Privacy Policy
Last updated: 18 October 2026
This policy explains how Nodreel ("we", "us") collects, uses, shares and protects personal data when you use nodreel.com, the Nodreel dashboard and our marketing services. It also explains how we handle data we receive from Facebook and Instagram when you connect your accounts.
1. Who we are
Nodreel is a brand of Daizen Services Pvt Ltd, Hyderabad, Telangana, India · Email: privacy-nodreel@nodreel.com · Website: nodreel.com
We are the data controller for personal data we collect about website visitors and clients. When we manage social media accounts for a client, we process that account's data on the client's instructions.
2. Data we collect
- Information you give us: name, work email, company, phone or WhatsApp number, country or time zone, and messages you send through our forms or by email.
- Account information: your login email and password (stored securely by our authentication provider) and your role in your organisation.
- Content you share: photos, videos, captions, comments and approvals you upload or make in the dashboard.
- Connected social account data: when you connect Facebook or Instagram, we receive the data listed in section 3.
- Usage data: basic technical information such as browser type and pages visited, used to keep the service secure and working.
3. Data from Facebook and Instagram
If you choose to connect a Facebook Page or Instagram professional account, you sign in through Meta's own login and choose which permissions to grant. We never see or store your Facebook or Instagram password. Depending on the permissions you grant, we receive:
| Data | Why we use it |
|---|---|
| Your name and Meta user ID, and the Pages and Instagram accounts you manage | To show which accounts you have connected and let you choose where to publish |
| Page and Instagram account details (name, username, profile picture, account ID) | To display the right account in your dashboard |
| Page access tokens | To publish content you have approved, on your behalf and at the time you scheduled, to the accounts you connected. Tokens are kept on our servers only, encrypted at rest, and are never shown in the browser. |
| Basic insights on posts we publish (reach, likes, comments) | To create your monthly results report |
We use this data only to provide the Nodreel service to you. We do not sell it, use it for advertising profiles, or share it with data brokers. We only publish content that you (or your authorised team member) approve in the dashboard.
3a. Data from Google and YouTube
If you choose to connect a YouTube channel, you sign in through Google's own login and choose which permissions to grant. We never see or store your Google password. We request only these Google permissions:
| Google permission | Data | Why we use it |
|---|---|---|
| youtube.readonly | Your YouTube channel name and ID | To show which channel you connected, so you can confirm it before we upload |
| youtube.upload | Permission to upload videos to your channel | To upload videos that you (or your authorised team member) approved, with the title, description and visibility you approved |
We do not read, edit or delete your existing videos, comments or subscribers. Google user data is used only to provide these features, is not sold, is not used for advertising, and is not shared with third parties except as needed to provide the service or required by law. You can disconnect at any time from the Connect page or at myaccount.google.com/permissions, and ask us to delete your data at privacy-nodreel@nodreel.com.
To upload scheduled videos on time, we store a Google refresh token on our servers, encrypted at rest and never shown in the browser. It is used only for the youtube.upload and youtube.readonly purposes above and is revoked and deleted as soon as you disconnect YouTube.
Nodreel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Nodreel's use of YouTube API Services is also subject to the YouTube Terms of Service and the Google Privacy Policy.
4. How we use personal data
- To provide our services: planning, creating, approving, scheduling and publishing content, and reporting results.
- To reply to enquiries and book strategy calls.
- To send service messages, invoices and important updates.
- To keep our services secure and prevent misuse.
- To meet legal, tax and accounting obligations.
We process personal data because it is needed to perform our contract with you, because you have given consent (for example, when connecting social accounts), for our legitimate interests in running and improving our business, or to comply with the law.
5. Sharing
We share personal data only with service providers who help us run Nodreel, such as website hosting, form handling, email, cloud storage, payment processing and authentication providers. They may process data only on our instructions. We may also share data if required by law. We publish content to Facebook and Instagram only on your instruction.
6. International transfers
We are based in India and serve clients worldwide. Our service providers may store data in other countries. Where required, we use appropriate safeguards for these transfers.
7. How long we keep data
- Connected Facebook, Instagram and YouTube data and access tokens: until you disconnect the account, ask us to delete it, or end your contract. We then delete it within 30 days.
- Client content and reports: for the length of our contract plus up to 90 days, unless you ask us to delete it sooner.
- Enquiries from people who do not become clients: up to 12 months.
- Invoices and accounting records: as long as tax law requires.
8. Your rights
Depending on where you live (including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR), you may have the right to access, correct, delete or download your personal data, to withdraw consent, and to object to or restrict certain processing. To use these rights, email privacy-nodreel@nodreel.com. You may also complain to your local data protection authority.
9. Deleting your data
You can disconnect Facebook or Instagram at any time from your dashboard or from your Facebook and Instagram settings, and ask us to delete your data. See our Data Deletion Instructions.
10. Security
We use encryption in transit, access controls and reputable providers to protect personal data. Access tokens are stored encrypted and are only used by our systems to publish approved content.
11. Children
Our services are for businesses and professionals. We do not knowingly collect data from anyone under 18.
12. Changes
We may update this policy. We will post the new version here and update the date above, and tell clients about important changes.
13. Contact
Nodreel, Hyderabad, Telangana, India · Email: privacy-nodreel@nodreel.com · Website: nodreel.com