Privacy Policy

Introduction

Welcome to Planso ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media planning application.

Please read this Privacy Policy carefully. By accessing or using Planso, you acknowledge that you have read and understood this Privacy Policy.

Google Sign-In (OAuth) Data and Permissions

When you choose to sign in with Google, Planso uses Google OAuth to authenticate you and to retrieve basic profile information under the following scopes you approve: email, openid, and profile.

Specific Google User Data We Access

• Basic profile: name, email address, and profile image URL
• Google account identifier and ID token metadata necessary to verify your session
• Authentication tokens needed to keep your session signed in

How We Use Google User Data

• Create and authenticate your account and allow you to sign in securely
• Display your name and profile image in the app
• Maintain your session and personalize your experience

Data Sharing Related to Google Sign-In

We do not sell Google user data. We share Google user data only with:

• Google, as necessary to enable authentication and account management
• Our service providers acting as processors (hosting, monitoring) under confidentiality agreements

Retention and Deletion for Google Sign-In

• OAuth tokens are retained only while your Google account remains connected and are deleted upon disconnect or revocation.
• Operational logs may be retained for up to 90 days for security and troubleshooting.

Revoking Access

• Disconnect Google from our app settings to remove tokens and stop all syncing.
• Revoke our access from your Google Account at myaccount.google.com/permissions.
• Request deletion by emailing contact@planso.media.

Security Practices

• Tokens encrypted at rest and transmitted only over HTTPS/TLS
• Least-privilege access controls and restricted staff access

YouTube Data API Permissions and Data Use

To support features like viewing your channel data, managing drafts, and publishing videos to your channel, Planso integrates with the YouTube Data API when you grant the following scopes: youtube readonly, youtube upload, and youtube download.

Specific YouTube Data We Access

• Channel and account metadata (e.g., channel ID, title) as needed to link your account
• Video metadata for your content (titles, descriptions, tags, privacy status, thumbnails)
• Upload media you choose to publish (video files and thumbnails you provide)
• Copies of your videos you explicitly request to download for use within the app
• Access tokens and token metadata required to maintain your connection

How We Use YouTube Data

• Display your channel information relevant to publishing workflows
• Allow you to draft, schedule, upload, and publish videos to your YouTube channel
• Fetch read-only metadata to manage drafts and confirm publishing status
• Provide optional downloads of your own videos only when you request them
• Troubleshoot upload and publishing errors and improve reliability

Data Sharing Related to YouTube

We do not sell YouTube data. We share YouTube data only with:

• Google/YouTube, as necessary to provide login, read metadata, upload content, and manage your channel content per your actions
• Service providers acting as processors (hosting, monitoring) under confidentiality and data processing agreements

Use Restrictions

We use Google user data and YouTube data solely to provide and improve user-facing features. We do not use such data for advertising, selling to third parties, determining creditworthiness, personalized or interest-based ads, creating unrelated databases, or training AI models.

Retention of YouTube Data

• Access tokens: retained only while your YouTube account remains connected; deleted immediately upon disconnect or revocation.
• Uploaded media and associated metadata stored only as needed to perform the upload/publish workflow and to manage drafts/scheduled posts.
• Operational logs and error data: retained up to 90 days for security and troubleshooting.

Revoking Access and Deleting YouTube Data

• Disconnect YouTube in our app settings to remove tokens and stop all syncing/publishing.
• Revoke our app’s permissions from your Google Account: myaccount.google.com/permissions.
• Submit a deletion request via email: contact@planso.media. We comply with user-initiated deletion requests.

Security Practices for YouTube Data

• Access tokens encrypted at rest and rotated on refresh where applicable
• All data transmitted over HTTPS/TLS
• Principle of least privilege and restricted staff access
• Monitoring and alerts for suspicious access patterns

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using Planso, including:

• Account information (name, email address, username, password)
• Profile picture and customization settings
• Social media account credentials (when you choose to connect them)
• Content you create, upload, or store within the application
• Subscription and billing information (subscription plan, payment status, transaction history)

Subscription and Payment Information

When you purchase a subscription to Planso, we collect:

• Subscription plan details and billing preferences
• Payment transaction receipts from Apple App Store or Google Play Store
• Subscription status and renewal information (managed through RevenueCat)
• Purchase history and subscription analytics

Important: We use RevenueCat, a third-party service, to manage subscription data and analytics. Actual payment processing is handled by Apple App Store (iOS) or Google Play Store (Android). RevenueCat and the app stores may collect additional information as described in their respective privacy policies. We do not directly store or process your credit card or payment method details.

Device Media Access

Planso requests access to your device's media library to help you select and schedule media for your social posts. You can choose to provide either:

• Limited access: Select specific photos/videos individually
• Full access: Allow Planso to access your entire media library

Important: To enable scheduling and publishing features, selected photos and videos may be uploaded to and stored on our servers for processing (for example, drafts, previews, and queued posts). We only store media that you select or upload for use in the app, and you can remove uploaded media from within the app.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Planso functionality
• Process and fulfill your requests for scheduling and posting content
• Process subscription payments and manage your subscription status
• Send you subscription-related notifications, billing reminders, and renewal notices
• Send you technical notices, updates, and administrative messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns and trends to enhance user experience
• Protect against, identify, and prevent fraud and other harmful activities

Instagram Platform Permissions and Data Use

To enable Instagram content publishing and scheduling features, Planso integrates with Meta's Instagram Platform and requests the following permissions:

• instagram_business_basic: Read Instagram Business Account profile and media (e.g., name, username, profile picture) and read media metadata (images, videos, captions, timestamps).
• instagram_content_publish: Create and publish organic feed posts on behalf of your connected Instagram Business Account.

Specific Instagram Data We Access

With your explicit consent during login, we may access:

• Instagram Business Account profile information: name, username, profile picture, account ID
• Media and media metadata: images, videos, captions, timestamps, media IDs, permalink URLs
• Publishing status and results of posts created via our app
• Access tokens and token metadata required to maintain your connection

How We Use Instagram Data

• Display your connected account and media within the app
• Allow you to draft, schedule, and publish content to Instagram
• Provide basic analytics on scheduled/published posts (e.g., status, timestamps)
• Troubleshoot publishing errors and improve reliability

We use instagram_content_publish strictly to create/publish organic feed posts on behalf of the connected Business account you authorize.

Legal Basis and Consent

You provide explicit consent when you connect your Instagram Business Account and grant the requested permissions through Meta's consent screen. You may withdraw consent at any time by disconnecting your account and revoking permissions (see Revoking Access below).

Retention of Instagram Data

• Access tokens: retained only while your Instagram account remains connected; deleted immediately upon disconnect or revocation.
• Media metadata and scheduling details: retained up to 12 months after disconnect, unless you request earlier deletion.
• Operational logs and error data: retained up to 90 days for security and troubleshooting.

If you request deletion, we will delete Instagram-derived data that we store, except where retention is required by law or to resolve disputes.

Data Sharing Related to Instagram

We do not sell Instagram data. We share Instagram data only with:

• Meta platforms (Instagram/Facebook) as necessary to provide login, reading media, and publishing.
• Service providers acting as processors (hosting, monitoring, analytics) under confidentiality and data processing agreements.

Meta may process your data in accordance with their own policies. See Instagram Privacy Policy, Meta Privacy Policy, and Meta Platform Terms.

Revoking Access and Deleting Instagram Data

You can revoke access and request deletion at any time:

• Disconnect Instagram in our app settings (this removes tokens and stops all syncing/publishing).
• Revoke our app's permissions from your Facebook account settings: Business Integrations.
• Submit a deletion request via email: contact@planso.media. We comply with user and Meta-initiated deletion requests.

Security Practices for Instagram Data

• Access tokens encrypted at rest and rotated on refresh where applicable
• All data transmitted over HTTPS/TLS
• Principle of least privilege and restricted staff access
• Monitoring and alerts for suspicious access patterns

Regional Rights

Depending on your location, you may have rights under GDPR, CCPA/CPRA, or other laws, including access, correction, deletion, portability, and restriction of processing. You can exercise these rights by contacting us at contact@planso.media.

Data Storage and Security

Media that you select or upload for scheduling and publishing may be stored on our servers so we can provide core functionality such as drafts, previews, and queued posts. This storage is limited to the media you choose to use within the app.

We store only essential information required for the app's functionality on our servers, such as:

• Your account information
• Profile pictures
• Uploaded media used for scheduling or publishing (images, videos, thumbnails)
• Social media connections
• Scheduled posts configuration
• Subscription status and billing information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Information Sharing

We may share your information with:

• Third-party social media platforms when you choose to schedule and publish content
• Apple App Store (iOS) or Google Play Store (Android) for payment processing
• RevenueCat for subscription management and analytics services
• Service providers who perform services on our behalf (hosting, analytics, customer support)
• As required by law or to protect our rights and safety

App Store Payment Processing: All subscription payments are processed directly by Apple App Store (for iOS users) or Google Play Store (for Android users). These platforms handle your payment information according to their respective privacy policies.

RevenueCat: We use RevenueCat to manage subscription data, track subscription status, and provide analytics. RevenueCat may collect and process information including your purchase history, subscription status, and device identifiers. Please review RevenueCat's, Apple's, and Google's privacy policies for more information about their respective data practices.

We do not sell your personal information to third parties for marketing purposes.

Your Rights and Choices

You have several rights regarding your personal information:

• Access and update your account information through app settings
• Modify device media permissions through your device settings
• Manage your subscription, including cancellation, through your Apple App Store or Google Play Store account settings
• Request deletion of your account and associated data
• Opt-out of marketing communications
• Request a copy of your personal data we store

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

Children's Privacy

Planso is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date.

Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Upon account deletion, we will take reasonable steps to delete your personal information. This includes your account details, profile picture, and any content you created within the application that is stored on our servers. Subscription and billing information may be retained for longer periods as required by law, tax regulations, or for legitimate business purposes such as fraud prevention and financial record-keeping. Please note that some information may remain in our backup archives for a limited period, as required by law or for legitimate business purposes. We will not use this data for any other purpose.

Subscription Data: Apple App Store and Google Play Store maintain their own data retention policies for payment and transaction information. RevenueCat also maintains subscription analytics and status data according to their retention policies. Even after your account deletion, these third-party services may retain transaction records according to their respective policies and applicable legal requirements.

Content you have chosen to publish on third-party social media platforms via Planso will remain on those platforms according to their respective retention policies, even after your Planso account is deleted.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Developer Organization: Sploding Enterprises
Email: contact@planso.media
Address: Haryana, India