Zuhar ("we", "our", "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use the Zuhar platform, including our website at zuhar.co, mobile applications, and all associated services (collectively, the "Platform").
By using Zuhar, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Platform.
1. Information We Collect
We collect information in the following ways:
A. Account & Registration Data
- Full name and email address provided during registration
- Password — stored as a secure cryptographic hash (bcrypt). We never store your plain-text password.
- Google Sign-In data — if you authenticate via Google OAuth, we receive your public profile name and email only
- Profile information — bio, niche tags, profile photo, and creator preferences you add to your Zuhar profile
B. Connected Social Media Account Data
- OAuth access tokens and refresh tokens — encrypted and stored server-side to enable posting and analytics on your behalf
- Platform identifiers — your account ID, username, and handle on each connected platform (Instagram, YouTube, LinkedIn, TikTok, Facebook, Threads, Twitter/X)
- Follower counts, engagement rates, and analytics data — fetched via official platform APIs to populate your dashboard
- Audience demographic data — age groups, gender, location, and language data from platform APIs (aggregated, never individual follower data)
C. Content & Media Data
- Posts, captions, and drafts you create or schedule within Zuhar
- Media files (images and videos) you upload, stored securely on AWS S3
- AI-generated content history — captions, hashtags, and hooks generated through our AI tools
- Link in Bio content — links, testimonials, brand logos, and profile customizations
D. Payment & Subscription Data
- Subscription plan details and billing history
- Payment is processed by Razorpay — we do not store raw card numbers or bank details on our servers
- Transaction identifiers and subscription status are stored for account management
E. Usage & Technical Data
- IP address, browser type, and device information
- Pages visited, features used, and session duration
- Error logs and crash reports for platform improvement
2. How We Use Your Information
We use your information to:
- Create and manage your Zuhar account and authenticate your identity
- Publish, schedule, and manage content on connected social media platforms on your behalf
- Fetch and display analytics, audience insights, and performance data from your connected accounts
- Power AI content generation tools (captions, hooks, hashtags) using your inputs
- Facilitate brand deals, agreements, and payments through the marketplace
- Process subscription payments and manage billing
- Send transactional emails (account verification, payment receipts, deal notifications)
- Improve platform features, fix bugs, and ensure security
- Comply with legal obligations
We will never:Sell your personal data to third parties. Use your content for advertising without consent. Share your social media credentials with any external party.
3. Social Media API Compliance
Zuhar integrates with social media platforms through their official APIs. We operate in strict compliance with:
- Meta Platform Policies — Instagram and Facebook Graph API Terms of Service
- YouTube API Services Terms of Service — including the Google Privacy Policy
- LinkedIn API Terms of Use
- Twitter/X Developer Agreement and Policy
- TikTok for Developers Terms of Service
OAuth access tokens are stored in encrypted form and used only to perform actions explicitly authorized by you (scheduling posts, fetching analytics). We request only the permissions necessary for your chosen features and never access private messages or non-public data.
You may revoke Zuhar's access to any connected platform at any time — either from within Zuhar's Connected Accounts settings, or directly from the social platform's app permissions page.
4. Data Storage & Security
- Infrastructure: Data is hosted on secure cloud infrastructure with industry-standard access controls
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
- Encryption at rest: Sensitive tokens and credentials are encrypted using AES-256-GCM before database storage
- Password hashing: Passwords are hashed using bcrypt with a minimum of 12 salt rounds
- Media storage: Uploaded files are stored on AWS S3 with private access controls
- Access control: Internal access to user data is strictly limited to authorized personnel on a need-to-know basis
While we implement strong security measures, no system is 100% immune to breaches. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
5. Third-Party Services
Zuhar uses the following third-party services. Each has its own Privacy Policy:
- Razorpay — Payment processing (razorpay.com/privacy)
- AWS (Amazon Web Services) — Cloud infrastructure and file storage
- Meta APIs — Instagram and Facebook integrations
- Google APIs — YouTube integration and Google Sign-In
- OpenAI / Anthropic — AI content generation (your inputs are processed per their privacy terms)
6. Data Retention
- Active accounts: Data is retained as long as your account is active
- Deleted accounts: Upon account deletion request, personal data is permanently deleted within 30 days, except where required by law (e.g., financial records)
- Published content: Content already published to social platforms remains on those platforms and is subject to their retention policies
- Scheduled posts not yet published: Deleted immediately upon account deletion
- OAuth tokens: Revoked and deleted upon disconnecting an account or deleting your Zuhar account
7. Your Rights (GDPR / CCPA)
Depending on your location, you have the following rights regarding your personal data:
- Right to Access: Request a copy of all personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and all associated data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Restrict Processing: Limit how we use your data in certain circumstances
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Disconnect social accounts or withdraw consent at any time
To exercise any of these rights, contact us at privacy@zuhar.co. We will respond within 30 days.
8. Cookies & Tracking
Zuhar uses essential cookies required for authentication and platform functionality (e.g., maintaining your login session). We do not use third-party advertising cookies or sell your browsing behavior to advertisers.
9. Children's Privacy
Zuhar is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us immediately at privacy@zuhar.co and we will delete the account.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on the Platform. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of Zuhar after changes constitutes acceptance of the updated Policy.
11. Contact Us
For privacy-related questions, data requests, or concerns:
- Email: privacy@zuhar.co
- Website: zuhar.co/contact