Privacy Policy

Last updated: 9 November 2026

1. What we process

Boris HQ may process account identifiers, encrypted authorisation tokens, campaign drafts, media URLs, captions, hashtags, scheduled publishing times, and platform analytics needed to provide connected publishing features.

2. How we use information

Information is used to connect accounts you authorise, save and review campaigns, publish approved content at your direction, retrieve performance analytics, and maintain service security.

3. Third-party platforms and storage

When you connect Instagram or YouTube, Boris HQ exchanges information with Meta or Google as needed for the features you authorize. Campaign records and encrypted tokens are stored in the configured Redis service. Media URLs are sent to the relevant platform for publishing. Each third party's privacy terms also apply.

4. Security

OAuth tokens are encrypted server-side and are not made available to browser scripts. We use reasonable measures to protect information and access credentials. No internet service can guarantee absolute security.

5. Retention and deletion

Campaign and token records remain in the configured service until removed by the operator or the storage is cleared. You can revoke access from Meta or Google and request deletion of associated Boris HQ records from the operator.

6. Contact

For privacy questions or deletion requests, use the contact details provided by the operator of Boris HQ.