Privacy Policy

1. Overview & Commitment

Takneek Social (“we”, “our”, or “us”), accessible at https://social.takneek.in, is a social media marketing and automated publishing platform provided by Takneek (Bhopal, Madhya Pradesh, India).

We are dedicated to safeguarding your privacy and ensuring the security of your business content, customer communications, and social platform authentication credentials. This Privacy Policy details how we collect, use, store, and disclose information when you access or use Takneek Social.

2. Information We Collect

• Account & Profile Details: Your name, business name, industry, email address, mobile phone number, WhatsApp contact number, and billing/tax information (GSTIN where applicable).
• Brand Assets & Content: Logos, photos, brand colors, typography preferences, product catalogs, prompts, and social media captions you create or upload.
• Connected Social Accounts: Social platform IDs, Page tokens, Instagram Business Account IDs, and Google Business Profile location identifiers when you connect them via official OAuth flows.
• Usage & Analytics: Aggregate statistics on published posts, scheduling history, delivery statuses, click tracking metrics on shortened Takneek links, and platform engagement figures.

3. Meta Platforms (Facebook & Instagram) Integration

When you connect your Facebook Pages and Instagram Professional accounts, Takneek Social uses Meta’s official Graph API.

• Scope of Use: We request only the permissions necessary to list your Pages, publish feed posts, Stories, and Reels you explicitly approve or schedule, and retrieve basic engagement insights (likes, comments, reach).
• No Data Monetization: We do not sell, rent, or trade your Meta account data, tokens, audience insights, or post analytics to any third parties or data brokers.
• Token Protection: Meta access tokens are encrypted and stored in secure tenant-isolated databases with strict Row Level Security (RLS).
• Disconnect Anytime: You can disconnect your Meta account at any time from your Takneek Social settings or directly through Facebook App Settings.

4. Google API Services — what we access and why

Takneek Social allows clients to connect their own Google account so we can publish on their behalf and show them how that content performed. We request only the permissions needed for those two jobs, and we ask for them one scope at a time:

• Google Business Profile (business.manage) — to publish Local Updates to the locations you choose, and to read those locations so you can pick one.
• YouTube (youtube) — to upload and publish Shorts and videos to your own verified channel, and to list your channels so you can choose where a video goes.
• Google Analytics (analytics.readonly) — read-only, to show how your website traffic responded to the content we published. We never write to Analytics.
• Google Search Console (webmasters.readonly) — read-only, to show your search impressions and clicks alongside the same content. We never write to Search Console.
• Email address (userinfo.email) — to label the connected account so you can tell which Google account is linked.

• Our use of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
• By using our YouTube features you are agreeing to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
• Revoking access. You can disconnect Google at any time from your Takneek Social settings, or revoke it directly from your Google account permissions page. When you do, we delete the stored tokens and stop accessing your Google data.
• Token protection. Google refresh tokens are encrypted at rest and stored in a tenant-isolated database protected by Row Level Security, so one business can never read another's.

5. Data Protection and Security Mechanisms for Sensitive Data

Takneek Social enforces rigorous technical, physical, and administrative safeguards to protect all personal information, Google user data, OAuth access tokens, and sensitive business credentials:

• Encryption in Transit: All data transmitted between user browsers, Takneek Social servers, and third-party APIs (including Google API endpoints) is strictly encrypted in transit using industry-standard TLS 1.2 and TLS 1.3 cryptographic protocols with modern cipher suites over HTTPS. Unencrypted HTTP connections are rejected.
• Encryption at Rest: Sensitive authentication tokens (such as Google OAuth access and refresh tokens, Meta access tokens, and API credentials) are encrypted at rest using industry-standard AES-256 encryption before storage. Database volumes and backups are encrypted using enterprise key management standards.
• Multi-Tenant Isolation & Access Controls: All database tables operate under strict PostgreSQL Row Level Security (RLS) guaranteeing that no tenant can ever view or access another business's data or tokens. Decryption keys and sensitive credentials are accessible only to authorized, ephemeral server-side tasks executing user-authorized operations under the principle of least privilege. Tokens are never exposed in cleartext logs or browser storage.
• Infrastructure Hardening & Storage: Tenant media assets are stored on Cloudflare R2 object storage with isolated tenant namespaces. The platform runs on enterprise cloud hosting with automated web application firewalls (WAF), continuous DDoS mitigation, intrusion monitoring, and regular vulnerability audits.
• Immediate Token Deletion: Upon account disconnection or revocation by the user via Takneek Social settings or Google account permissions, stored tokens are permanently deleted from our active databases.

6. Your Rights & Data Deletion

You hold full control over your business data. Under applicable Indian and international privacy laws, you have the right to access, export, correct, or permanently delete your stored records.

To request immediate erasure of your account, media library, and connected tokens, please review our dedicated Data Deletion Instructions or email us directly at hello@takneek.in.

7. Contact Us

If you have questions, feedback, or grievances regarding this Privacy Policy or our security practices, please contact our team: