Privacy Policy

This policy explains what Insights by Oyyzo ("Insights", "we") collects, why, where it is kept and how you control it. Insights is run by Digital Poonam, part of the Oyyzo suite of apps.

Who is responsible for what

Businesses ("customers") use Insights to see their own social media, advertising and website numbers. For the account details of the people who sign up, we decide how the data is used, so we are the Data Fiduciary. For the data a customer connects (their Pages, Instagram account, ad accounts, YouTube channels and website analytics), we process it only on that customer's instructions, so for that data we act as a Data Processor and the customer remains responsible for it.

What we collect

• Your account: name, email address and password. If you sign in with your Oyyzo account, the password is kept by Oyyzo (oyyzo.com), not by Insights. Our own passwords are stored only as scrypt hashes.
• Workspace and team: the workspace name, who is a member and their role, invitations, settings, and a security log of important actions (logins, team changes, connections, billing, deletions) with the time and a keyed hash of the network address (never the address itself).
• Connected accounts: when an owner connects Facebook or Google, we receive access tokens and the list of Pages, Instagram professional accounts, ad accounts, YouTube channels and Google Analytics properties the owner can see. Tokens are encrypted (AES-256-GCM) before they are stored.
• Reporting data from those accounts: daily totals (reach, views, followers, engagement, ad spend, clicks, leads, watch time, website visitors), the account's own posts and videos with their numbers, ad names, budgets and results, and aggregated audience figures (age and gender bands, top cities, online hours). We do not receive the names or profiles of your followers or website visitors.
• Billing: your plan, subscription status and payment references from Razorpay. Card, UPI and bank details are entered on Razorpay's page and never reach our servers.

How we use it

• To show the workspace's numbers, charts and plain-language suggestions to the members of that workspace, according to their role.
• To make the ad changes a member with the right role asks for (pause or resume, change a daily budget, create a paused boost), each confirmed with the workspace's Action PIN.
• To run the service: sign-in, security, billing, support and service emails (invites, password resets).

We do not sell data, show advertising, or use connected data to build profiles of people. We do not use customer data to train AI models.

Google user data (YouTube and Google Analytics)

Insights asks Google only for read-only access: youtube.readonly, yt-analytics.readonly and analytics.readonly, plus your basic profile and email to identify the connection. We use this data only to show reports to the workspace that connected it.

Insights by Oyyzo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except to provide the service, to comply with law, or as part of a merger with notice to you. People at Digital Poonam do not read it except with your permission, for security, or to comply with law.

Facebook, Instagram and Meta Ads data

We use data received through Meta's platform only to provide reports, and the ad changes described above, to the workspace that connected it, in line with Meta's Platform Terms. Ad changes are made only when a workspace member asks for them.

Removing access and deleting data

• Disconnect: an owner can disconnect Facebook or Google, or remove a single account, in Connections. This deletes the stored tokens and every number we collected from it straight away.
• Revoke at the source: you can also remove Insights from Facebook (Settings → Business integrations) or Google (myaccount.google.com/permissions). Syncing then stops; disconnect in Insights to delete the stored data too.
• Delete a workspace: the owner can delete it in Settings. Its subscription is cancelled and all of its data is deleted immediately.
• Delete your login, or data from a Facebook or Google account: write to digitalpoonam21@gmail.com and we will delete it within 30 days.

How long we keep it

• Reporting data: as long as your plan's history allows (90 days on Starter, 1 year on Growth, 2 years on Agency). Older numbers are deleted automatically every day.
• Account and workspace details: while the account or workspace exists.
• Security log: at least one year, as Indian rules require.
• Billing records: as long as tax law requires.

Where it is stored and who helps us

Data is stored on servers run by Hostinger (India). Service providers we use: Hostinger (hosting), Razorpay (payments), our email provider (service emails), and Oyyzo (oyyzo.com) for sign-in when you use your Oyyzo account. Meta and Google provide the data you connect, under their own policies.

Security

Encrypted connections (HTTPS), encrypted access tokens, hashed passwords and session tokens, role-based access inside each workspace, an Action PIN and spend limits for ad changes, and a security log. If a breach affects your personal data we will tell you and the authorities as Indian law requires.

Your rights

You can ask for a summary of your personal data, ask us to correct or delete it, withdraw consent (by disconnecting accounts or deleting your login), nominate someone to act for you, and complain to us or to the Data Protection Board of India. Write to our Grievance Officer, Aanchal Tiwari, at connect@oyyzo.com. We reply within 30 days.

Children

Insights is a business tool and is not meant for anyone under 18.

Changes

We will post changes here with a new effective date and tell workspace owners by email about important ones.

Contact

Digital Poonam, Kool Homes, A 404, Dubey Colony, Mowa, Daldal Seoni, Raipur, Chhattisgarh 492002, Raipur, India. Email digitalpoonam21@gmail.com, phone +91 7222959999.