Legal

Privacy Policy

Effective October 31, 2026

1. Information we collect

• Account information. When you use the NuCulture portal or communicate with us, we collect your name, email address, organization, role, and authentication credentials (stored only as salted hashes or encrypted tokens).
• Social analytics data, collected with authorization. For clients who connect social accounts, we collect publicly available performance metrics (such as follower counts and post engagement) for the accounts you ask us to track. Where a platform offers an official interface — for example a LinkedIn Page connection or an Instagram business account authorization — we use it with the account owner’s consent. Connection credentials (access tokens) are stored encrypted and can be disconnected at any time.
• Content you give us. Materials, briefs, and messages you send us to do the work (for example through our contact channels or in the portal).
• Technical data. Standard request logs, device and browser information, and security telemetry needed to operate and protect the Services.

2. How we use information

We use the information above to provide the Services: running your account, producing the reporting and analytics you asked for, generating insights (including AI-assisted analysis of data you have provided or connected), communicating with you, securing the platform, and improving what we build. We do not sell personal information, and we do not use client social data to train general-purpose models offered to others.

3. Sharing

We share information only with: (a) service providers that host and operate our infrastructure (currently cloud services in the United States, including Microsoft Azure); (b) social platforms themselves, when you direct a connection (for example, authorizing a LinkedIn Page or Instagram account — governed by those platforms’ own policies); and (c) authorities, where required by law. We do not otherwise disclose your information.

4. Retention and deletion

We keep information while your account is active and for a reasonable period afterward for record-keeping and legal obligations. You can request access, correction, export, or deletion of your information, or disconnect a connected social account, at any time by contacting us below. Disconnecting stops further collection from that account.

Information collected for publishing

When you authorize a connection, we receive the permitted account or page identifiers, display names, authorization tokens and expiry information needed to identify and operate that connection. For publishing, we store your selected media references, captions, titles, covers, channel settings, approved versions and scheduled times. We receive processing status, post identifiers, links and delivery errors from the platform to show the result of your instructions.

Purpose and sharing

We use this information to connect the accounts you select, prepare and deliver approved posts, maintain the distribution calendar, show delivery results and secure the service. Content and necessary publishing details are sent to the destination platforms you select: Instagram, Facebook, LinkedIn, YouTube or TikTok. A platform may retrieve selected media through a scoped delivery link. Authorized members of your company or client team can access the information their role permits. Infrastructure providers, including Microsoft Azure, process data to operate the service.

Google and YouTube data

NuCulture uses YouTube API Services for authorized channel selection, video uploads, custom thumbnails, processing checks and approved visibility changes. These features use the Google permission described as access to see, edit and permanently delete YouTube videos, ratings, comments and captions. NuCulture's publishing workflow uses it to carry out the channel publishing features described here.

NuCulture's use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used for the requested publishing features and security; it is not sold, used for advertising targeting or used to train general-purpose AI models. The Google Privacy Policy also applies to Google's own processing.

Retention and deletion for Google API data

We retain Google API data only while needed for an active, authorized feature and refresh or delete stored API data as required by YouTube's policies, including the applicable 30-day limits. Disconnecting in the portal removes the saved Google connection data immediately. When you revoke authorization through Google, we delete associated API data as soon as possible and within 30 calendar days. Explicit requests to delete associated Google API data, including account deletion requests, are completed as soon as possible and within seven calendar days. Provider receipt details are removed within 30 days; active channel details are refreshed or removed within that period. Content you originally supplied and internal project records remain subject to our general retention policy after associated Google API data has been removed.

Your controls

You can disconnect a social account in the portal and revoke access in that platform's settings. For Google and YouTube, you can also revoke NuCulture's access through Google's security permissions settings. Revoking access does not delete posts already on a social platform. To request access, correction, export or deletion of information held by NuCulture, contact pat@nuculture.us.

5. Security

We protect information with encryption in transit and at rest, encrypted storage for third-party connection tokens, least-privilege access controls, and session invalidation on logout. No method of transmission or storage is perfectly secure, but we design our systems so that a failure denies access rather than exposing data.

6. Your privacy rights

Depending on your jurisdiction (including California, Virginia, Colorado, and other U.S. state privacy laws), you may have rights to know, access, correct, delete, and opt out of certain processing of your personal information. To exercise any of these rights, contact us below. We will not discriminate against you for exercising them.

7. Children

The Services are not directed to children under 13, and we do not knowingly collect information from children under 13.

8. International users

The Services are operated from the United States. If you access them from elsewhere, your information is processed in the United States.

9. Changes to this policy

We may update this policy as the Services evolve. The effective date above always reflects the current version, and material changes will be surfaced in the portal or by direct notice.

10. Contact

Questions, requests, or complaints: privacy@nuculture.us.