Privacy Policy

Last updated: October, 2026

1. Users Covered by This Privacy Policy

• Agency Users (Admin/Staff): Vision Art Infotech employes operating Vision Code-B. They access the system to support one or more client accounts.
• Client Users: Business owners/staff who login to see/manage their own brand’s connected accounts and website blog.
• Connected Platform End Users: End users who engage with a client’s social pages or blog posts – their comments may be processed thru our system as described in Section 3.

2. Information We Collect

2.1 Account Information (collected directly from you)

• Login credentials: The email address and password of each Admin, Staff or Client user.
• Role & client association: Your role (Client, Staff or Admin) and, for Client users, the business account you are associated with.
• Login activity: Timestamp of your last login, Phone no. and IP address + email logged on each login attempt (used for security/rate-limiting only, e.g. blocking repeated failed logins).
• Password reset data: A temporary reset token with an expiration date if you request to reset your password.

2.2 Connected Platform Data (via OAuth / API Connection)

When you connect a social account, Google account, or your website blog through Vision Code-B, we receive and store:

• Access & refresh tokens: Authorisation tokens from Facebook, Instagram, YouTube, LinkedIn and Google (Business Profile & Search Console) – used only to act on your behalf on that platform (e.g. publish a post, read review data).
• Website blog connection details: A secure connection key/credential to your website’s blog that is only used to publish or update blog posts you create in the dashboard.
• Connected account identifiers: The platform account ID /site URL you connected and the connection status (connected, expired, disconnected).
• Google Business Profile account: When you connect Google Business Profile, you grant the “business.manage” permission. We use it only to list the Business Profile accounts and locations you manage, publish and delete posts for the location you connect. We store the account/location identifier and business name of that location. Where you add a photo to a Google Business Profile post, it is made available to Google through a publicly accessible link so that Google can retrieve and display it.
• Content you create: Post text, titles and any uploaded images/videos you create within the platform to be published to connected social accounts or your website blog.
• Publish results: Logs of each publish attempt (status code, response, success/failure) so you can see if a post or blog article went out successfully.

2.3 Data From Third-Party Platforms (received back)

• Performance analytics: Reach, likes, followers, views and other engagement metrics from your connected social accounts.
• Search performance data: Clicks, impressions and query/keyword data from Google Search Console.
• Google Business Profile post data: list of your recent Google Business Profile posts (post text, publish date, image link and Google’s post identifier), retrieved through the Google Business Profile APIs and displayed in our My Posts sections. We do not read, store or display customer reviews, reviewer names or ratings from Google Business Profile, and we do not reply to reviews on your behalf.
• Webhook events: The raw event data we get from connected platforms (e.g. post was liked/commented on) to keep your dashboard up to date.

2.4 Technical & Usage Data

• Session data: Temporary session identities that are utilized to make sure that you are logged in securely.
• Uploaded media: Images/videos you upload for posts or blog articles are temporarily stored on our server before being sent to the relevant platform, then automatically deleted after a retention period.
• System/error logs: Application logs help in identifying the technical problems faced (do not intentionally add your passwords or complete tokens).

3. How We Use This Information

• To let you log in securely and access only the client accounts your role permits.
• To publish, schedule and manage posts on your behalf across connected social platforms, Google Business Profile and your website blog.
• To show you analytics and SEO data (social engagement metrics, Google Search Console performance data) and your post history through the dashboard.
• To monitor and block any suspicious login activities such as continuous incorrect password entry from the same IP address.
• To run background maintenance: refreshing expiring platform connections, deleting temporary media files and monitoring system health.
• To provide customer support and troubleshoot issues you report, such as a failed post or a broken connection (see Section 8).
• To comply with legal obligations and to protect the security of our platform and users.

What we do not do:

• We do not use your information, or data received from connected platforms, for advertising.
• We do not sell your data or share it with data brokers.
• We do not use data received from Google, Meta or LinkedIn to develop, improve or train AI/ML models.

4. Who We Share Information With

We do not share your login credentials, platform tokens, or client data with any other third party, advertiser, or data broker.

5. Data Storage & Security

• Encryption of tokens: Access and refresh tokens for each platform connected (including the blog you connect via website blog connection) are encrypted within our database – and are never stored in plain text format – getting decrypted at the time of actual publishing or fetching your data.
• Access based on roles: Client users have access only to their respective account’s data; Staff and Admin access depends on their respective roles.
• Temporary media: Uploaded media for posts is temporarily stored until published and then scheduled to be deleted.
• Separation of systems: Credentials of each platform are managed by an internal component called “The Hub”; the dashboard where you sign in does not interact directly with Facebook/Google/your blog, and thus your tokens become less exposed.

While we take reasonable technical measures to protect your data, no online system is 100% secure, and we cannot guarantee absolute security. We do not publish the specific encryption methods or key-management details of our systems, as doing so could itself create a security risk.

6. Data Retention

• Your account details will be stored as long as you continue using your account.
• The posted content, blogs, publishing history, and analytics will be stored to provide you with a historical record in “My Posts” and “Analytics” until you or your agency asks to delete it.
• Google Business Profile post history and post identifiers are stored to maintain your history in “My Posts”.
• Temporary uploaded media files are deleted automatically after a short retention window.
• The login attempts will be stored as long as they are needed for security/rate-limiting purposes.
• If a platform or website blog connection is disconnected, the associated access credentials are invalidated and removed.

7. Your Rights & Choices

• Access & correction: You have the ability to view and modify your account information via the Settings, or you may contact us.
• Disconnecting platforms: You can disconnect any connected social/Google account at any time from the Accounts/Connections page, which revokes our access to that platform.
• Google Business Profile: Disconnecting Google Business Profile from the Accounts/Connections page deletes the stored tokens and connection, and the cached post data for that platform, from our systems. You can also revoke access at any time from your Google Account permissions page (myaccount.google.com/permissions). Posts already published to your Google Business Profile remain there until deleted from the dashboard or from Google.
• Deletion: You may ask for the deletion of your account and the related information by contacting us at info@visioncodeb.com.
• Password: You may update your password at any time through your account settings. If you need to reset your password, please contact us for assistance.

8. Admin Access to Client Accounts

Authorized personnel of Vision Art Infotech (the service provider) may access connected client account information solely for purposes such as providing, managing, supporting, and maintaining the service — for example, troubleshooting a failed post, restoring a broken platform connection, or responding to a support request. Such access is limited to what's necessary for these purposes and is not used for any unrelated purpose.

9. Children's Privacy

Vision Code-B is a business tool intended for use by marketing agencies and their business clients. It is not directed at, and we do not knowingly collect data from, children under 18.

10. Changes to This Policy

We may update this Privacy Policy as the platform evolves (e.g. if new platforms are integrated). We'll update the “Last Updated” date above when changes are made, and material changes will be communicated to account admins.

11. Contact Us

For any privacy questions, data access requests, or account deletion requests, contact: Vision Art Infotech — info@visioncodeb.com — S G Highway, Ahmedabad-382 470, gujarat, India.