Privacy Policy
Last updated: 15 October 2026
This policy explains how Nodreel ("we", "us") collects, uses, shares and protects personal data when you use nodreel.com, the Nodreel dashboard and our marketing services. It also explains how we handle data we receive from Facebook and Instagram when you connect your accounts.
1. Who we are
Nodreel, Hyderabad, Telangana, India · Email: hello@nodreel.com · Website: nodreel.com
We are the data controller for personal data we collect about website visitors and clients. When we manage social media accounts for a client, we process that account's data on the client's instructions.
2. Data we collect
- Information you give us: name, work email, company, phone or WhatsApp number, country or time zone, and messages you send through our forms or by email.
- Account information: your login email and password (stored securely by our authentication provider) and your role in your organisation.
- Content you share: photos, videos, captions, comments and approvals you upload or make in the dashboard.
- Connected social account data: when you connect Facebook or Instagram, we receive the data listed in section 3.
- Usage data: basic technical information such as browser type and pages visited, used to keep the service secure and working.
3. Data from Facebook and Instagram
If you choose to connect a Facebook Page or Instagram professional account, you sign in through Meta's own login and choose which permissions to grant. We never see or store your Facebook or Instagram password. Depending on the permissions you grant, we receive:
| Data | Why we use it |
|---|---|
| Your name and Meta user ID, and the Pages and Instagram accounts you manage | To show which accounts you have connected and let you choose where to publish |
| Page and Instagram account details (name, username, profile picture, account ID) | To display the right account in your dashboard |
| Access tokens | To publish content you have approved, on your behalf, to the accounts you connected |
| Basic insights on posts we publish (reach, likes, comments) | To create your monthly results report |
We use this data only to provide the Nodreel service to you. We do not sell it, use it for advertising profiles, or share it with data brokers. We only publish content that you (or your authorised team member) approve in the dashboard.
4. How we use personal data
- To provide our services: planning, creating, approving, scheduling and publishing content, and reporting results.
- To reply to enquiries and book strategy calls.
- To send service messages, invoices and important updates.
- To keep our services secure and prevent misuse.
- To meet legal, tax and accounting obligations.
We process personal data because it is needed to perform our contract with you, because you have given consent (for example, when connecting social accounts), for our legitimate interests in running and improving our business, or to comply with the law.
5. Sharing
We share personal data only with service providers who help us run Nodreel, such as website hosting, form handling, email, cloud storage, payment processing and authentication providers. They may process data only on our instructions. We may also share data if required by law. We publish content to Facebook and Instagram only on your instruction.
6. International transfers
We are based in India and serve clients worldwide. Our service providers may store data in other countries. Where required, we use appropriate safeguards for these transfers.
7. How long we keep data
- Connected Facebook and Instagram data and access tokens: until you disconnect the account, ask us to delete it, or end your contract. We then delete it within 30 days.
- Client content and reports: for the length of our contract plus up to 90 days, unless you ask us to delete it sooner.
- Enquiries from people who do not become clients: up to 12 months.
- Invoices and accounting records: as long as tax law requires.
8. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR), you may have the right to access, correct, delete or download your personal data, to withdraw consent, and to object to or restrict certain processing. To use these rights, email hello@nodreel.com. You may also complain to your local data protection authority.
9. Deleting your data
You can disconnect Facebook or Instagram at any time from your dashboard or from your Facebook and Instagram settings, and ask us to delete your data. See our Data Deletion Instructions.
10. Security
We use encryption in transit, access controls and reputable providers to protect personal data. Access tokens are stored encrypted and are only used by our systems to publish approved content.
11. Children
Our services are for businesses and professionals. We do not knowingly collect data from anyone under 18.
12. Changes
We may update this policy. We will post the new version here and update the date above, and tell clients about important changes.
13. Contact
Nodreel, Hyderabad, Telangana, India · Email: hello@nodreel.com · Website: nodreel.com