Your Privacy Matters

Privacy Policy

NexaPersona.ai

Effective: July 13, 2026 Last Updated: July 13, 2026

01Overview

NexaPersona ("we", "our", "us") operates nexapersona.ai — a SaaS platform that allows users to connect their social media accounts and publish or schedule content across Facebook, Instagram, YouTube, and TikTok. This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

By using NexaPersona, you agree to the practices described in this policy.

02Data We Collect

Account Information

Name, email address, password (hashed)

Social Media Tokens

OAuth access tokens from Facebook, Instagram, YouTube, and TikTok

Connected Account IDs

Page IDs, Channel IDs, Instagram Business Account IDs, TikTok Account IDs

Post Content

Text, images, videos, captions you create on our platform

Usage Data

Login times, features used, post history

Billing Information

Subscription plan and payment method (processed by Stripe)

03How We Use Your Data

  • To authenticate you and maintain your session
  • To connect to Facebook, Instagram, YouTube, and TikTok on your behalf using OAuth tokens
  • To publish posts or schedule content at your requested times
  • To display your posting history and analytics
  • To send transactional emails (confirmations, errors, billing receipts)
  • To improve platform features based on aggregated usage
  • To comply with Meta, Google, and TikTok platform policies

04Social Media Permissions We Request

Facebook

  • pages_manage_postspublish content to your Pages
  • pages_read_engagementread engagement data
  • pages_show_listlist your connected Pages

Instagram

  • instagram_basicaccess your account info
  • instagram_content_publishpublish posts and reels

YouTube

  • youtube.uploadupload videos to your channel
  • youtube.readonlyread channel info

TikTok

  • video.uploadupload and publish videos
  • user.info.basicidentify your account
🔒 We do not read your private messages, access your followers' personal data, or use your social media data for advertising.

05Data Storage and Security

🔐

AES-256 Encryption

All OAuth tokens encrypted at rest

🌐

HTTPS/TLS

All data transmission is encrypted

👁

Token Privacy

Tokens never exposed to browser or third parties

🔍

Regular Audits

Routine security reviews and assessments

🔑

Access Control

Restricted to authorized personnel only

06Data Sharing

We do not sell your personal data.

We share data only with:

  • Meta (Facebook/Instagram) — to publish content via their API
  • Google (YouTube) — to upload videos via their API
  • TikTok — to publish content via their API
  • Stripe — to process subscription payments
  • Cloud infrastructure providers — for hosting (under data processing agreements)

07Your Rights

Depending on your location, you have the right to:

Access

Request a copy of all personal data we hold

Rectification

Request correction of inaccurate data

Erasure

Request deletion of your personal data

Portability

Receive data in a machine-readable format

Object

Object to processing of your data

Withdraw Consent

Disconnect social accounts and revoke access

To exercise these rights, email: support@nexapersona.ai

08Data Retention

  • Account data is retained while your account is active
  • OAuth tokens are deleted immediately when you disconnect a social account
  • Post history is retained for 12 months after deletion, then permanently deleted
  • Upon account deletion, all personal data is erased within 30 days

09Cookies

We use only essential cookies:

Session Cookies

To keep you logged in

CSRF Tokens

To protect against cross-site request forgery

We do not use advertising or third-party tracking cookies.

10Children's Privacy

NexaPersona is not intended for users under 16. We do not knowingly collect data from children. Contact support@nexapersona.ai if you believe a child has provided us data.

11Changes to This Policy

We may update this policy at any time. We will notify you by email or platform notice before significant changes take effect.

12Contact