Marketing OS Privacy Policy

Last updated September 2026

Who we are

Marketing OS ("the Service") is a marketing platform operated by Jiasaz Marketing. It helps businesses plan, create, schedule and measure content across their own connected social accounts. This policy explains what we collect, why, and how to get it deleted.

Contact: hello@jiasaz.xyz

Information we collect

DataWhy we hold it
Account details (name, email, password hash)To sign you in and secure your workspace
Brand information you enter (strategy, personality, notes, media)To generate and schedule your content
Access tokens for the social accounts you connectTo publish, read messages and read statistics on your behalf
Content pulled from connected accounts: posts, comments, direct messages, statistics, leadsTo show your inbox, analytics and CRM pipeline
Contacts you import or who subscribe (name, email, phone)To send the email and WhatsApp campaigns you create
Technical logs (IP address, browser, timestamps, errors)Security, abuse prevention and debugging

Platform data from Meta, Google, LinkedIn, TikTok and X

When you connect an account we request only the permissions the features you use require. We use that access to:

  • Facebook Pages: list your Pages, publish posts you schedule, read post and Page statistics, read and reply to messages and comments, and import leads from your Lead Ads forms.
  • Instagram Business/Creator: publish posts, carousels and reels you schedule, read post statistics, and read and reply to comments and direct messages.
  • Automatic replies (Facebook and Instagram): when you set up a rule, reply under comments on your own posts that contain your keyword, and send the commenter the private message you wrote — once per person per post, as Meta allows.
  • WhatsApp Business: send the template messages and broadcasts you create, and receive replies into your inbox.
  • Google Search Console and Google Analytics: read-only access to the search performance and website traffic of the sites and properties you choose for a brand. Nothing in your Google account is ever changed.
  • YouTube: see the channel you connect and upload the videos you schedule to it as Shorts. We do not read your other videos, your watch history or your subscriptions.
  • TikTok: read your basic profile and publish the videos you choose, with the audience and settings you pick for each.
  • X: read your basic profile, publish the posts you schedule with their pictures or video, and — on a paid access level — read mentions into your inbox.
  • LinkedIn: publish the content you schedule and read its statistics.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use YouTube API Services; Google's handling of that data is described in the Google Privacy Policy. You can revoke this Service's access to your Google and YouTube data at any time from your Google account permissions.

We never post without an action you scheduled or approved, we do not sell platform data, we do not use it for advertising, and we do not share it with third parties except the infrastructure and AI providers listed below.

AI processing

To draft captions, plans, replies and images, the content you ask us to generate — along with the brand context you have entered — is sent to the AI provider configured for your workspace (for example Google Gemini, OpenAI, Anthropic, OpenRouter or Stability AI). Those providers process it under their own terms. If you would rather not use AI features, simply do not configure a provider.

Service providers

We use hosting, database, email delivery (Resend) and the AI providers above. They process data on our instructions only.

How long we keep data

Workspace content is kept while your account is active. Access tokens are deleted as soon as you disconnect an account. Deleting your account removes your data within 30 days, except records we must keep for legal or accounting reasons.

Your rights

You can access, correct, export or delete your data, withdraw consent, and object to processing. Use the data deletion page or email us and we will respond within 30 days.

Security

Access tokens and API keys are encrypted at rest. Traffic is served over HTTPS. Access is limited to the members you invite to your workspace.

Children

The Service is for businesses and is not directed at anyone under 16.

Changes

If this policy changes materially we will notify workspace owners by email.