Privacy Policy
Learn how Bhusan collects, uses, encrypts, and protects your information, social tokens, and creative assets across our agentic scheduling infrastructure.
Our Core Privacy Commitments
- • No Data Selling: We never sell, monetize, or broker your personal information or content.
- • Zero Model Training: Your private media, prompts, and drafts are never used to train public LLMs or generative algorithms.
- • Encrypted OAuth Storage: Social media tokens are encrypted at rest with edge-managed keys and utilized solely for publishing and token refreshing.
- • Complete Control: Disconnect any social channel or purge your account and media assets at any time with a single click.
We manage secure token exchanges and strict permission scopes for all connected endpoints:
Information We Collect
We collect information necessary to provide and operate our agentic publishing platform:
Your email address, authentication credentials, workspace identifiers, and billing preferences.
OAuth access tokens, refresh tokens, platform account IDs, usernames, and profile avatar URLs. These credentials allow Bhusan to post content and read analytics on your behalf within strictly approved scopes.
Uploaded images, video clips, captions, thread contents, audio tracks, and scheduling calendar metadata stored in our secure Cloudflare R2 object storage.
Prompts submitted through our Model Context Protocol (MCP) server, Claude Code skills, ChatGPT extensions, or CLI tools, used in real-time to generate post variations, clip transcripts, or scheduling schedules.
How We Use Your Information
Bhusan processes your information solely for the following legitimate purposes:
- Automated & Manual Publishing: Dispatching posts, video reels, and carousels to your selected social platforms according to your scheduled timeline.
- Single-Flight Token Management: Utilizing automated background workers and Durable Object mutexes to periodically refresh expiring OAuth tokens so your scheduled posts never fail.
- Analytics & Auto-Action Milestones: Fetching post performance (impressions, likes, comments) via official APIs to display in your analytics dashboard and execute automated triggers (e.g., auto-repost when likes exceed 100).
- Service Communications: Notifying you of failed publishing attempts, quota limits, or critical security alerts.
Artificial Intelligence & Model Privacy Policy
As an agentic scheduling platform, Bhusan integrates with state-of-the-art Large Language Models (LLMs) and inference APIs (such as Anthropic Claude, OpenAI, and Cloudflare Workers AI):
• Zero Public Training: We contractually enforce and maintain settings ensuring that user prompts, media transcripts, and scheduled posts are NOT used by foundational LLM providers to train public models.
• Ephemeral Inference: Prompts sent through our Model Context Protocol (MCP) server are processed ephemerally to generate post drafts or adapt aspect ratios and character limits.
• User Controlled Autopilot: AI agents cannot publish directly unless you explicitly activate Autopilot mode in your workspace settings.
Data Storage, Encryption & Security Standards
We deploy bank-grade security practices across our serverless edge architecture:
- Encryption in Transit: All web traffic, API requests, and webhook callbacks are enforced over TLS 1.3 encryption.
- Encryption at Rest: Database records in Cloudflare D1 and multimedia assets in Cloudflare R2 are secured using AES-256 encryption.
- Isolated Tenant Workspaces: Multi-brand workspaces are logically isolated with strict relational constraints and authenticated API tokens.
- Least-Privilege Scopes: We request only the minimal OAuth scopes required to publish content and query necessary post analytics.
Account Disconnection & Data Deletion Rights
You hold complete authority over your social connections and stored data:
- Disconnection: You can disconnect any social media account anytime from your dashboard. Upon disconnection, stored OAuth access and refresh tokens are permanently purged from our database.
- Revocation at Provider: You can revoke Bhusan's access at any time via your settings on Twitter/X, Google, LinkedIn, Meta, or TikTok.
- Full Account Deletion: Upon your request, we will delete your entire workspace, including all media files, scheduled posts, and historical performance metrics.
To submit a deletion or export request under GDPR or CCPA/CPRA, please contact privacy@rabinacharya.info.np.
Cookies & Local Storage
Bhusan uses essential session cookies and local storage tokens solely to maintain your authentication state and persist your interface preferences (such as calendar view filters or dark/light modes). We do not employ third-party cross-site advertising tracking cookies.
Contact Our Privacy Team
For questions, data access requests, or privacy concerns regarding this policy, please reach out to our Data Protection Officer:
Privacy Officer: Bhusan Privacy & Data Governance
Email: privacy@rabinacharya.info.np
Location: Kathmandu, Nepal
Domain: bhusan.rabinacharya.info.np