Privacy Policy

1. Who We Are

Nurzun ("Nurzun", "we", "us", or "our") provides software, business automation, productivity, and digital services for businesses, organizations, and individuals.

Our services may include tools that allow users to connect and manage third-party platforms and services, including social-media and content platforms.

For privacy-related questions, please contact us using the contact information provided at the end of this Privacy Policy.

Website: https://nurzun.com
Privacy Policy: https://nurzun.com/privacy-policy.html

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

• Nurzun websites and web applications;
• Nurzun Social Automation;
• Nurzun software and SaaS products;
• account registration and authentication;
• customer support and communications;
• integrations with third-party services;
• APIs and OAuth-based connections; and
• other services that link to or expressly adopt this Privacy Policy.

This Privacy Policy does not control the privacy practices of third-party services that you choose to connect to Nurzun. Those services have their own privacy policies and terms.

3. Information We Collect

Depending on how you use Nurzun, we may collect the following categories of information.

3.1 Account Information

When you create or use a Nurzun account, we may collect information such as:

• name;
• email address;
• account credentials;
• organization or business name;
• profile information;
• account preferences; and
• information necessary to authenticate your account.

We do not collect passwords for third-party services such as Google, LinkedIn, Meta, or YouTube.

3.2 Authentication and OAuth Information

When you connect a third-party service to Nurzun, we may receive authentication information provided through that service's OAuth authorization process.

Depending on the integration, this may include:

• access tokens;
• refresh tokens;
• authorization identifiers;
• account identifiers;
• organization or page identifiers;
• scopes and permissions granted to Nurzun; and
• other information necessary to maintain the authorized connection.

OAuth credentials are used only for the purposes for which you have authorized Nurzun. We do not request or collect your third-party account password through Nurzun.

3.3 Social-Media and Platform Information

If you connect a social-media or content platform to Nurzun, we may process information made available through the permissions you grant.

Depending on the platform and permissions, this may include:

• account or profile identifiers;
• organization or page identifiers;
• channel information;
• social-media content;
• posts;
• videos;
• captions;
• media metadata;
• publishing status;
• engagement or analytics information;
• comments or other platform information where permitted; and
• information required to publish or manage content on your behalf.

The exact information available to Nurzun depends on the permissions granted by you and the APIs made available by the relevant third-party platform.

3.4 Content You Provide

You may provide content to Nurzun for processing, scheduling, management, or publication, including:

• text;
• captions;
• images;
• videos;
• logos;
• documents;
• links;
• marketing materials;
• campaign information;
• schedules; and
• other business or social-media content.

You remain responsible for ensuring that you have the necessary rights and permissions to use content that you submit to Nurzun.

3.5 Technical and Usage Information

When you access our services, we may automatically collect certain technical information, such as:

• IP address;
• browser type;
• operating system;
• device information;
• approximate location derived from technical information;
• pages or features accessed;
• access times;
• referring pages;
• error information;
• security events; and
• usage information relating to our services.

We use this information to operate, secure, maintain, troubleshoot, and improve our services.

3.6 Communications

If you contact us, we may retain information associated with the communication, including your name, email address, message, attachments, and other information you choose to provide.

4. How We Use Information

We may use information we collect for the following purposes:

1. To provide and operate Nurzun services.
2. To create and manage user accounts.
3. To authenticate users and maintain secure sessions.
4. To establish and maintain authorized third-party integrations.
5. To publish, schedule, manage, or otherwise process content at your direction.
6. To provide customer support.
7. To communicate with you about your account or services.
8. To monitor and improve service performance.
9. To detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents.
10. To comply with applicable laws and legal obligations.
11. To enforce our terms and protect our rights.
12. To develop and improve our products and services.
13. To maintain system reliability and security.
14. To generate aggregated or de-identified information where appropriate.

We do not use third-party authentication credentials for purposes unrelated to the services or permissions you have authorized.

5. Social-Media Integrations

Nurzun may provide integrations with third-party platforms such as LinkedIn, YouTube, Meta, Facebook, Instagram, WhatsApp, and other services.

When you connect an external platform, you authorize Nurzun to access information and perform actions permitted by the scopes and permissions that you approve.

For example, depending on the integration, you may authorize Nurzun to:

• access your channel or organization information;
• upload or publish content;
• schedule content;
• manage authorized posts;
• retrieve publishing status;
• retrieve permitted analytics; or
• perform other API operations that you explicitly authorize.

Nurzun does not obtain more permissions than those granted through the applicable authorization process.

Third-party platforms may independently collect and process information according to their own privacy policies.

6. Google and YouTube

Nurzun may integrate with Google services, including YouTube.

When you authorize a Google or YouTube integration, Google may provide Nurzun with OAuth credentials and information permitted by the scopes you approve.

For example, Nurzun may use authorized YouTube API access to upload, manage, or otherwise interact with YouTube content on your behalf.

Nurzun's use of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements, including applicable Limited Use requirements.

You can review and revoke third-party access through your Google Account settings. Google's own privacy practices are governed by Google's Privacy Policy.

7. LinkedIn

Nurzun may integrate with LinkedIn services.

If you authorize a LinkedIn integration, Nurzun may process information made available through LinkedIn's APIs and permissions that you grant.

Depending on the permissions available to the application, this may include information necessary to publish or manage content for an authorized LinkedIn profile or organization.

You may revoke the application's access through the relevant LinkedIn account settings.

LinkedIn independently controls its own processing of personal information under its applicable privacy policy.

8. Meta and Other Platforms

Nurzun may provide integrations with Meta products and other third-party platforms.

Where an integration is available, Nurzun processes information received through the relevant API only according to the permissions and purposes authorized by the user and permitted by the applicable platform.

Third-party services may have additional requirements, restrictions, or privacy practices. Users should review the privacy policies and terms of each service they connect to Nurzun.

9. How We Share Information

We may share information in limited circumstances, including:

Service Providers

We may use trusted service providers that help us operate our services, such as:

• hosting providers;
• database providers;
• cloud infrastructure providers;
• email providers;
• authentication providers;
• analytics providers;
• security providers;
• payment processors;
• content-delivery providers; and
• other technology providers necessary to provide our services.

These providers may process information only as necessary to provide services to us or as otherwise permitted by applicable law.

Third-Party Platforms

When you explicitly connect and authorize a third-party service, Nurzun may exchange information with that service as necessary to perform the functionality you requested.

Legal Requirements

We may disclose information where reasonably necessary to:

• comply with a legal obligation;
• respond to lawful requests;
• protect the rights, property, or safety of Nurzun, our users, or others;
• investigate fraud or abuse; or
• enforce applicable agreements.

Business Transactions

If Nurzun is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable legal requirements.

We do not sell personal information as a business practice.

10. Security

We take reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, or destruction.

Depending on the service and circumstances, these measures may include:

• encrypted connections;
• access controls;
• authentication mechanisms;
• credential protection;
• logging and monitoring;
• least-privilege access;
• security updates;
• backups; and
• administrative safeguards.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and notifying us if you believe your account or an integration has been compromised.

11. OAuth Tokens and Credentials

OAuth tokens and similar credentials are security-sensitive information.

Where technically supported, Nurzun stores such credentials using appropriate security controls and uses them only to maintain the authorized integration and perform permitted actions.

You should never send access tokens, refresh tokens, API keys, client secrets, or passwords to us through public channels.

If you believe an OAuth credential associated with Nurzun has been exposed, you should revoke the affected authorization through the relevant third-party platform and contact us.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• providing our services;
• maintaining account functionality;
• maintaining authorized integrations;
• fulfilling contractual obligations;
• resolving disputes;
• preventing abuse;
• maintaining security;
• complying with legal requirements; and
• maintaining legitimate business records.

Retention periods may vary depending on the type of information and the purpose for which it was collected.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable legal and operational requirements.

13. Data Deletion

You may request deletion of personal information associated with your Nurzun account, subject to applicable legal and legitimate business requirements.

You may also disconnect third-party integrations through the relevant service or Nurzun interface where supported.

For deletion requests, contact us using the contact information provided below.

When a deletion request is received, we will take reasonable steps to identify the relevant information and process the request in accordance with applicable law.

Some information may need to be retained where required by law, necessary to establish or defend legal claims, or required for legitimate security or accounting purposes.

14. Cookies and Similar Technologies

Nurzun may use cookies and similar technologies to:

• maintain login sessions;
• remember preferences;
• provide security;
• understand service usage;
• improve performance; and
• support essential functionality.

Where required by applicable law, we will obtain appropriate consent before using non-essential cookies or similar technologies.

You may configure your browser to reject or delete cookies. Certain features may not function correctly if essential cookies are disabled.

15. Children's Privacy

Nurzun's general software and business automation services are not directed toward children.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and take appropriate action.

16. International Data Transfers

Depending on the infrastructure and service providers used by Nurzun, information may be processed or stored in countries other than the country in which you reside.

Where applicable, we take reasonable steps to ensure that international transfers are handled in accordance with applicable data-protection requirements.

Third-party platforms connected to Nurzun may independently process information in other jurisdictions according to their own policies.

17. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to:

• access personal information;
• request correction of inaccurate information;
• request deletion;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable privacy or data-protection authority.

To exercise applicable rights, contact us using the information below.

We may need to verify your identity before completing certain requests.

18. Third-Party Services

Our services may contain links to or integrations with third-party websites, applications, APIs, or services.

We are not responsible for the privacy, security, content, or practices of third-party services.

Examples may include:

• Google;
• YouTube;
• LinkedIn;
• Meta;
• Facebook;
• Instagram;
• WhatsApp;
• Buffer;
• payment providers;
• hosting providers; and
• other services that you choose to connect.

We recommend reviewing the privacy policy of each third-party service before connecting it to Nurzun.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When we make material changes, we may update the "Last Updated" date and provide additional notice where appropriate.

Your continued use of the services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, subject to applicable law.

20. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of personal information, please contact us.

21. Platform-Specific Compliance

Nurzun may integrate with third-party platforms whose developer programs impose additional requirements concerning user data, authentication credentials, API access, data retention, deletion, and security.

Where applicable, Nurzun intends to comply with the policies and developer requirements of the platforms it integrates with.

Nothing in this Privacy Policy grants Nurzun permission to access a third-party account beyond the permissions explicitly authorized by the user and permitted by the applicable platform.