Privacy Policy
This policy explains what personal data Roundexa Marketing OS ("the Service") collects, why, how long we keep it and how you can delete it. The Service is operated by ROUNDEXA, Flat/Door No. 01, WADALA BAHIROBA, Village/Town WADALA, Block WADALA, MAIN ROAD, AHILYANAGAR, District AHMEDNAGAR, MAHARASHTRA - 414602 ("we", "us").
1. Data we collect
- Account data: name, email address, hashed password, workspace and role.
- Consent records: when you accepted these terms and this policy.
- Content you create: post drafts, captions, images and videos you upload, schedules and publishing results.
- Data from connected accounts: described per provider in sections 2 and 3.
- Billing data: plan, invoices and payment status. We never store card numbers.
- Technical data: IP address, browser and security logs, kept to protect the Service.
2. Data from Meta (Facebook and Instagram)
You connect Facebook Pages and Instagram professional accounts through Meta's official login. We request only the permissions the Service uses. Each is used only for the purpose listed:
| Permission | Why we need it |
|---|---|
pages_show_list | Show the Pages you manage so you can choose which to connect. |
pages_read_engagement | Read basic Page information and post engagement to show in your dashboard. |
pages_manage_posts | Publish the posts you schedule to your Facebook Page. |
instagram_basic | Identify the Instagram professional account linked to your Page. |
instagram_content_publish | Publish the posts, carousels and Reels you schedule to your Instagram account. |
instagram_manage_insights | Show reach and engagement for your Instagram posts. |
read_insights | Show Page-level performance metrics. |
Access tokens issued by Meta are stored encrypted and are never shown in logs. We do not sell Meta data, use it for advertising, or share it except with the sub-processors in section 6. You can disconnect an account at any time in Settings; we then delete its token.
3. Data from Google
If you connect Google services, we request read access to Google Search Console and Google Analytics 4 data, and later to Google Business Profile, to show you website and listing performance. We also support "Sign in with Google" to identify you (name and email).
Limited Use disclosure. Roundexa Marketing OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features you asked for. We do not transfer it to others except as needed to provide those features, comply with law, or as part of a merger with notice to you. We do not use it for advertising, and humans do not read it unless you ask, for security, or the law requires.
4. How we use data
To run the Service, publish your posts, show analytics, provide support, bill you, keep the Service secure and meet legal duties.
5. How long we keep data
Account and content data are kept while your account is active. Provider tokens are deleted when you disconnect. After you ask for deletion, we delete your data within 30 days, except invoices and records we must keep under Indian tax law.
6. Sub-processors and sharing
We share data only with service providers needed to run the Service. These are: Vercel (website hosting), Amazon Web Services (email via Amazon SES), Razorpay (payments), and Meta and Google (only to connect the accounts you choose and to publish or read data you ask us to). If we add an AI caption provider, we will name it here first. Content you send to AI captioning is used only to produce your caption.
7. Your rights and deletion
You can access, correct and delete your data and withdraw consent. To delete your data, see Data Deletion.
8. Security
We use HTTPS, encrypted tokens, role-based access and workspace isolation. No system is perfectly secure and we make no guarantee of compliance with any specific standard.
9. Children
The Service is for businesses and is not directed at people under 18.
10. Grievance Officer (Digital Personal Data Protection Act, 2023)
Name: Suhas Borkar
Email: support@roundexa.com
Address: Flat/Door No. 01, WADALA BAHIROBA, Village/Town WADALA, Block WADALA, MAIN ROAD, AHILYANAGAR, District AHMEDNAGAR, MAHARASHTRA - 414602
11. Changes
We will post changes on this page and update the date above.