Privacy Policy
Last updated: March 15, 2026
Introduction
OZ Media Engine ("we", "us", "our") is a social media management platform operated by OZ Media Group. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
We collect information that you provide directly to us when using our service:
- Account Information: When you connect a social media account via OAuth, we receive and store access tokens, refresh tokens, and basic profile identifiers (such as user IDs and page IDs) necessary to publish content on your behalf.
- Content Data: Media files (images and videos) that you submit for processing, including cleaned and branded versions.
- Usage Data: Job logs, publishing history, and dashboard activity to provide service functionality and troubleshooting.
- Telegram Data: Your Telegram user ID and username when interacting with our bot interface.
How We Use Your Information
We use the information we collect to:
- Process and publish content to your connected social media accounts
- Apply branding and media cleaning as requested
- Maintain and improve our service
- Authenticate your identity and manage access permissions
- Automatically refresh expiring tokens to maintain service continuity
Third-Party Services
We interact with the following third-party platforms on your behalf:
- Twitter/X: OAuth 1.0a for posting tweets and uploading media
- Meta (Facebook & Instagram): Graph API for page posts and Instagram content publishing
- TikTok: Content Posting API for video publishing
- YouTube: Data API v3 for video uploads
- Bluesky: AT Protocol for post creation
- Threads: Graph API for content publishing
- Telegram: Bot API for user interaction
Each platform's use of your data is governed by their respective privacy policies. We only request the minimum permissions necessary for publishing functionality.
Data Storage & Security
All tokens are encrypted at rest using AES-256-GCM encryption. Our infrastructure runs on Railway with PostgreSQL databases. We do not sell, trade, or rent your personal information to third parties.
Data Retention
We retain your connected account tokens for as long as your accounts are linked. Media files submitted for processing are stored temporarily and may be cached for up to 24 hours. Job logs are retained for operational purposes. You may request deletion of your data at any time by contacting us.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect your social media accounts at any time
- Revoke OAuth permissions directly from each platform's settings
Children's Privacy
Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page.
Contact Us
If you have questions about this Privacy Policy, please contact us at: joserodrigo@gmail.com