1. Introduction

Welcome to Naibuu (the "Company," "we," "us," or "our"). We provide a social media management platform (the "Service") that enables users to create, schedule, and publish posts across multiple social media platforms, and optionally use integrations such as Canva, AWS, and ChatGPT for media and content generation.

We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Data We Collect

We collect various types of data, including but not limited to:

• Personal Information: This includes your name, email address, profile picture URL, and any other information you provide when creating an account or updating your profile.
• Account Credentials: We store hashed passwords for users who register via email/password. When you sign in through a third-party OAuth provider (e.g., Google), we may collect information such as your email and profile details in compliance with that provider's policies.
• Social Media Account Data: With your permission, we access tokens, profile IDs, and usernames for connected social media platforms. This data is necessary to allow posting, scheduling, and retrieval of performance metrics.
• Payment Information: If you subscribe to our paid services, we collect information necessary for payment processing (e.g., via Stripe). This may include billing address, partial credit card information, and payment transaction IDs (though we do not store full card numbers on our servers).
• Technical Data: Such as your IP address, browser type, operating system, device information, and the pages you visit on our website. We may collect this automatically through cookies and similar technologies.
• Usage Data: We track activities related to how you use our Service (e.g., pages visited, buttons clicked, time spent on pages) to improve user experience.
• Media Files: If you upload images or videos, including those imported via Canva, we store these files on our AWS S3 storage.

3. How We Use Your Data

We use your data for the following purposes:

• To create and manage your user account and subscription.
• To enable posting and scheduling of social media content across various platforms.
• To allow seamless integration with third-party services (e.g., Canva for design, ChatGPT for content suggestions).
• To process payments and handle billing via Stripe.
• To store media files (images, videos) on AWS S3.
• To provide customer support, respond to your inquiries, and resolve service issues.
• To analyze usage patterns and improve the performance of our Service.
• To send you administrative information, such as updates to our policies and changes to our Service.
• To detect, prevent, and address fraud, abuse, or technical issues.

4. Cookies & Tracking Technologies

We use cookies, session storage, and similar tracking technologies to monitor activity on our Service and store certain information. Cookies help us enhance user experience by, for example, remembering your login status and preferences. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

5. Data Sharing & Disclosure

We may share your personal data in the following situations or with the following parties:

• Service Providers: We may share your information with third parties that perform services on our behalf, such as payment processing (Stripe), cloud storage (AWS), AI content generation (ChatGPT), and design integration (Canva).
• Social Media Platforms: When you choose to post or schedule content to a connected social media account, we transmit necessary information and media files to the respective platform via their APIs.
• Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
• Legal Obligations: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities.
• Protection of Rights: We may disclose your personal data if we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Terms of Service or this Privacy Policy, or to protect the rights, property, or safety of our users or the public.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. Once retention is no longer necessary, we securely delete or anonymize your personal data.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. Access to your personal data is limited to authorized personnel who need it to perform their job functions. However, please note that no method of transmission or storage is fully secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Service is not intended for individuals under the age of 13 (or the equivalent minimum age in other jurisdictions). We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us so that we can take steps to remove such information.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccuracies in your personal data.
• Right to Erasure: You can request that we delete your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we restrict how we use your personal data.
• Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You can object to certain types of processing of your personal data.
• Right to Withdraw Consent: Where consent is the legal basis for our processing, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within a reasonable timeframe and as required by applicable law.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically for the latest information on our privacy practices.

11. Contact Us

If you have any questions about this Privacy Policy, your personal data, or if you wish to make a complaint, please contact us at:

Email: alvin@naibuu.com

We will do our best to address and resolve any issues you have regarding our use of your personal data.