Privacy Policy

Last updated: January 1, 2026

1. Introduction

Welcome to Novate ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your information when you use our cross-platform content publishing service.

This Privacy Policy applies to our website, mobile applications, and all related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, name, and password when you create an account
Profile Information: Timezone preferences and notification settings
Content: Posts, media, captions, and hashtags you create through our Service
Communications: Messages you send to us for support or feedback

2.2 Information from Connected Platforms

When you connect social media accounts (YouTube, Instagram, Facebook, etc.), we collect:

OAuth Tokens: Encrypted access and refresh tokens to post on your behalf
Profile Data: Username, profile picture, follower counts from connected platforms
Analytics: Post performance metrics (views, likes, comments, shares)
Channel/Account IDs: Unique identifiers for your connected accounts

2.3 Automatically Collected Information

Usage Data: Features used, pages visited, actions taken
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, error logs

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Publish content to your connected social media platforms
Display analytics and performance insights for your posts
Send notifications about your content performance (BAM alerts)
Respond to your requests and provide customer support
Detect, prevent, and address technical issues and fraud
Comply with legal obligations

4. Data Storage and Security

4.1 Token Encryption

All social media access tokens are encrypted using AES-256-GCM encryption before storage. We never store your social media passwords. OAuth tokens are the only credentials we retain, and they can be revoked at any time by disconnecting your accounts.

4.2 Data Storage

Your data is stored on secure servers with industry-standard security measures including:

Encrypted data transmission (TLS/SSL)
Encrypted data at rest
Regular security audits
Access controls and authentication

4.3 Data Retention

We retain your data for as long as your account is active. Post analytics data is retained for up to 2 years. You can request deletion of your account and all associated data at any time.

5. Data Sharing

We do not sell your personal information. We may share your information with:

Connected Platforms: To publish content on your behalf (YouTube, Instagram, etc.)
Service Providers: Cloud hosting, analytics, and infrastructure providers
Legal Requirements: When required by law or to protect our rights

6. Your Rights and Choices

6.1 Access and Portability

You can access and download your data through your account settings.

6.2 Correction

You can update your account information at any time through the Service.

6.3 Deletion

You can delete your account and all associated data by visiting the Account Deletion page. Upon deletion:

All connected platform tokens are immediately revoked and deleted
All posts, analytics, and personal data are permanently removed
This action cannot be undone

6.4 Disconnect Platforms

You can disconnect any social media platform at any time through your Connections settings. This immediately revokes our access to that platform.

6.5 Cookie Preferences

We use essential cookies for authentication and session management. You can control non-essential cookies through your browser settings.

7. Third-Party Services

Our Service integrates with third-party platforms. Each has their own privacy policies:

8. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: team@awaken-labs.com

12. Data Protection Rights (GDPR/CCPA)

Depending on your location, you may have additional rights including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

California residents: You have the right to know what personal information we collect and how we use it, the right to delete your information, and the right to opt-out of the sale of personal information (we do not sell personal information).