Privacy at Zoya

This initial policy is pending business and legal approval before production Meta submission.

What we store

We store account identity, connected destination identifiers, encrypted authorization grants, user-authored post content and media references, publication records, normalized metrics, deletion audit status so the service can connect accounts, publish requested content, report status, and display supported analytics.

Who processes data

Supabase, Vercel, and Meta process data only for the Zoya features and connected-platform actions described here.

Retention and control

Connections can be revoked, usable authorization material is removed on disconnect, and deletion requests remove imported Meta profile data, stored analytics, and unpublished social content subject to minimal compliance records.

Questions or requests: management@zoyaapp.io.