policy describes what information we collect, how we use it, and your choices.
Information we collect
- Account data — email address and profile information provided when an administrator creates your account.
- Connected platform credentials — API tokens and OAuth tokens (including YouTube/Google OAuth refresh tokens) that you authorize us to store on your behalf. Credentials are encrypted at rest using AES-256-GCM on our servers.
- Workflow and content data — source URLs, queue items, captions, scheduling settings, and activity logs related to your automations.
- Technical data — standard server logs (IP address, browser type, timestamps) for security and troubleshooting.
How we use information
We use collected information solely to:
- Operate workflow automation (fetching sources, publishing posts, syncing schedules)
- Store and refresh OAuth tokens required for third-party platforms (e.g. YouTube, Meta)
- Provide support, enforce subscription limits, and maintain security
- Generate activity logs visible to you and your platform administrator
We do not sell your personal information.
Third-party services
When you connect external accounts, data may be processed by:
- Google / YouTube — when you use "Sign in with YouTube" to authorize video uploads to your channel
- Meta (Facebook / Instagram) — when you connect Page tokens for publishing
- Supabase — authentication and database hosting
- n8n — workflow execution on our automation infrastructure
Each third party has its own privacy policy. We only request the minimum scopes needed for the features you enable.
Data retention and security
Credentials remain stored while your workflow is active. Deleting a workflow removes its associated credentials. We use industry-standard encryption for secrets, tenant isolation (row-level security), and access controls. No credential plaintext is returned to the browser.
Your choices
- Disconnect YouTube or other platforms at any time from your workflow settings
- Revoke app access from your Google Account security settings
- Contact your platform administrator to deactivate or delete your account
Contact
For privacy questions, contact your platform administrator or email support@nextgen-baloch.vercel.app.