Privacy Policy

What we do

TapIn Social helps users find relevant social conversations, draft useful comments, post them from connected accounts, and measure resulting growth.

Information we collect

• Account information you provide, such as your name, email address, brand details, and targets.
• Connected social account information, such as handles, account IDs, profile metadata, and connection status.
• OAuth tokens or provider credentials needed to operate connected accounts, stored server-side.
• Usage data, such as setup choices, comments created, post URLs, boost status, and growth metrics.

How we use information

• To connect accounts you authorize.
• To find posts, videos, and conversations that match your targeting.
• To draft, post, verify, and boost comments according to your settings.
• To show reports and improve product reliability.

Google and YouTube data

If you connect YouTube, TapIn Social uses YouTube API Services and Google OAuth to request permission to manage YouTube interactions you authorize. We use this access to identify the connected channel, refresh access when needed, post comments or replies you have configured the service to make, and check connection health. The Google Privacy Policy is available at https://policies.google.com/privacy.

We do not sell Google user data. We do not use Google user data for advertising, retargeting, credit decisions, data broker services, or to train generalized AI or machine learning models. We only use Google user data to provide or improve the YouTube-facing features you request in TapIn Social.

How we protect Google user data

• Google user data is transmitted over HTTPS/TLS when it moves between your browser, our service, and Google APIs.
• OAuth refresh tokens and provider credentials are stored server-side and encrypted before database storage using AES-256-GCM. Encryption keys are kept in server environment secrets, not in client code.
• Access to production systems and sensitive account data is limited to authorized operators who need access to operate, debug, secure, or support the service.
• We do not ask for or store your Google or YouTube password. You authorize access through the Google OAuth consent flow and can revoke access from your Google account security settings.

Sharing

We do not sell personal information or Google user data. We may share information with infrastructure, analytics, hosting, database, or API providers only as needed to operate the service, comply with law, protect the service from abuse, or support the user-facing features you request.

Retention and deletion

We keep account and activity data while your account is active or as needed to provide the service. You can request deletion or disconnection of social accounts by contacting ahmed.m.abdelmottaleb@gmail.com. You can also revoke Google access at https://security.google.com/settings/security/permissions. After revocation or deletion, YouTube posting and reporting features may stop until you reconnect the account.

Contact

Questions or requests can be sent to ahmed.m.abdelmottaleb@gmail.com.