Privacy Policy
Welcome to SRN CAPITAL ("we", "us", or "our"). We are dedicated to safeguarding your privacy and ensuring you have a positive experience on our website and when using our multi-platform social media posting and management services (the "Services").
This Privacy Policy describes our policies regarding the collection, use, protection, and disclosure of your information when you connect your social media profiles, including Google, to our platform.
1. Information We Collect
When you register and use our platform, we may collect the following types of information:
- Account & Contact Information: Your name, email address, workspace settings, and login credentials.
- Connected Social Media Accounts: Authentication credentials, identifiers, and OAuth tokens when you choose to connect your third-party social media platforms.
- User-Generated Content: Post drafts, scheduled messages, images, videos, captions, and publishing schedules created by you.
- Usage & Technical Data: IP addresses, browser types, operating system details, and system logs to maintain platform stability and performance.
2. Specific Disclosures for Google User Data
Our application integrates with Google APIs (including Google Business Profile API and YouTube Data API) to provide scheduling, publishing, and analytics capabilities on your behalf.
A. What Google User Data We Access
When you authenticate your Google Account with SRN CAPITAL, we request permission to access only the minimal required scopes:
-
Google Profile & Identity (
openid,profile,email): We access your basic profile information (such as your full name, email address, and Google account identifier) to authenticate you and link your Google workspace identity. -
Google Business Profile (
https://www.googleapis.com/auth/business.manage): We access your business account ID, business location listings (names, addresses, categories), location reviews, and posting capabilities so you can schedule posts, publish updates, and view reviews for your verified business locations. -
YouTube Data (
https://www.googleapis.com/auth/youtube.upload&https://www.googleapis.com/auth/youtube.readonly): We access channel metadata and upload permissions exclusively to publish user-initiated video content and read video analytics (view counts, engagement metrics).
B. How We Use Google User Data
We use the accessed Google user data strictly to fulfill user-requested features inside the application:
- Displaying your available Google Business locations in your dashboard.
- Publishing scheduled posts, photos, announcements, and media to your Google Business Profile or YouTube channel at your designated schedule.
- Retrieving performance metrics, reviews, and analytics for display within your private analytics dashboard.
We do NOT:
- We do not sell, rent, or lease any Google user data to third parties, data brokers, or advertisers.
- We do not use Google user data to serve targeted or behavioral advertising.
- We do not use Google user data to develop, train, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.
- We do not access your private emails (Gmail), contacts, Google Drive files, or search history.
C. Storage & Protection of Google User Data
All Google OAuth tokens (access tokens and refresh tokens) are encrypted at rest using industry-standard AES-256 encryption. Tokens are transmitted solely via encrypted Transport Layer Security (TLS/HTTPS) protocols. Access to decryption keys is strictly restricted to authorized server-side processes.
D. Google API Limited Use Disclosure
SRN CAPITAL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Sharing and Third-Party Disclosures
We do not sell your personal data. We only share information with third parties in the following limited circumstances:
- Social Platform APIs: When you direct us to publish a post or video, your media and text are transmitted to the respective platform APIs (Google, Meta/Facebook/Instagram, LinkedIn, X, TikTok, Pinterest) as instructed by you.
- Cloud Infrastructure Providers: Trusted hosting and database providers who operate under strict non-disclosure and data protection contracts.
- Legal Compliance: When required by lawful court order, subpoena, or applicable statutory law.
4. Data Retention and Deletion
We retain your information only as long as your account remains active or as needed to provide you with the Services.
How to Disconnect or Revoke Access
You can disconnect your Google account or any social profile at any time directly in your account Settings ➔ Connected Accounts page. Upon disconnection, your OAuth tokens and cached credentials are immediately purged from our active database.
You can also revoke our access to your Google account at any time via the official Google Security permissions dashboard: Google Account Permissions Manager.
To request complete account deletion and erasure of all associated data, you may email our data privacy team at the contact address listed below. All personal data will be completely deleted within 30 days.
5. Security Measures
We maintain appropriate administrative, technical, and physical safeguards designed to protect your personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. All communication between your client browser, our servers, and third-party APIs is encrypted using SSL/TLS.
6. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately for deletion.
7. Changes to this Policy
We may revise this Privacy Policy periodically to reflect changes in our legal obligations, platform features, or third-party API requirements. Any updates will be posted on this page with an updated revision date.
8. Contact Information
If you have questions, feedback, or requests regarding this Privacy Policy or our data handling practices, please contact us at:
- Application Name: SRN CAPITAL
- Website: https://socialposting.srncapital.in
- Email: support{{ parse_url(config('app.url', 'http://localhost'), PHP_URL_HOST) ?? 'socialposter.local' }}