Privacy Policy

We collect: your Zayenha Hub identity at sign-in (email, name, phone if provided), and a technical audit log for sensitive operations (raw IP addresses are never stored — only a salted hash).

When you connect a social platform account

When you connect an Instagram, Facebook, X, LinkedIn, TikTok, Snapchat, or YouTube account with your explicit consent through that platform's own OAuth flow, we store: the access token and refresh token (if issued) — encrypted (AES-256) in a dedicated secrets store (Cloudflare KV), never raw and never in our main database — and the account's identifier and display name so we can show it to you in the app. When you disconnect, we ask the platform itself to revoke our authorization for your account wherever the platform supports that programmatically.

We use these permissions only for what you explicitly request: publishing content you approve to your account, and — if you enable the "Community management" feature — reading inbound comments and messages on your account to draft an AI-suggested reply that is **never sent without your explicit approval on each individual reply**. We never use this data for advertising or marketing, and never share it with third parties beyond the platform provider itself and the AI service used to draft the suggested reply (which does not retain it).

We never sell your data. To delete a connected account's data or all your data, see the Data Deletion Instructions page.

This page expands as new features ship, under Saudi PDPL. Questions: z@zayenha.com.