Privacy Policy

• Your account: the email address you sign up with and your password. The password is never stored in readable form — it is hashed with scrypt, a one-way function, so we cannot see or recover it.
• Connected-account access tokens: when you connect a platform (Facebook, Instagram, LinkedIn, Bluesky, Mastodon, Telegram and others), that platform gives us an access token so we can publish on your behalf. These tokens are encrypted at rest and are used to identify and maintain your connection, publish the content you request, and verify published posts where supported.
• Content you create: the posts, drafts, captions, brand profiles and schedules you enter into the tool, and a record of what was published where.

We use your data for one purpose: to operate the service you asked for — to publish the content you schedule to the accounts you connect. Specifically:

• Your content is sent only to the platforms you explicitly connect and direct it to.
• Access tokens identify your connected accounts, maintain the connection, publish on your behalf, and support health checks and published-post verification.

We do not sell your data. We do not use it for advertising. We do not use it to train machine-learning or AI models.

When you connect an Instagram professional account, Meta gives Vyuh Drift an access token. We request only the two permissions we need to do the job:

• instagram_business_basic — to confirm which account is connected.
• instagram_business_content_publish — to publish the posts you create.

We use the Instagram connection to identify your professional account and publish media you have authored and asked us to post. We do not request direct-message or follower-list access. Our use of information received from Meta APIs follows Meta's Platform Terms and Developer Policies.

Instagram Insights collection is currently disabled. The connection requests account identity and publishing permissions, not an insights permission. Enabling insights requires the relevant permission, updated consent and account reauthorization.

When you connect Facebook, we collect the IDs and names of Pages you manage, the app-scoped ID of the person granting access, and the app ID. We store their Page access tokens encrypted at rest. We use this data to list your connected Pages and publish the posts you request. We retain the resulting post IDs and permalinks so you can open published posts and review their status. Facebook connects separately from Instagram; we do not require a linked Instagram account to connect a Page.

For both Meta connections, we retain the app and authorization-owner IDs to process removal of app access. When a verified removal callback identifies a connection, we deactivate that channel and erase its usable stored tokens. This does not delete your Drift account or posts already published on the platform.

Your data is kept for as long as your account exists. Deletion requests are processed manually within 30 days, following verification of the request (see below). Submitting the form does not immediately delete your account.

Vyuh Drift runs on two service providers, which process your data on our instructions and only to run the product: Vercel (hosting and file storage) and Neon (database, where connected-account tokens and account details are stored). Both run in the United States, so your data is stored and processed there: Vercel in its Washington, D.C. region and Neon on AWS US East (N. Virginia). Two smaller providers handle specific features: Resend sends account emails (it sees the recipient address and message), and Groq receives only the text you submit when you use AI drafting. We do not sell your data or share it for advertising.

You can request deletion of your account and all associated data — including every connected-account token and all content — at any time:

• Use the data-deletion request page, or
• Email us at harsh@vyuhmatrix.com.

Disconnecting a platform inside the app immediately removes that platform's stored access token.

Vyuh Matrix — harsh@vyuhmatrix.com. Questions about this policy or your data are answered at that address.