Privacy Policy

This Privacy Policy explains how NOWScale LLC (“NOWScale”, “we”, “us”) handles personal data in connection with the NOWScale platform, our websites and the related services we provide (together, the “Service”). It is written to be read alongside our Terms of Service and our Cookie Policy.

1. Scope and our role

NOWScale is a publishing and analytics tool for content creators. Our users are individual creators and the businesses they run, who connect the social media accounts they own, upload video and images, schedule and publish that content, moderate the comments on it, and review how it performed across platforms. Because of how the Service works, we handle personal data in two distinct capacities, and different parts of this policy apply to each.

1.1 Where we act as a controller

We are a controller (meaning we decide why and how personal data is processed) for the data that relates to our own relationship with you: account registration and login details, plan and subscription records, support correspondence, marketing preferences, security and audit logs, and the usage and device data generated when you use the Service. This policy is the primary notice for that processing.

1.2 Where we act as a processor

We are a processor (meaning we act on documented instructions from someone else) for the personal data contained in a customer’s content and in the data pulled from that customer’s connected accounts. That includes information about the customer’s audience and community: the people who comment on their videos, people appearing in uploaded media, and individuals reflected in the audience and engagement figures the platforms report. In those cases the customer is the controller. They determine what is collected, why, and for how long; we process it to deliver the Service to them.

If you are a member of a customer’s audience, or an employee of a customer, and you want your data accessed, corrected or deleted, please contact that organisation first. We will assist our customer in responding, as required by our data processing terms, but we generally cannot act on such a request without their instruction. If you cannot identify or reach the relevant organisation, contact us at support@nowscale.com and we will try to help.

1.3 Who this policy does not cover

This policy does not cover the social media platforms, analytics providers, advertising networks, commerce systems or payment services you choose to connect. Those services are independent controllers of the data they hold, and their own privacy notices govern their handling of it. Connecting an account authorises us to exchange data with that service on your behalf; it does not place that service under our control.

2. Personal data we collect

2.1 Account and identity data

Name, work email address, job title or role, organisation name, profile photo where you supply one, language and time zone preferences, and the authentication method associated with your login. Sign-in is passwordless. We send a one-time code to your email address, or you authenticate through a third-party identity provider. We do not ask for, collect or store a password. Where we need to confirm an account is genuine we may ask for a mobile number and verify it by sending a code to it by SMS through Twilio Verify. A verified number is used for fraud prevention and account recovery. It is never a login factor. It is used for marketing text messages only if you separately opt in to them in your newsletter preferences, and you can opt out at any time by replying STOP or changing those preferences.

2.2 Plan and billing data

Your plan, subscription and entitlement records, the token usage counted against them, billing contact details, billing address, tax identifiers, and invoice and transaction history. Payment card numbers and full financial instrument details are collected and processed directly by Stripe and are not stored on NOWScale systems.

2.3 Your content and uploaded media

Video, images, thumbnails, captions, titles, descriptions, tags and any other material you upload or author in the Service, together with the platform variants we produce from it. This content may contain personal data: faces, voices, names and other identifying details of the people who appear in it. You are responsible for having a lawful basis and any necessary releases for that material.

2.4 Data from connected platform accounts

When you connect an account on a supported platform (YouTube, TikTok, Instagram or Facebook), we receive, subject to the scopes you grant and each platform’s own rules:

• account and profile information, such as handle, display name, avatar, account type and connected page or channel identifiers;
• audience and follower metrics, typically in aggregate or demographic form as supplied by the platform;
• post and content performance data, such as views, reach, watch time, retention curves, likes, saves, shares and comment counts;
• the text of comments and replies on your own posts, together with the commenter’s public display name and account identifier, where you use the comment moderation features;
• publishing and scheduling metadata, including post status, errors and platform-side identifiers.

We also hold the access and refresh tokens needed to maintain each connection. Tokens are held in encrypted form and are used only to perform actions you have asked for. Data received from YouTube is additionally governed by section 15.

2.5 Usage, device and log data

Pages and features used, actions taken, timestamps, referring pages, IP address, approximate location derived from IP address, browser and operating system, errors recorded in our server logs, and request metadata such as the rate-limit counters we use to protect the Service from abuse. Optional analytics and advertising measurement follow the cookie choices described in section 12.

2.6 Cookies and similar technologies

Identifiers and preferences kept in cookies and browser storage (local storage, session storage and IndexedDB). Optional analytics, session recording and advertising tools follow your cookie choices. See section 12 and our Cookie Policy.

2.7 Support and other communications

Messages you send us through support channels, email, forms or chat, including attachments, diagnostic information you choose to share, and our records of the response. Where calls or sessions are recorded, we will tell you at the time and seek consent where required.

2.8 Bug reports

If you report a bug from inside the Service, we receive the description you write, the product area you pick, the address of the page you were on, your language and time zone, your browser and screen size, the version of the Service you were running, your plan, how many channels you have connected, and a short trail of what happened just before: the pages you moved between and any requests or errors that failed. That trail is held only in your browser and is sent to us solely because you chose to submit a report.

If you leave the screenshot option switched on, the report also includes a picture of the page you were looking at, exactly as it appeared to you. That picture will contain whatever was on screen at the time, which may include your name, your email address, the names of your connected channels, and your own performance or billing figures. You can switch the option off before sending, and the modal shows you the image first. Bug reports and their screenshots are readable only by staff members granted that specific permission, and they are deleted ninety (90) days after you send them, whether or not the underlying issue has been resolved by then. If we need to keep talking to you about a report we will open a support ticket, which is retained under section 8 like any other support correspondence.

2.9 Sensitive data

We do not ask for special category data under GDPR Art. 9 (such as data revealing health, race or ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation, or genetic and biometric data processed for identification). Your content may incidentally contain such material because of what you choose to upload; you should not use the Service to process special category data unless you have satisfied yourself that you have a valid condition for doing so under applicable law.

3. Where the data comes from

• Directly from you: registration, configuration, uploads, support contact and marketing sign-ups.
• From connected platforms: via their APIs, under the authorisation you granted when you connected the account.
• Automatically: through your use of the Service, our servers, and cookies and similar technologies.
• From service providers: such as our fraud and abuse prevention tooling and our infrastructure providers, in each case limited to what is needed to run the Service.
• From public or commercial sources: limited business contact information used for sales and marketing outreach, where permitted by law.

4. How we use personal data and our legal bases

Where the GDPR or UK GDPR applies and we act as a controller, we rely on the legal bases set out below. Where we act as a processor, our customer is responsible for identifying the legal basis for the processing they instruct.

Where we rely on legitimate interests, we have assessed those interests against your rights and freedoms and concluded that the processing is proportionate. You may ask for a summary of that assessment, and you may object to the processing, using the contact details in section 14.

5. Artificial intelligence and machine learning

The Service includes AI-assisted features. All of them are delivered by OpenAI, our AI subprocessor (see section 6.1). As of the date of this policy they are:

• Keyword, title and post suggestions: proposing phrases, titles and improvements for a post or video you are preparing.
• Metadata and chapter suggestions: when you request optimization for an owned YouTube video, using its title, description, tags and available caption track to draft titles, descriptions, tags and timestamped chapters for your review. Nothing is sent to YouTube until you explicitly save the staged changes.
• Image Studio: generating and editing thumbnails and other images from your prompts and the images you provide.
• Captions: transcribing the audio of a video you choose and translating captions into other languages.
• Channel topic categorisation: reading the titles of your videos and a sample of their comments to label the topic your channel covers. The titles and comment text are used to produce the label and are discarded immediately afterwards; only the resulting label is stored.
• Research: finding and ranking public videos and titles relevant to your topic.
• AI Replies: classifying viewer comments and drafting replies to them, using the instructions, examples and corrections you give it. By default each draft waits for you to review it. If you choose Send automatically for a channel, replies are posted to that platform without your review, except drafts below the channel’s minimum confidence, replies outside your chosen hours and replies over the daily limit, which wait for you.
• Translation: translating support messages, help centre articles, product updates and our newsletters between languages.
• The support assistant: answering questions from our published help centre articles, including for visitors who are not signed in, and handing over to a person when it cannot. Conversations of visitors without an account are deleted after thirty (30) days.

Recommendations of the best time to publish are calculated statistically from your own past performance. They do not involve a language model and no data leaves our systems to produce them.

• Your content is not used to train general-purpose or foundation models, whether ours or a third party’s. Content submitted to an AI-assisted feature is processed to produce the requested output for you and is not added to a general training corpus.
• Model improvement. Where we work on improving models or features, we use aggregated or de-identified data that is not reasonably capable of identifying an individual or attributing content to a specific customer, or we rely on data a customer has explicitly opted in to share.
• OpenAI. To produce a result, we send OpenAI the content the feature needs: prompts, titles, descriptions, captions, video audio, images, comments or messages. OpenAI processes it in the United States as our subprocessor, and we send requests with OpenAI’s stored-response option turned off.
• Human review. We do not routinely read customer content. Limited access may occur to investigate a fault the customer has reported, to respond to a suspected violation of our Acceptable Use Policy, or where the law requires it, and is subject to access controls and logging.
• No solely automated decisions with legal effect. AI outputs in the Service are suggestions and analyses intended to inform a person’s decision. We do not use them to make decisions producing legal effects concerning you or similarly significantly affecting you within the meaning of GDPR Art. 22.
• Accuracy. AI outputs may be incomplete or wrong. Recommendations, predicted performance and generated captions should be reviewed before they are relied on or published.

6. Sharing and disclosure

We share personal data only in the circumstances described below.

6.1 Subprocessors and service providers

The recipients below receive personal data so that we can run the Service. The sign-in providers and platforms you choose to connect act under their own terms (see section 1.3). Our own optional measurement tools (section 12) are separate from the social accounts you connect.

6.2 Connected platforms, at your direction

When you schedule, publish or sync, we transmit the relevant content and metadata to the platforms you have connected. This is done on your instruction, and each receiving platform then handles that data as an independent controller under its own terms.

6.3 Our own staff

Authorised NOWScale personnel can access account records, support correspondence and audit logs where their role requires it: to answer a support request, investigate a fault, or act on a suspected violation of our Acceptable Use Policy. Access is governed by role-based permissions, is limited to the least data needed, and is logged. We do not routinely read your content; see section 5.

6.4 Professional advisers

Lawyers, auditors, accountants, insurers and similar advisers, where they need the data to advise us and are bound by duties of confidentiality.

6.5 Legal and regulatory requests

We may disclose personal data where we believe in good faith that disclosure is required by applicable law, regulation, legal process or enforceable governmental request, or is necessary to protect the rights, property or safety of NOWScale, our users or the public. We assess such requests, seek to narrow those that are overbroad, and (unless legally prohibited or the request concerns an emergency) will notify the affected customer so they can seek protective relief.

6.6 Corporate transactions

If we are involved in a merger, acquisition, financing, reorganisation or sale of assets, personal data may be disclosed to counterparties and their advisers under confidentiality obligations, and may transfer as part of the transaction. We will provide notice before personal data becomes subject to a materially different privacy policy.

6.7 Advertising choices

We do not sell personal information for money. Advertising cookies from Google, Meta and Microsoft that measure our own ads may constitute sharing for cross-context behavioral advertising under applicable state privacy laws. You can opt out at any time through Cookie preferences in the site footer, and we treat Global Privacy Control as that opt-out.

We do not upload customer lists to advertising platforms. Our ads are aimed at adults; this does not change the minimum account age specified in our Terms.

7. International transfers

NOWScale operates internationally, and personal data may be processed in countries other than the one in which it was collected, including the United States. Those countries may not offer the same level of data protection as your home jurisdiction.

Our servers and main database run in the United States, in the US East region. Pages and files are delivered through our hosting provider’s global network, and the vendors in section 6.1 process data in the locations shown there.

Where personal data is transferred out of the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on an appropriate safeguard recognised under applicable law. The mechanism we rely on is the European Commission’s Standard Contractual Clauses (Decision 2021/914), together with the UK International Data Transfer Addendum issued under s.119A of the Data Protection Act 2018 for UK transfers, and the Swiss adaptations where relevant.

Alongside the contractual mechanism we apply supplementary measures such as encryption in transit and at rest, access restrictions and a policy of challenging overbroad government access requests. You may request a copy of the relevant safeguards, with commercially sensitive terms redacted, by writing to support@nowscale.com.

8. Retention

We keep personal data only as long as we need it. Rather than publish fixed periods we cannot honour consistently, we set retention by applying the following criteria:

• how long the data is needed to provide the Service and maintain the account;
• whether the customer has configured a shorter or longer period, or deleted the item themselves;
• statutory retention requirements, particularly for tax, accounting and corporate records;
• limitation periods for legal claims, and whether a claim, dispute or investigation is live or reasonably anticipated;
• the need to keep security, audit and abuse-prevention records long enough for them to be useful;
• the sensitivity of the data and the risk of harm from unauthorised access.

On termination or expiry of a customer’s subscription, we will delete or return customer content and associated personal data within ninety (90) days of the effective termination date, subject to any period the customer has agreed for export, and subject to backup rotation. Data held in encrypted backups persists until those backups expire on their ordinary cycle, during which it is isolated from active processing and is deleted when the backup expires.

Bug reports have a fixed ninety (90) day life, measured from the moment you send one, and that period does not extend because the issue is still open. The report, its diagnostics and any screenshot are deleted automatically at the end of it. See section 2.8.

Private YouTube caption transcripts cached for metadata and chapter suggestions are deleted after thirty (30) days without access. The same deletion removes the derived saved chapter generations. A new request may download the available caption track again.

We may retain aggregated or de-identified data that can no longer be associated with an identifiable person for as long as it remains useful.

9. Security

We commit to maintaining technical and organisational measures appropriate to the risk of the processing. These include:

• encryption of personal data in transit over public networks;
• encryption of personal data at rest in our production systems;
• encrypted storage of secrets, including platform access and refresh tokens and API keys;
• role-based access control, least-privilege provisioning, and prompt revocation when access is no longer required;
• multi-factor authentication for administrative and production access;
• logging and monitoring of access to production systems and personal data;
• network segregation, hardened configuration and managed vulnerability patching;
• a documented incident response process covering detection, containment, assessment, notification and post-incident review;
• confidentiality obligations and security awareness training for personnel with access to personal data;
• security requirements imposed on subprocessors through written terms.

These are commitments about how we operate. We make no claim in this policy to hold any particular security certification or attestation.

No system is perfectly secure. You are responsible for keeping access to your email account secure (because sign-in codes are sent there, it is effectively the key to your NOWScale account) and for enabling the account protections we make available. If you believe your account has been compromised, or you have found a vulnerability, contact support@nowscale.com promptly.

10. Your rights

The rights available to you depend on where you live and on whether we act as controller or processor for the data in question. Where we act as a processor, we will refer your request to the relevant customer and assist them in responding.

10.1 EEA, UK and Switzerland

Subject to the conditions in applicable law, you have the right to:

• access the personal data we hold about you and obtain information about how it is processed;
• rectification of inaccurate data and completion of incomplete data;
• erasure of your data in the circumstances set out in Art. 17;
• restriction of processing while a dispute about accuracy or lawfulness is resolved;
• data portability: receiving data you provided in a structured, commonly used, machine-readable format, and having it transmitted to another controller where technically feasible;
• object to processing based on legitimate interests, and to object at any time and without justification to processing for direct marketing;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner’s Office. We would appreciate the chance to address your concern first.

10.2 United States state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another state with a comprehensive privacy law, you may have the right to:

• know what personal information we collect, the categories of sources, the purposes, the categories of third parties we disclose it to, and to obtain a copy;
• delete personal information we have collected from you, subject to statutory exceptions;
• correct inaccurate personal information;
• opt out of the sale or sharing of personal information and of targeted advertising (see section 6.7 for our position on this);
• limit the use and disclosure of sensitive personal information to what is necessary to provide the Service;
• opt out of profiling in furtherance of decisions producing legal or similarly significant effects;
• non-discrimination: we will not deny service, charge a different price or provide a lesser quality of service because you exercised a privacy right;
• appeal a decision to refuse a request. To appeal, reply to our decision or write to support@nowscale.com with “Privacy Appeal” in the subject line. We will respond within the period your state’s law allows and, if we deny the appeal, tell you how to contact your state attorney general.

You may use an authorised agent, and we may ask for proof of their authority and verify your identity directly. We do not sell or share personal information for money; section 6.7 explains how advertising cookies may constitute sharing and how to opt out. When your browser sends an opt-out preference signal such as Global Privacy Control, we treat it as an opt-out of sharing and do not set our sign-up attribution cookie. See our Cookie Policy.

10.3 How to exercise your rights and what to expect

Write to support@nowscale.com, or use the in-product privacy controls where available. We will verify your identity, usually by confirming control of the email address on the account, and by asking for further information where the request is sensitive or high risk. We do not collect additional data solely to verify a request beyond what is necessary.

We aim to respond substantively within one month for requests under the GDPR or UK GDPR, extendable by a further two months where a request is complex or numerous, in which case we will tell you within the first month and explain why. Under Brazil’s LGPD (art. 19), a complete response to a request to confirm or access your data is due within 15 days of the request; send these requests to support@nowscale.com. For requests under US state laws we aim to respond within 45 days, extendable once by a further 45 days with notice. Requests are free of charge unless manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline, and will explain our reasoning.

11. Children

The Service is a business tool and is not directed to children. You must be at least 16 years old to hold a NOWScale account, and older if the age of digital consent in your country is higher. We do not knowingly collect personal data from children below that age. If you believe a child has provided personal data to us, contact support@nowscale.com and we will delete it promptly.

Customers are responsible for the content they upload, including content featuring minors, and for obtaining any consent required from a parent or guardian.

12. Cookies and similar technologies

We use cookies and browser storage to keep you signed in, protect sign-in and payments, and remember choices you made. Our Cookie Policy lists each cookie and storage item, how long it lasts, and how to clear it.

Optional cookies are managed by a CookieYes consent banner, loaded with our other measurement tags through Google Tag Manager on our public pages, sign-in pages, Help Center and the product. You choose separately whether to allow analytics, performance (session recording) and advertisement cookies. In the European Economic Area, the United Kingdom, Switzerland and Brazil they stay off until you accept them; elsewhere they are on by default and you can turn them off at any time through Cookie preferences in the site footer. Email and SMS preferences remain independent.

With your choice in place: Google Analytics measures how the site and product are used, including sign-ups, checkout starts and purchases with their value. Google Ads, the Meta Pixel and Microsoft Advertising measure which of our ads led to a sign-up, lead or purchase. For those conversions we may send your email address in hashed form (enhanced conversions and advanced matching) so the platform can match the conversion to its own user; hashing does not make this information anonymous. Private posts, prompts, comments, messages and connected channel data are never sent to these services. Google, Meta and Microsoft act as independent controllers for their advertising data under their own terms.

Microsoft Clarity records how pages are used (clicks, scrolling and page layout) when you allow performance cookies. Text in the product is masked before it leaves your browser, and our staff administration area is never recorded. Microsoft acts as an independent controller; its terms describe uses including advertising profiles and research using nonpersonal data. Ordinary recordings are kept for 30 days; saved recordings and heatmap data may remain for nine months. Masking is not retroactive, and Clarity does not provide individual-user deletion. See the Clarity terms.

Our own sign-up attribution (how you first found us) is kept for 90 days. Google Analytics event data is kept for 14 months. Withdrawing consent stops future collection; it does not reverse processing that already happened or erase legally required financial records.

13. Changes to this policy

We may update this policy as the Service, our practices or the law change. The date at the top of this page shows when the current version took effect. If a change is material (for example a new purpose of processing, a new category of recipient, or a change that reduces your rights), we will give advance notice by email to the address on the account, by an in-product notice, or both, before it takes effect. Continuing to use the Service after a change takes effect means the updated policy applies; where the law requires consent for a change, we will ask for it.

We keep prior versions and will provide one on request to support@nowscale.com.

14. Contact us

For any privacy question, request or complaint, or to exercise a right under section 10:

• Privacy team: support@nowscale.com
• Data protection contact: support@nowscale.com. This mailbox is monitored by the team responsible for data protection.
• Security reports: support@nowscale.com
• Legal notices: support@nowscale.com
• Postal address: NOWScale LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States

NOWScale LLC is formed in Wyoming. This policy is governed by Wyoming, without limiting any mandatory rights you have under the data protection law of your own country.

15. YouTube API Services

NOWScale uses the YouTube API Services. This section is the disclosure required of every application that does so, and it applies in addition to the rest of this policy. It is written to stand on its own, so you can read it without reading the whole document.

By connecting a YouTube channel to NOWScale you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

15.1 What YouTube data we access

We access a YouTube channel only after its owner connects it through Google’s OAuth consent screen, and only within the permissions granted there. We never access a channel our user does not own, and we never ask anyone to give us another person’s credentials. Subject to those permissions we access:

• Channel information: channel ID, title, description, thumbnail, declared country, and subscriber, view and video counts.
• Video information: titles, descriptions, tags, category, privacy status, scheduled and actual publish times, thumbnails, duration and processing status for the videos on the connected channel.
• Video statistics: view, like and comment counts.
• Comments: the text of comments and replies on the connected channel’s videos, the commenter’s public display name and channel ID, timestamps and moderation status.
• Caption tracks and playlists: the metadata and content of caption tracks and playlists belonging to the connected channel.
• Analytics reports: aggregated performance and audience reports for the connected channel from the YouTube Analytics API.
• Authorisation tokens: the OAuth access and refresh tokens that keep the connection working. These are stored encrypted and are used only to carry out actions the channel owner has asked for.

15.2 How we use and share it

We use YouTube data solely to provide the features the channel owner asked for: publishing and scheduling videos to their channel, listing and editing their existing videos, managing their thumbnails, captions and playlists, moderating the comments on their own videos, and showing them their own performance analytics. YouTube data is shown only to the user who connected the channel and to the members of the workspace the channel is connected to, according to the access they are given there.

We do not sell YouTube data, we do not share it with other customers or with advertisers, and we do not use it to train general-purpose or foundation models. We transmit content to YouTube on the user’s instruction when they publish, and we disclose data otherwise only in the limited circumstances set out in section 6, principally to the infrastructure subprocessors that run the Service, and where the law requires it. When you use an AI-assisted feature on a YouTube video or comment, the YouTube data that feature needs (such as titles, descriptions, tags, captions and comment text) is sent to OpenAI, our AI subprocessor, to produce the result. YouTube data is always identified as coming from YouTube and is never blended with another platform’s data into a single undifferentiated figure.

15.3 How long we keep it

• Comment text and commenter names are refreshed from the YouTube API or cleared within thirty (30) days. Video titles, descriptions and channel names are refreshed while the channel stays connected. Section 15.4 explains what happens when access is revoked.
• Statistics and metrics derived from them are kept for up to thirty-six (36) months so that historical performance charts remain available. Older points are aggregated and then deleted.
• Authorisation tokens are kept until you disconnect the channel, at which point they are deleted and we ask Google to revoke them. If you revoke access at Google instead, the stored tokens stop working; they are replaced if you reconnect and deleted if you disconnect.

15.4 Deleting your data and revoking our access

You can disconnect a YouTube channel from NOWScale at any time from the Connections screen in the product. Disconnecting stops all further access immediately and deletes the stored YouTube data associated with that channel, including its tokens, cached video and channel information, and collected statistics.

In addition to that normal deletion procedure, you can revoke NOWScale’s access to your data at any time through the Google security settings page at https://security.google.com/settings/security/permissions, also reachable at https://myaccount.google.com/permissions. Revoking there withdraws our authorisation directly at Google. The next time we try to use the connection, Google rejects it and we then:

• stop all further access to the channel and show it as needing to be reconnected;
• remove the channel’s video packaging previews and related analysis at that moment;
• clear comment text and commenter details once they have gone thirty (30) days without a refresh, and delete cached caption files thirty (30) days after they were created.

Other stored data for that channel, such as its video list and collected statistics, is kept until you reconnect the channel, disconnect it, or ask us to delete it. To remove it straight away, disconnect the channel in NOWScale or write to us.

You may also ask us to delete YouTube data we hold about you by writing to support@nowscale.com. Questions or complaints about our privacy practices, including those concerning YouTube data, can be raised through any of the channels in section 14.

16. Instagram and Facebook (Meta)

When you connect an Instagram professional account or a Facebook Page, we receive data from Meta’s APIs within the permissions you grant: the categories described in section 2.4, such as the account or Page profile, your posts and their metrics, and comments on your posts. We use it only to provide the features you use, under section 6.

16.1 Deleting your Instagram and Facebook data

• Disconnect the account from the Channels page in NOWScale. This removes its stored access tokens and cached data.
• Or remove NOWScale in your Meta account under Settings > Apps and Websites. Meta then sends us a deletion request, we delete the connection, its tokens and its cached analytics, and you receive a confirmation code. You can check the status of the request on our data deletion page, which keeps each receipt for ninety (90) days.

You can also write to support@nowscale.com.