Privacy Policy

This Privacy Policy explains how NovaPush (novapush.bond) ("we", "us", "this platform") collects, uses, secures and manages your personal information. By using this platform or creating an account, you agree to the commitments described in this policy. Your privacy is of the utmost importance to us, and we make every reasonable effort to keep your data protected.

NovaPush uses YouTube API Services. When you connect a YouTube channel, we access and process certain Google/YouTube data as described in the "YouTube API Services & Google user data" section below. By connecting a YouTube channel and using NovaPush, you agree to be bound by the YouTube Terms of Service, and you confirm that you have read and agree to the Google Privacy Policy.

01 Information we collect

When you use our platform or create an account, we may collect the following types of information:

• Account information: Name, email address, password (in encrypted form), and profile-related information you provide to us.
• Content and media: Information about the videos, captions, hashtags and posts you upload, together with the video files themselves while they are being processed.
• Connected social accounts: When you connect a Facebook, Instagram, YouTube or TikTok account, the respective platform's access token (and, where the platform provides one, refresh token) and account name are collected with your permission.
• Support information: When you contact our live support, the messages you send and any screenshot or attachment you choose to upload are stored so that we can help you and so that you can see our reply.
• Usage information: Login time, browser type, device information, and page-level data used for analytics and security.
• Technical logs: Server logs, error reports and security-related event records.

02 YouTube API Services & Google user data

NovaPush uses YouTube API Services to publish videos to the YouTube channel that you connect and authorise. This section explains exactly what Google/YouTube data we access, why, how we use it, and how you can revoke access or delete it.

The scope we request. NovaPush requests a single Google OAuth scope:

• https://www.googleapis.com/auth/youtube.upload — used solely to upload (publish) the video files that you select to the YouTube channel that you own and have connected. This is the minimum scope required to perform the publishing function you have asked for. NovaPush does not request any broader YouTube permission (such as reading your private data, editing or deleting videos, or managing your channel).

What we access, collect and store. Through YouTube API Services we access, collect and store only:

• Your OAuth access token and refresh token for the connected channel, which we store in encrypted form so that we can publish on your instruction.
• Your YouTube channel ID and channel title, so we can show you which channel is connected.
• The result of each upload (for example the video ID and processing status) returned by the YouTube API, so we can show you the outcome and the link to your published video.

How we use and process it. This data is used only to (a) authenticate with YouTube on your behalf, (b) upload the videos you submit, and (c) display the result of those uploads to you. We do not sell or rent this data, we do not use it for advertising or profiling, and we do not share it with third parties except as required to operate the service (our hosting infrastructure) or as required by law.

Limited Use. NovaPush's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the user-facing features that you have explicitly requested (publishing your videos), and we do not use it for serving ads.

How to revoke access. You can revoke NovaPush's access to your Google/YouTube account at any time by visiting the Google security settings page (https://security.google.com/settings/security/permissions) and removing NovaPush, or by disconnecting the channel inside NovaPush on the Setup page. When you disconnect or revoke access, we stop using the token and delete the stored tokens and related Authorized Data within 7 calendar days. See section 05 for the full deletion procedure.

03 How your information is used

We use the collected information for the following purposes:

• To provide account management and authentication support.
• To publish your uploaded videos to your connected social platforms, including YouTube via YouTube API Services.
• To display analytics, audience insights and content performance.
• To respond to your live-support requests, including any screenshot you send us.
• To ensure security, prevent abuse and protect the platform's integrity.
• To send important updates, notifications and service-related information.
• To improve and develop new features of the platform.

04 Data retention

We retain your information only for as long as necessary to provide the service, and we apply the following specific retention rules to data obtained through Google/YouTube APIs (referred to as "Authorized Data"):

• Account and profile data: retained while your account is active, and deleted when you delete your account.
• Connected-account tokens: retained only while the account stays connected, and deleted within 7 calendar days of disconnecting or revoking access.
• General Authorized Data: retained for no longer than 30 calendar days, unless a shorter period is required, or unless the data is used solely for analytics, reporting or statistics (see below).
• Analytics / reporting / statistics data: may be retained for as long as necessary for those purposes, and we re-verify your authorisation at least every 30 calendar days; if authorisation is no longer valid, the data is deleted.
• Uploaded video files: the working copy of a video is removed from our storage after a successful publish or after a failed attempt is no longer needed.
• Support messages and screenshots: retained while the support ticket is open and for a reasonable period afterwards so we can resolve follow-up questions, then deleted on request or when no longer needed.

05 Data deletion & revoking access

You are in control of your data. You can request deletion of your stored data at any time through the support page (see section 12), or by using the disconnect and account-deletion options inside the app.

• When you disconnect a connected account, we stop using its token and delete the stored token and related Authorized Data within 7 calendar days.
• When you request deletion of your data, we delete the requested Authorized Data within 7 calendar days.
• When you delete your account, we delete your personal data and connected-account tokens as described in section 04.

06 Cookies & local storage

We use cookies and browser local storage to keep your login session, remember your preferences and improve the platform's functionality. These cookies can be controlled or cleared from your browser settings. Session cookies keep you logged in and are usually cleared once you close your browser. We do not use cookies to serve third-party advertising.

07 Ads, third parties & external services

NovaPush does not serve third-party advertising and does not sell your personal data. This platform connects with third-party services such as Facebook, Instagram, YouTube and TikTok in order to publish your content. These services have their own privacy policies and you will be bound by their terms when you use them. We are not responsible for the data-handling practices of these external services. We recommend reading the respective platform's policy before connecting your social account.

For YouTube in particular, please review the Google Privacy Policy and the YouTube API Services Terms of Service.

08 Security

We apply administrative, organisational and technical safeguards to protect your data and API Data from unauthorised access, disclosure, alteration and destruction. These include AES-256 encryption of stored tokens and secrets, HTTPS/TLS encryption of data in transit, prepared statements (protection against SQL injection), CSRF protection, strict access controls, and upload validation. However, no internet-connected storage method is 100% secure, so we cannot guarantee absolute security.

09 Your choices & requests

You have rights over your privacy. You can request any of the following at any time:

• To view or download your personal information.
• To correct incorrect or incomplete information.
• To delete your account and related information.
• To disconnect a connected social account (and revoke our access).
• To opt out of notifications or communications.

For these requests, please contact us through the support page (see section 12). We make every effort to respond within a reasonable time, and we complete deletion requests within 7 calendar days as described in section 05.

10 Children's privacy

This platform is not intended for children under 13 years of age. We do not knowingly collect personal information from anyone under 13. If you believe we have accidentally collected a child's information, please contact us so that we can promptly delete that information.

11 Changes to this policy

We may update this Privacy Policy as needed. For significant changes, we will try to notify you via notifications on the platform or by email. The "Last updated" date at the top of this page indicates when the policy was last revised, and the updated policy becomes effective immediately. Please review this page periodically to stay informed about the policy.