Privacy Policy

• Account details: your name, email address, password (stored only as a one-way hash), timezone and workspace settings.
• Connected social accounts: when you connect Facebook, Instagram, LinkedIn, YouTube, Threads or another network, we receive the access tokens that network issues, plus the account or Page ID, name, username and profile picture. Tokens are encrypted at rest (AES-256-GCM).
• Content you create: posts, captions, schedules, media you upload, templates, link-in-bio pages and listening keywords.
• Data from connected networks: comments, messages and engagement metrics for your own Pages and accounts, so you can reply from the inbox and see analytics.
• Billing: our payment processor handles card details; we only receive your plan, status and invoices.
• Usage and support: basic logs (IP address, browser, errors) for security, and messages you send to support.

We use data from connected networks only to provide the features you ask for:

• Publishing and scheduling posts to the Pages and accounts you choose.
• Showing comments and messages in your inbox and sending the replies you write.
• Displaying analytics for your own Pages and accounts.

We do not use platform data for advertising, do not sell or rent it, and do not share it with data brokers. Data obtained through Meta Platform APIs is used in line with the Meta Platform Terms and Developer Policies.

When you use AI writing or media generation, the prompt and relevant draft text are sent to our AI providers (such as Google Gemini or OpenRouter) to produce a result. If you add your own API key, requests go to that provider under your account. We do not send your social account tokens to AI providers.

We share data only with providers that help us run the service, under contracts that limit their use of it:

• Cloud hosting and database providers (application and data storage).
• Cloudflare R2 (media storage).
• Lemon Squeezy (payments and invoicing).
• Email delivery provider (account and notification emails).
• Crisp (support chat).
• AI providers listed above, only when you use AI features.

We may disclose information if the law requires it or to protect the safety of our users and service.

We keep your data while your account is active. Disconnecting a social account deletes its stored tokens and related inbox and analytics data immediately. When you delete your account, we delete your data within 30 days, except records we must keep for legal or tax reasons.

You can access, correct, export or delete your data at any time. Disconnect accounts under Accounts in the app, or follow our data deletion instructions. Removing VeloxonHub from your Facebook or Instagram settings also deletes the related data automatically.

We use HTTPS everywhere, encrypt social tokens at rest, hash passwords, and restrict internal access. No system is perfectly secure, so please use a strong, unique password.

VeloxonHub is not intended for anyone under 16, and we do not knowingly collect their data.

We will post updates to this page and change the date above; material changes will also be emailed to you. Questions or requests: support@veloxonhub.com.