Privacy policy

We use PostHog for cookieless measurement of page visits, referring sites, campaign codes, devices, and basic actions. These events are not linked to customer accounts and do not use persistent browser identifiers. PostHog temporarily processes the IP address and browser information to generate a daily identifier, then removes the IP before enrichment; anonymous events do not include country information. Daily identifiers cannot reliably measure returning visitors across days or devices. You can disable anonymous measurement below; browser Do Not Track and Global Privacy Control are respected. At signup, you may separately allow account-linked product analytics. This optional choice can be changed in Settings and also controls future background account events. Account-linked events use internal user and organization identifiers and your fixed onboarding choices to understand feature usage and customer segments. We do not link earlier cookieless visits to your account. We do not send names, emails, workspace names, post content, prompts, passwords, payment credentials, or arbitrary URL query strings. Session recording is disabled. Previously collected events remain subject to project retention; contact support to request deletion.

Onshrha Tech operates Onshrha from Alexandria, Egypt. This policy applies to onshrha.com, its application, workspaces, and related features. It explains the data we process when you visit, create an account, connect a social platform, or purchase a plan.

If you use Onshrha for a company or client, you are also responsible for informing the people concerned about how you use their data and content in the service.

We collect the data needed for the features you choose. The details depend on your account settings and connected platforms.

• Account data: email address, an irreversible password hash, verification status, registration IP address, secure session identifiers, time zone, and settings.
• Workspace data: brand and product names and descriptions, ideas and instructions, tone and language, drafts and captions, schedules and campaigns, saved replies, and publishing attempt statuses.
• Images and media: uploaded files, selected references, and media created using AI tools.
• Connected-platform data: account and Page identifiers and names, encrypted access tokens, and content, comments, and metrics you ask Onshrha to display or manage.
• Subscription and payment data: plan, credits, account limits, order number, amount, payment status, and transaction references. We do not store your card number or security code.
• Support data: messages you send by email or chat, and technical details you share to resolve a problem.

• Create and verify your account, keep you securely signed in, and protect the service against misuse.
• Save brand identities and products, prepare content and images, and organize drafts, campaigns, and the calendar.
• Connect the accounts you choose, schedule or publish content, and display attempt results, comments, and available platform data.
• Manage credits, plans, and orders; verify payment; and provide support and operational notifications.
• Diagnose faults, improve reliability, meet legal requirements, and protect users’ and the platform’s rights.

When you request AI content, we send the provider the information needed to fulfil it, such as your idea, tone, platform, selected brand or product details, and reference images. If you add links as campaign sources, we may fetch those pages and use relevant parts to prepare posts. Uploaded source documents may also be processed for the campaign you configure.

We do not include your password or social-platform access tokens in generation instructions. Avoid entering unnecessary sensitive personal data or secrets, and review each output before saving or publishing it.

Automated outputs may be inaccurate or similar to other content. You make the final decision about their use.

We do not sell your personal data. We share the minimum required with service providers or the platforms you choose to operate Onshrha. These may include:

• AI providers, including OpenAI and fal-hosted services, to generate requested text, images, narration, or video according to the selected feature.
• Connected platforms, including Meta’s Facebook, Instagram and Threads, X, and TikTok where enabled, to connect accounts, publish, and retrieve data within granted permissions.
• DigitalOcean for infrastructure and private media storage, using temporary links when needed for publishing.
• Google Workspace for verification, support, and notification emails.
• Kashier for payment processing. The provider supplies its secure payment form and handles payment-method details.
• Tawk.to for the website’s chat and support widget.

Some providers may process data outside Egypt according to their infrastructure locations and terms. We may also disclose data when required by law or necessary to prevent fraud or serious harm.

Onshrha uses YouTube API Services. When you connect a channel, we store its identifier and name, encrypted authorization tokens, and upload progress to deliver the videos you approve. We send your chosen video, title, description, visibility, audience and synthetic-content disclosure to YouTube, and read processing status to confirm delivery. We do not use YouTube API data to train AI models.

Disconnecting a channel removes its saved authorization tokens and stops pending delivery. It does not delete videos already on YouTube. You can also revoke access in Google security settings. To request deletion of stored channel data or ask about privacy, contact help@onshrha.com or follow our data-deletion steps.

The application uses a necessary secure cookie to manage your login session, which normally lasts seven days unless you log out or change your password. Tawk.to may use its own technologies when loaded or used. We do not use these cookies to sell an advertising profile about you.

We use encrypted connections, hashed passwords, session tokens stored in a form that cannot be used directly, encrypted social access tokens, and private media storage with time-limited links. Operational access is limited to what is needed.

No storage or transmission method is completely secure. If you discover unauthorized access, change your password, disconnect affected accounts, and contact us immediately.

We retain account and workspace data while the account exists or as needed to provide the service. We may keep order, payment, support, and security records longer when needed for accounting, fraud prevention, dispute resolution, or legal obligations.

When you delete an item, disconnect a platform, or request account deletion, we delete or disassociate active data as appropriate. Limited copies may remain temporarily in backups until the normal backup cycle replaces them. We cannot remove copies already sent to an external platform; delete those on that platform too.

You can update account and workspace details, delete drafts and media, and disconnect social accounts in the app. You may contact us to request a copy or correction of your data, account deletion, or to object to specific processing. We will request enough information to verify ownership. We handle requests with regard to Egypt’s Personal Data Protection Law No. 151 of 2020 and other applicable rules.

The service is intended for business owners and professionals and is not designed for children. Do not create an account or provide a child’s data unless legally authorized.

We may update this policy as the service or legal requirements change. We will publish the new version here, update its date, and communicate material changes appropriately.

For privacy questions or requests, contact Onshrha Tech in Alexandria, Egypt at help@onshrha.com.