Privacy Policy

Last updated: April 11, 2026

This Privacy Policy describes how QALSER Inc. ("we", "us", or "our") collects, uses, and shares information in connection with your use of QOSYN (the "Service"), available at qosyn.com. By using the Service you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account Information

When you create an account we collect your name, email address, profile picture, and authentication credentials. You may sign up using email/password or via third-party OAuth providers (Google, GitHub).

Social Media OAuth Tokens & Data

When you connect social media accounts we receive OAuth tokens and limited profile/page data from the following platforms:

  • Facebook — pages you manage, page access tokens, posting permissions (scopes: pages_manage_posts, pages_read_engagement)
  • Instagram — business/creator account info, media publishing (scopes: instagram_basic, instagram_content_publish)
  • Threads — profile info, content publishing via Meta Threads API
  • LinkedIn — profile info, organization access, posting permissions (scopes: w_member_social, r_liteprofile)
  • Twitter/X — profile info, tweet posting (OAuth 2.0 with PKCE, scopes: tweet.read, tweet.write, users.read)
  • TikTok — profile info, video publishing (scopes: user.info.basic, video.publish)
  • Pinterest — profile info, pin creation (scopes: boards:read, pins:write)
  • YouTube — channel info, video uploads via YouTube Data API v3 (scopes: youtube.upload, youtube.readonly)
  • Bluesky — profile info, post publishing via AT Protocol

We store OAuth tokens securely and use them solely to publish content and retrieve account information on your behalf. We do not access your private messages, friend lists, or data beyond the scopes listed above.

User Content

Content you create, generate, or upload through the Service, including text posts, images, videos, and AI-generated content.

AI Interaction Data

Prompts and inputs you provide to the AI content generation features. This data is used to generate content and improve the Service.

Usage & Analytics Data

We automatically collect device information, browser type, IP address, pages visited, and interaction data through cookies and similar technologies.

2. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Generate AI-powered content using third-party AI providers (OpenAI GPT-4o, Anthropic Claude)
  • Publish and schedule content to your connected social media accounts
  • Process payments and manage subscriptions via Stripe
  • Send service-related communications
  • Analyze usage to improve features and user experience
  • Comply with legal obligations

3. Third-Party Services

We share data with the following third-party services:

  • Meta APIs (Facebook, Instagram, Threads) — content publishing
  • LinkedIn API — content publishing
  • Twitter/X API — content publishing
  • TikTok API — video publishing
  • Pinterest API — pin creation
  • YouTube Data API — video uploads
  • OpenAI (GPT-4o) — AI content generation
  • Anthropic (Claude) — AI content generation
  • Stripe — payment processing
  • Vercel — hosting and infrastructure
  • NeonDB — database storage

Each third-party service processes data in accordance with their own privacy policies.

4. Cookies & Analytics

We use essential cookies to maintain your session and preferences. We may use analytics tools to understand how the Service is used. You can control cookie preferences through your browser settings.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time (see our Data Deletion Policy).

6. Data Security

We implement industry-standard security measures to protect your data, including encryption of OAuth tokens at rest, HTTPS for all data in transit, and secure infrastructure on Vercel and NeonDB.

7. GDPR Compliance (EEA Users)

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at support@qalser.com. Our legal basis for processing is your consent (for OAuth connections) and legitimate interest (for Service operation).

8. CCPA Compliance (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at support@qalser.com.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including Canada and the United States. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: