OneShare Privacy Policy

1. Who we are

OneShare is a social media publishing tool operated by OBT Agency ("we", "us"), a digital studio registered in Israel as a sole proprietorship — licensed dealer (Osek Murshe) no. 300173978, trading as OBT. OneShare is part of the Manzuma product family and is reached at https://oneshare.manzuma.app. For any privacy question or request, write to develop@obuzt.com — we are the controller of the data described here.

2. What this policy covers

This policy covers the OneShare application. Your Manzuma account itself — how you sign in, your identity and your businesses — is covered by the Manzuma privacy policy at https://accounts.manzuma.app/privacy. Content you publish to Facebook, Instagram or TikTok is, once published, governed by that platform's own privacy policy.

3. The data we collect

• Identity, from your Manzuma account: your name, email address, the businesses you belong to and your role in each. We receive this from Manzuma; OneShare does not run its own sign-in.
• Connected accounts: for every account you connect — the account id, its name or handle, its profile picture, and the settings the platform reports for it (for example which privacy levels your TikTok account allows, or whether duet and stitch are disabled on it).
• Content you give us: the media files you upload, the caption and hashtags you write, and the per-platform options you choose — TikTok privacy level, comment, duet and stitch settings, and commercial-content disclosure.
• Publishing records: which destination each post was sent to, when, its status, how many attempts it took, the id and link of the published post, and the platform's own message when a publish fails.
• Technical records: ordinary server logs — time, path, response status and error codes. Access tokens are never written to a log.

We do not collect special categories of personal data, we do not buy data about you from anyone, and we do not build advertising or behavioural profiles.

4. Access tokens

When you connect an account, the platform issues an access token. Tokens are stored encrypted in Manzuma's central integrations vault, not by OneShare. OneShare asks the vault for a token at the moment of publishing and discards it immediately afterwards; it never stores one and never writes one to a log or an error message.

5. Why we use it, and on what basis

• To provide the service — to show your connected accounts as destinations, to publish what you asked us to publish, and to show you the result. Basis: performance of our contract with you.
• To keep the service working and safe — retries after a temporary failure, rate-limit handling, debugging and abuse prevention. Basis: our legitimate interest in a reliable, secure service.
• To answer you when you contact support. Basis: performance of our contract and our legitimate interest in supporting our users.
• To meet legal obligations where they apply to us.

6. Platform data

Data we read from Facebook, Instagram and TikTok is used only to display your publishing destinations and to carry out the publishing you requested. We do not use it to build profiles, we do not use it for advertising, and we do not sell it or share it with anyone other than the parties named in section 7. We handle it in line with each platform's developer terms, and we delete it when you disconnect the account.

7. Who we share data with

• The platform you chose. Publishing means sending your media, caption and chosen options to Facebook, Instagram or TikTok — this is the purpose of the service and it happens only for destinations you ticked.
• Our infrastructure provider. Railway hosts our application, database and private object storage in the United States, and processes data only on our instruction.
• Legal requests. Where we are legally required to disclose data, and only to the extent required.

We never sell your personal data, and we do not share it for advertising.

8. International transfers

Our servers and storage are located in the United States. If you are in the EEA, the UK or Israel, your data is transferred there to provide the service, under the appropriate safeguards our provider offers for such transfers.

9. How long we keep it

• Connection tokens: until you disconnect the account. Disconnecting deletes our copy and revokes our access at the platform.
• Media, captions and publishing records: for as long as your business uses OneShare, so you can see what was published and what failed.
• Server logs: short-lived, kept only for operations and debugging.
• On request or on deletion of your account: we erase your OneShare content and publishing records within 30 days. Posts already published on a platform stay on that platform — delete them there.

10. How we protect it

• All traffic runs over HTTPS.
• Access tokens are encrypted at rest in the vault, and are never logged.
• Media is kept in private storage with no public read access. Uploads use a signed link valid for 15 minutes, and the platform fetches the file through a signed link that expires.
• Your content is visible only to members of the business it belongs to.

11. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or send it to another provider. Write to develop@obuzt.com and we answer within 30 days. If you are in the EEA or the UK you may also complain to your local data protection authority.

12. Deleting your data

• One account: open Integrations in your Manzuma account and press Disconnect. The tokens are deleted and our access is revoked at the platform immediately.
• Everything in OneShare: email develop@obuzt.com from the address on your account and ask us to erase your OneShare data. We erase it within 30 days and confirm by email.
• Your whole Manzuma account: Account settings in your Manzuma account has a delete option that ends your identity across the product family.

13. Cookies

OneShare sets two cookies: the Manzuma session cookie that keeps you signed in, and a cookie that remembers your language choice. We run no advertising cookies, no third-party analytics and no tracking pixels.

14. Children

OneShare is a business tool and is not directed to children. You must be 18 or older to use it. If we learn that we hold data about a child, we delete it.

15. Changes to this policy

If we change this policy we publish the new version on this page with a new date, and for material changes we tell you inside the app before the change takes effect.

16. Contact

OBT Agency — licensed dealer (Osek Murshe) no. 300173978, Israel
develop@obuzt.com · https://oneshare.manzuma.app

Terms of Service