Privacy Policy
1. Who we are
SM Otomasyon (“we”, “us”) is a social media management service that lets businesses and creators plan, schedule and publish their own content to Instagram, Facebook Pages, TikTok, YouTube, X, Pinterest and Telegram from one dashboard at https://oto.assyazilim.com. The data controller is SM Otomasyon (Türkiye). Contact: alisalihsapanci@gmail.com.
2. Information we collect
- Account information: your name, email address, organization name and a salted hash of your password (we never store your password in plain text).
- Content you create: captions, titles, hashtags, links, scheduling times, platform-specific settings and media files (images, videos) you upload.
- Connected platform data: when you connect a social account via the platform's official OAuth screen we receive access/refresh tokens and basic profile information (platform user ID, username, display name, profile picture) and the list of destinations you can publish to (Facebook Pages, Instagram professional accounts, Pinterest boards, YouTube channel). We do not receive or store your social media passwords.
- Publishing results: post IDs/URLs returned by the platforms and publishing logs (success or error messages).
- Technical data: a session cookie, your language preference and standard web server logs (IP address, browser, timestamps) kept for security.
We do not collect your followers, direct messages, analytics of other users or any data beyond what is listed above.
3. How we use information
- To provide the service: show your connected accounts and destinations, store your drafts and publish content only when and where you instruct us to.
- To keep connections working (refreshing access tokens) and to show the status of each post.
- To secure the service, prevent abuse and provide support you request.
We do not sell personal data, use it for advertising, build profiles, or use platform data or your content to train artificial intelligence models.
4. Data from social platforms
| Platform | Permissions we request | Purpose |
|---|---|---|
| pages_show_list, pages_manage_posts, pages_read_engagement | List the Pages you manage and publish your posts to the Page you choose. | |
| instagram_basic, instagram_content_publish, pages_show_list, pages_read_engagement | Identify your Instagram professional account and publish your photos/Reels. | |
| TikTok | user.info.basic, video.publish | Show your TikTok nickname/avatar and post videos/photos you create to your profile with the privacy and interaction settings you select. |
| YouTube | youtube.upload, youtube.readonly | Display your channel name and upload videos you select to your channel. |
| user_accounts:read, boards:read, pins:read, pins:write | List your boards and create Pins on the board you choose. | |
| X | tweet.read, tweet.write, users.read, media.write, offline.access | Publish your posts and attached images. |
Your use of each platform remains subject to its own terms and privacy policy: Meta, TikTok, Google, Pinterest, X.
5. Google & YouTube API Services
SM Otomasyon uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and your information is also governed by the Google Privacy Policy.
SM Otomasyon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide the user-facing features described above, is not transferred to third parties (except as necessary to provide the service, comply with law, or as part of a merger with notice), is not used for advertising, and is not read by humans unless you give explicit consent (e.g. for a support request), it is necessary for security purposes, or it is required by law.
You can revoke our access at any time from Google Security Settings. When you disconnect the channel in SM Otomasyon, the stored tokens are deleted immediately.
6. Sharing
- Social platforms you choose: we send your content to the platform only when you publish or schedule it.
- Service providers: our hosting provider stores data on our behalf under confidentiality obligations. Web fonts are loaded from Google Fonts.
- Legal: if required by law or to protect rights and safety.
Within your organization, users you invite can see the organization's accounts and posts. Each organization is fully isolated from others.
7. Storage & security
Access and refresh tokens are encrypted at rest with AES-256-GCM. Traffic is served over HTTPS. Passwords are hashed with bcrypt. Access to production systems is restricted to authorized personnel.
8. Retention
- Platform tokens are kept while the account is connected and deleted immediately when you disconnect it or when the platform notifies us that you removed the app.
- Content, media and logs are kept while your organization exists; you can delete individual items at any time.
- When you delete your organization, all related data is deleted immediately from the live database; backups are overwritten within 30 days.
9. Your rights
Depending on your location (e.g. GDPR in the EU, KVKK in Türkiye) you have the right to access, correct, export, restrict or delete your personal data and to object to processing. You can export your data from Settings → Privacy & data, or email us at alisalihsapanci@gmail.com. We respond within 30 days. You may also lodge a complaint with your data protection authority.
10. Deleting your data
See our Data Deletion Instructions. In short: disconnect an account in Accounts (tokens are deleted instantly), delete your whole organization in Settings → Privacy & data, remove our app from your Facebook/Instagram/Google/TikTok settings, or email us.
11. Cookies
We use only essential cookies: a session cookie to keep you signed in and a language cookie. Your theme preference is stored in your browser's local storage. We do not use advertising or third-party tracking cookies.
12. Children
The service is intended for businesses and users aged 18 or older (or the age of majority in their country). We do not knowingly collect data from children.
13. Changes & contact
We will post changes on this page and update the date above; material changes will be announced in the app. Questions: alisalihsapanci@gmail.com · SM Otomasyon, Türkiye.