Privacy Policy

1. Scope

This Privacy Policy explains what personal data is collected when you use NuxShare (https://nuxshare.com), how it is used, and your rights. NuxShare is a publishing tool that lets you manage multiple social media accounts from a single panel and share content instantly or on a schedule.

2. Data We Collect

Account data: your name, e-mail address and password (passwords are stored only as irreversible hashes). If you sign in with Google, we receive your name, e-mail address and account identifier from your Google profile and use them solely to create your account and sign you in.

Connected social account data: for each social account you connect — the platform, account ID, username, profile picture and the access/refresh tokens issued by the platform. Tokens are stored encrypted with AES-256-GCM.

Content data: the post texts you compose, their scheduling details, and the images/videos you upload to your gallery.

Technical data: diagnostic information such as request URL and IP address in error logs, and cookies holding your session and language preference.

3. How We Use Data

We use your data solely to provide the service: signing you in, connecting your social accounts, publishing the content you created to the accounts you selected at the time you chose, troubleshooting and support. Your data is never used for advertising and never sold to third parties.

4. Third-Party Platforms

To publish, your content is transmitted only to the official APIs of the platforms for the accounts you connected: Meta (Facebook and Instagram), X, Telegram, LinkedIn, Pinterest and TikTok. Activity on those platforms is governed by their own privacy policies and terms. When you disconnect an account, its tokens are deleted.

5. Cookies

We only use cookies strictly required for the service: a session cookie (your sign-in state) and a language preference cookie. No advertising or tracking cookies are used.

6. Retention and Security

Your data is retained while your account is active. Passwords are hashed with scrypt, social account tokens are encrypted with AES-256-GCM, and all traffic is served over HTTPS. Your media files are stored in per-user isolated storage and are accessible only to you.

7. Deleting Your Data and Your Rights

You can disconnect any social account at any time from the Accounts page; the disconnected account's tokens and pending posts are removed. Data deletion requests received from Meta (Facebook/Instagram) are processed automatically and can be verified on our confirmation page. To request permanent deletion of your account and all data, or to access or correct your data, contact destek@nuxshare.com. Your rights of access, rectification, erasure and objection under GDPR and Turkish KVKK are reserved.

8. Changes and Contact

Material changes to this policy will be published on this page. Questions: destek@nuxshare.com