Privacy Policy

OBT (registered company no. 300173978) — 67 Haim Levanon St., Tel Aviv. For any privacy question: develop@obuzt.com.

• Account data: your name, email or phone number, and profile picture if you signed up with Google or Facebook.
• Business data: the business name, its members and their roles.
• Platform connections: when you connect Facebook, Instagram or Google, we store an access token, the permissions you granted and the assets you selected (pages, ad accounts).
• Technical logs: sign-in time and IP address — for security purposes only.

We never collect passwords for other platforms, and we never see them — connecting happens through the platform's own gateway.

• To sign you in and protect your account.
• To run the services you asked for — publishing, campaign management, contract management and more.
• To improve the product and fix faults.
• To contact you about your account (sign-in codes, security alerts).

We don't sell your data, and we don't use it for third-party advertising.

Manzuma is a single platform made up of several products (co-Suite · HeartBeat · OneShare · LegaliSync). Your account and your platform connections are shared between these products so you don't have to sign up or reconnect in each one. All of the products belong to OBT and are covered by this same policy.

This sharing is limited to OBT products — it never goes to any third party.

If you connect a YouTube channel in OneShare, Google asks you for two permissions and nothing more: upload videos (youtube.upload) andread your channel (youtube.readonly). We do not request youtube.force-ssl, the permission that would let an app delete your videos and comments.

• What we access: your channel's name, id and picture, so we can show you which channel you are about to publish to; and permission to upload the video you composed, when you press publish.
• What we store: that channel name, id and picture, and your Google access and refresh tokens, encrypted. We do not store copies of your YouTube videos, your viewers, your subscribers or your analytics.
• Who we share it with: nobody. It is never sold, never used for advertising, and never used to train AI models.

Manzuma's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use this data only to provide the features you can see in the interface — publishing to your channel and showing you the result.

Disconnecting the channel revokes the token at Google immediately, in the same action. You can also withdraw our access yourself at any time from myaccount.google.com/permissions.

Publishing to YouTube is also governed by the YouTube Terms of Service and the Google Privacy Policy.

• Meta — when you connect Facebook or Instagram.
• Google — sign-in, and the Google connection if you enable it.
• Resend — account emails. Inforu — SMS messages.
• Railway and Cloudflare — hosting and protection.
• Microsoft Azure — hosts our lead-capture system, which receives the lead forms submitted on Facebook and Instagram.

Platform access tokens are encrypted with AES-256-GCM before they are stored, and every connection uses HTTPS. Access to the tokens is limited to authorized services, with separate keys for each product.

You can delete your account and all of your data at any time:

• Inside Manzuma: Settings → Delete account.
• Or email us at develop@obuzt.com and we'll delete it within 30 days.
• If you signed in with Facebook, you can also remove the app from your Facebook settings and we receive the deletion request automatically — details on the data deletion page.

Deletion removes your account, your sessions and every connection token. Security logs are kept for up to 90 days and then erased.

You have the right to access your data, correct it, delete it, or withdraw your consent to any connection. Contact us and we'll reply within 30 days.

If we make a material change, we'll notify you by email or in the product before the change takes effect.