Privacy Policy

Last updated: July 28, 2026

1. Information We Collect

When you use TravelSocial AI, we collect information you provide directly: your name, email address, phone number, business name, business category, and city. When you connect your social media accounts, we receive access tokens and platform-specific data necessary to provide our services.

2. How We Use Your Information

We use your information to: provide our social media management services, publish and schedule content to your connected platforms, display analytics and insights from your connected accounts, generate AI-powered content suggestions, send you notifications about your content performance and upcoming events, and improve our services.

3. Social Media Data

When you connect your social media accounts, we access only the data necessary to provide our services.

3.1 Meta Platforms (Facebook, Instagram, Threads)

We access: page/profile information, post content, performance metrics (reach, impressions, engagement), audience demographics (age, gender, location), and the ability to publish content on your behalf. We use Meta's Graph API and Threads API with the minimum required permissions.

3.2 Google Services (Google Business Profile, YouTube)

We access: business profile information, review data, performance metrics (search queries, views, direction requests), YouTube channel statistics (subscribers, views, engagement), and video performance data. We use Google's Business Profile API and YouTube Data API with the minimum required scopes. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.3 LinkedIn

We access: profile information, company page data, post performance metrics, and the ability to publish content. We use LinkedIn's API with the minimum required permissions.

3.4 YouTube

We access: channel statistics (subscriber count, total views), video metadata (titles, descriptions, publish dates), video performance metrics (views, likes, comments), and audience analytics. This data is used solely to display analytics within TravelSocial AI and is not shared with third parties. You can revoke access at any time through your Google Account permissions at https://myaccount.google.com/permissions.

4. Data Protection and Security

We implement the following measures to protect your data, including sensitive data received from third-party platforms:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS). All API communications with third-party platforms (Meta, Google, LinkedIn) use encrypted HTTPS connections.
• Encryption at rest: OAuth access tokens and refresh tokens for all connected platforms are stored in encrypted form in our database. Passwords are hashed using bcrypt with salt rounds.
• Access control: Access to user data is restricted to authenticated users only. Each user can only access their own data. Server access is restricted to authorized administrators via SSH key authentication.
• Token security: OAuth tokens are stored server-side only and are never exposed to the client browser. Tokens are refreshed automatically and old tokens are invalidated.
• Infrastructure security: Our servers are protected by firewalls. Database access is restricted to localhost only. Regular security updates are applied to the operating system and software dependencies.
• Minimal data collection: We follow the principle of least privilege and request only the minimum API scopes and permissions necessary to provide our services.

5. Data Retention

We retain your data as follows:

• Account data (name, email, business info): Retained for as long as your account is active.
• OAuth tokens: Retained while the platform connection is active. Tokens are deleted immediately when you disconnect a platform.
• Analytics data: Aggregated analytics data is retained for up to 12 months to provide historical insights. Raw API response data is not stored permanently.
• Post content: Retained for as long as your account is active or until you delete the post.
• AI-generated content: Generation history is retained for 90 days for your reference, then automatically purged.

6. Data Deletion

You have the right to request deletion of your data at any time:

• Disconnect a platform: Go to Connected Accounts and click disconnect. This immediately removes the OAuth tokens and stops all data access for that platform.
• Delete your account: Contact us at info.ritejtraveltech@gmail.com to request full account deletion. We will delete all your data, including account information, connected platform tokens, posts, analytics data, and AI generation history within 30 days.
• Google data deletion: You can also revoke TravelSocial AI's access to your Google data directly at https://myaccount.google.com/permissions.
• Meta data deletion: We provide a data deletion callback endpoint. You can also remove TravelSocial AI from your Meta account at Facebook Business Integrations.

7. Third-Party Services

We integrate with the following third-party platforms. Each platform has its own privacy policy:

• Meta (Facebook, Instagram, Threads) — Meta Privacy Policy
• Google (Business Profile, YouTube) — Google Privacy Policy
• LinkedIn — LinkedIn Privacy Policy
• X (Twitter) — X Privacy Policy

We use Claude AI (by Anthropic) and Gemini AI (by Google) to generate content suggestions. Your business information and post topics are sent to these AI services to generate captions and hashtags. No personal user data or platform analytics data is sent to AI services.

8. Data Sharing

We do not sell, rent, or trade your personal information or any data received from third-party platform APIs. We may share data only: with your explicit consent, to comply with legal obligations, or to protect our rights and safety. Platform-specific data (analytics, posts, tokens) is never shared with any third party.

9. Your Rights

You have the right to:

• Access your personal data stored in our system
• Correct inaccurate data
• Delete your account and all associated data
• Disconnect any connected social media account at any time
• Revoke platform access directly from your Google, Meta, or LinkedIn account settings
• Export your data upon request

10. Cookies

We use session cookies and JSON Web Tokens (JWT) to maintain your login state. We do not use tracking cookies, third-party advertising cookies, or any analytics tracking scripts.

11. Children's Privacy

TravelSocial AI is a business tool intended for use by businesses and individuals aged 18 and above. We do not knowingly collect personal information from children under 18.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

13. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, contact us at:

Ritej Travel Tech
Email: info.ritejtraveltech@gmail.com
Website: app.ninetours.in