Information we process
Your account identity and email, your workspace and its settings, the files you upload and their details, drafts, schedules, publishing activity, and the Facebook Pages you authorize.
When you connect Facebook, we receive Page identifiers, Page names and pictures, the permissions you granted and the access that lets Zenova publish. That access is stored encrypted and is only used by Zenova's servers to publish.
TikTok Creator can be connected for immediate Direct Post and for posts you schedule. Zenova processes your TikTok identifier, profile name and picture, the permissions you granted, when you authorized them, and the access TikTok issued, stored encrypted. When you expressly confirm a post (or schedule it), Zenova also sends the selected video, its caption, your privacy and interaction choices, the content disclosures and the minimum delivery details needed to publish it and show its status.
YouTube channels can be connected to upload videos and Shorts at the time you choose, and the professional Instagram accounts linked to your Facebook Pages can be used to publish Reels, photos, carousels and stories; the YouTube and Instagram sections below explain what that involves.
YouTube
Zenova Creator uses YouTube API Services. When you connect a YouTube channel, Google asks you to allow two things: uploading videos to the channel and seeing the channel. Zenova uses them only to show you the channels you connect, upload the videos you choose at the time you choose, and check whether YouTube finished processing and published each one.
What Zenova keeps: the channel's identifier, name and picture (read again from YouTube every day while it is connected); the access Google issued, stored encrypted and used only by Zenova's servers; and, for each video Zenova uploads, its YouTube identifier and link (checked again on YouTube every 25 days while the channel is connected, and deleted if the video is no longer there), the title, description, tags, privacy and audience choices you made, its state and dates, plus a daily count of uploads. What YouTube said about a video that did not go out is deleted 25 days later. Zenova does not read your other videos, comments, subscribers or statistics, and it does not share YouTube data with anyone except Google (to upload) and the service providers listed below that store Zenova's data.
How long: when you disconnect the channel in Accounts, Zenova stops using the access at once, asks Google to revoke it and deletes it when Google confirms (it tries again if Google does not answer). You can revoke Zenova's access at any time from the Google security settings page (security.google.com/settings/security/permissions); Zenova then stops uploading. Your publishing history stays so you can see what went out, but what came from YouTube does not: 5 days after you disconnect a channel, or 28 days after it stopped accepting Zenova's access, Zenova deletes its name, picture and identifier and the YouTube identifiers and links of its videos, and the history shows it as "Canal desconectado". If you ask us to delete the remaining details (see Contact), we delete them within 7 days.
By using Zenova's YouTube features you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. Zenova's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Instagram works through the same Facebook login: Zenova uses Meta's Instagram API with Facebook Login. When you connect or renew Facebook and accept the Instagram permissions, Zenova can see the professional Instagram accounts linked to your Facebook Pages and publish on them the Reels, photos, carousels and stories you choose, at the time you choose.
What Zenova keeps: each account's identifier, user name, name and picture, the Facebook Page it is linked to and the access Meta issued for that Page, stored encrypted and used only by Zenova's servers; and, for each post, the files, the text, the kind of post, the AI label you chose, Meta's identifiers and the link to the post, its state and dates, plus how many posts went out in the last 24 hours. To publish, Meta downloads each file from a private link that expires within a few hours. Zenova does not read your comments, messages, followers or statistics, and it does not share Instagram data with anyone except Meta (to publish) and the service providers listed below that store Zenova's data.
How long: when you disconnect the Facebook profile in Accounts, Zenova stops using the access of its Pages and Instagram accounts at once and cancels what was scheduled for them. You can also remove Zenova Creator from your Facebook settings (Apps and websites). The account name and the details of the posts it published stay with your publishing history so you can see what went out; if you ask us to delete them (see Contact), we delete them within 7 days.
You can also connect an Instagram professional account directly, without a Facebook Page ("Connect Instagram directly": Meta's Instagram API with Instagram Login). You sign in on instagram.com and allow two permissions: see the account's basic profile and publish on it. Zenova then keeps the account's professional identifier, user name, name and picture, the permissions you allowed and the access Instagram issued, which lasts 60 days; Zenova's servers renew it before it ends while the account stays connected. It is stored encrypted and used only to publish what you schedule. When you choose Disconnect on that account, Zenova erases the access at once and cancels what was scheduled for it; you can also remove Zenova Creator in Instagram (Settings, Apps and websites). The account name and its publishing history stay, as above, until you ask us to delete them.
Instagram's own rules are in the Instagram Terms of Use, and Meta's handling of your data is described in the Meta Privacy Policy.
How we use it
To sign you in, keep your workspace separate from others, organize your Library, show previews, avoid publishing the same thing twice by accident, schedule posts, publish only after you confirm, and keep a record of what happened.
Uploaded images and frames sampled from videos may be checked by automated safety tools to flag content that needs your review before publishing. These checks are signals, not a guarantee or a legal decision.
If you turn on alerts, Zenova sends you short notices about your publications (for example a Page name, a title and a time) by email or Telegram, depending on what you set up.
Service providers
Zenova Creator relies on Supabase for accounts, sign-in and the database; Cloudflare R2 to store the files you upload (videos, photos and their previews); Vercel to run the application; an email service for account messages and, if you turn them on, alerts (Resend) or Telegram; Meta services when you connect or publish to Facebook or Instagram; TikTok services only when you connect TikTok or publish to it; and Google (YouTube API Services) only when you connect a YouTube channel or upload to it. Each provider processes data under its own terms and privacy commitments.
Cookies and data saved in your browser
Zenova only uses the cookies it needs to work: one to keep you signed in, one to remember a browser you marked as trusted for seven days, one to remember your language, and short-lived ones while you reset your password. There are no advertising or analytics cookies.
Your browser also keeps, on that device only, your theme and language, whether you dismissed a reminder, unfinished drafts in Create and the caption templates you save. Clearing your browser data removes them.
Security and retention
We use private storage, separate workspaces, encrypted access to Facebook, Instagram, TikTok and YouTube, signed links for uploads and previews, server-side permission checks and verified Meta requests. No system can guarantee absolute security, so access is limited to what the product needs.
Workspace content and publishing history remain until you delete them or ask for your account to be deleted, except where a limited record is needed for security, disputes or legal obligations.
Your choices
You can disconnect a Facebook profile (with its Pages and Instagram accounts) or a YouTube channel from Accounts, or TikTok from its page, delete files from your Library, and ask for your Facebook data to be deleted. Removing Zenova Creator from your Facebook settings also starts the verified deletion. The Data deletion page explains each step.
Disconnecting stops new requests to that network and removes or hides the stored access, keeping only short security and reconciliation records. You can also remove Zenova directly from your account on each network.
Zenova Creator does not sell your personal information and does not use your content to train an artificial intelligence model of its own. You can ask to access, correct or delete your data, or object to its use, where the applicable law gives you those rights.
Contact and changes
Write to zenovacreator.mail@gmail.com. Important changes to this policy will show a new effective date.