Privacy Policy

Reynovation Social · Last updated: October 13, 2026

Reynovation Social ("the app") is a tool that Reynovation and the businesses it works with use to plan, approve and publish content to their own social media accounts (Instagram, Facebook, TikTok, LinkedIn, Threads, X and YouTube), and to run and review paid promotion on Meta. Each business's data is kept separate: people of one business never see another business's content, accounts or numbers. This policy explains exactly what the app stores, why, how it is protected, and how to revoke access or delete it.

What we store

• People who sign in: email address, name and role. Passwords are stored only as a salted scrypt hash, never in readable form. Signing in sets one session cookie; there are no tracking or advertising cookies.
• Visitors who ask us to call them back: the name, phone number and business name typed into the form on the home page, used only to get back to them. The visitor's IP address is not stored, only a keyed hash of it, to stop one sender flooding the form. Ask us at the contact address below and the request is deleted.
• Meta (Facebook / Instagram): an access token, the IDs and names of the Facebook page, Instagram account and ad account you choose, and the list of permissions you granted. The app asks only for the permissions of the features a business uses (Instagram, Facebook page, paid ads): a business that does not run ads is never asked for ad-account access.
• TikTok: for each connected account, its ID, username, display name, profile picture, access and refresh tokens, and the posting options TikTok reports for it.
• LinkedIn: the member ID, name, profile picture, access token (and refresh token, if LinkedIn issues one) and its expiry.
• Threads: the user ID, username, name, profile picture, access token and its expiry.
• X: the user ID, username, name, profile picture, access and refresh tokens and their expiry.
• YouTube (Google): the channel ID, title, handle and picture, access and refresh tokens, their expiry and the permissions granted; and, while a video is being uploaded, the upload's address and progress (deleted when the upload ends).
• Telegram: the chat ID a business uses to receive approval requests and reports, and the photos, videos and text you send to the bot to create drafts.
• Content you create: media you upload, captions, schedules, campaigns, products, brand voice and notes.
• Performance data: statistics of the connected accounts, posts and ads (such as reach, views, likes, comments, clicks and ad spend), kept as a cache that is replaced each time it refreshes, to show them in the app.
• Comments on your posts: to show the comments people left under the business's recent posts (Instagram, Facebook page, YouTube) and let the business answer them from the app, the commenter's public name and the comment text are read from the network and kept only as a short cache (a few minutes). The app stores only which comments the business marked as handled. Answers are posted on the network in the business's name.
• Paid promotion: the IDs, budgets, dates and status of the promotions and campaigns created through the app, and the suggestions the app made about them with your answers.

How we use it

• To publish content to your connected accounts, only after you approve it, at the time you choose.
• To create paid promotions and campaigns on Meta. They are always created paused; nothing is spent until you start them, and never beyond the daily limit you set. The app's daily check only suggests changes; nothing changes until you approve it.
• To show you the status and performance of your content and ads, and to send you approval requests and reports in Telegram.
• To suggest captions, plans and analysis. For this, the relevant text, media and statistics are sent to our AI provider (Anthropic), which under its commercial terms does not use them to train its models.

We do not sell your data, use it for advertising of our own, or share it with anyone except the service providers listed below.

YouTube and Google user data

Reynovation Social uses YouTube API Services to upload the videos you approve to your YouTube channel, to show which channel is connected, to show the comments on your channel's videos and post the replies you write, and to delete or replace a video you published through the app when you ask it to. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

Reynovation Social's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google APIs is used only to provide these features, is never sold, never used for advertising, never sent to our AI provider and never used to train AI models.

Service providers

Hosting (Netlify), database (Railway), media storage (Cloudinary), automation (n8n, self-hosted on Railway), notifications (Telegram) and AI (Anthropic). Each processes data only to provide its service to the app.

How it is protected

• Access tokens, refresh tokens and app secrets are encrypted in the database (AES-256-GCM). The encryption key is kept outside the database, in the hosting environment only. Each encrypted value is bound to its business and field, so it cannot be reused elsewhere.
• Tokens and secrets are never sent to the browser. The automation service receives the Instagram token only for the moment of publishing a post, and does not keep it.
• Requests to Meta carry tokens in headers, not in web addresses, and app secrets are sent only in request bodies.

Retention

Account data and tokens are kept while an account is connected. Disconnecting a TikTok, LinkedIn, Threads, X or YouTube account in the app deletes its tokens from the app; for Meta, removing the app in Facebook ends its access. Cached statistics are replaced whenever they refresh. Your content and history stay until you delete them or ask us to.

How to revoke access

• Facebook / Instagram: Facebook → Settings & privacy → Settings → Business integrations → Reynovation Social → Remove. You can also edit which permissions it keeps there.
• TikTok: in the app, Settings → TikTok → disconnect; or in TikTok, Settings and privacy → Security → Manage app permissions.
• LinkedIn: in the app, Settings → LinkedIn → disconnect; or in LinkedIn, Settings → Data privacy → Permitted services.
• Threads: in the app, Settings → Threads → disconnect; or in Threads, Settings → Account → Website permissions.
• X: in the app, Settings → X → disconnect; or in X, Settings → Security and account access → Apps and sessions → Connected apps.
• YouTube: in the app, Settings → YouTube → disconnect (this also revokes the grant at Google); or in your Google Account's third-party connections (also reachable from security.google.com/settings/security/permissions).
• Telegram: block the bot, or ask us to remove your chat.

Deleting your data

Step by step: Data deletion.

Email reynovationn@gmail.com from the address you sign in with (or name the connected account) and ask for deletion. We delete the business's tokens, account data, content, statistics and history within 30 days and confirm by email. Removing the app in Facebook, TikTok, LinkedIn, Threads, X or your Google Account (above) stops all access immediately.

Contact

For questions or deletion requests: reynovationn@gmail.com.