Privacy Policy

1. Who we are

ShoonyaAI (“we”, “us”) operates the ShoonyaAI platform at shoonyaai.com. We are the data controller for the account data described below, and a data processor for the business content and connected-platform data you bring into your workspace.

Contact for any privacy request: Puneet.Behl@shoonyaai.com, ShoonyaAI, Delhi, India.

2. Data we collect

Account data

Your name, email address, workspace identifier, authentication identifiers from your sign-in provider, and billing and credit-usage records.

Content you provide

Files you upload, prompts and messages you send to the agent, business documents, images, and the text, images, video, and audio the platform generates for you.

Data from connected platforms

Only if you explicitly connect an account, and only for the platforms you choose. You may disconnect at any time.

3. Meta platform data (Instagram and Facebook)

When you connect an Instagram or Facebook account, you are shown Meta’s own permission screen and you sign in on Meta’s website. We never see, receive, or store your Facebook or Instagram password.

With your authorization, we may receive and store:

• Your Facebook Page ID and Page name, and the list of Pages you manage (pages_show_list)
• Your linked Instagram Business or Creator account ID and username (instagram_basic)
• Media you have published to that Instagram account, including captions, media URLs, timestamps, and permalinks
• Aggregate performance metrics for that media and account, such as reach, impressions, and engagement (instagram_manage_insights)
• An access token issued by Meta, used to publish content you ask us to publish (instagram_content_publish, pages_manage_posts) and to identify the business account the connection belongs to (business_management)

How we use Meta data

We use it only to provide features you have asked for:

• To publish a post, image, or video to your own Instagram or Facebook account, at your explicit instruction
• To show you performance of your own content inside your own workspace
• To measure the effect of your marketing activity for you, in your own workspace analytics

What we never do with Meta data

• We do not sell it, licence it, or share it with data brokers
• We do not use it to build advertising profiles or to target people outside your own workspace
• We do not make it visible to other ShoonyaAI customers. All data is scoped to your workspace
• We do not use Meta platform data to train machine-learning models that serve other customers
• We do not request or accept your Meta password or login codes

4. Other connected platforms

The same principles apply to WhatsApp Business, YouTube, TikTok, LinkedIn, X, and Google Drive: we request the narrowest permissions needed for the feature, we store the resulting access token encrypted, and we use the data only to operate the feature you asked for inside your workspace. Google user data received via these connections is used and transferred in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

5. How we store and protect data

• Access tokens are encrypted at rest and are held by a single isolated service. They are never written to logs and are never returned in any response to a browser or API client.
• Every record is scoped to your workspace. Workspace identity is enforced on every stored row, not applied as an afterthought.
• Data is hosted on Google Cloud Platform, encrypted in transit (TLS) and at rest.
• Access to production data is restricted to personnel who need it to operate or support the service.

No internet service can be guaranteed completely secure, and we do not claim otherwise.

6. Service providers

We share data with a small number of processors, only to run the service:

• Google Cloud Platform — hosting, storage, database, warehouse, and the Vertex AI models used to generate images, video, music, and speech
• Anthropic — the Claude model that powers the conversational agent. Your messages are processed to generate responses
• Payment processor — for prepaid credit purchases. We do not store your full card details

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

7. Retention

• Access tokens — deleted when you disconnect the account or revoke access at the provider.
• Connected-platform data — retained while the connection is active, then deleted within 30 days of disconnection.
• Workspace content and account data — retained while your account is open, then deleted within 30 days of a deletion request.
• Billing records — retained as long as tax and accounting law requires, then deleted.

8. Your rights

You may request access to, correction of, export of, or deletion of your data, and you may withdraw consent or object to a particular processing activity. Write to Puneet.Behl@shoonyaai.com and we will respond within 30 days.

To delete data specifically, see Data deletion instructions.

9. International transfers

We operate from India and use Google Cloud and Anthropic, which may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

10. Children

The platform is a business tool and is not directed to children under 18. We do not knowingly collect their data. If you believe a child has provided data, contact us and we will delete it.

11. Changes

If we make a material change we will update the date at the top of this page and, where the change materially affects how we handle your data, notify you in the product or by email.