Privacy notice

Who we are

Ovelit Reach (smm.ovelithub.com) is a product of OveliTHub (ovelit.com). It lets businesses and agencies schedule and publish social media posts and answer comments, messages and reviews in one inbox. OveliTHub runs the service and decides how the information in it is used. Contact: hello@ovelithub.com.

What we collect

• Your account: name, email address, a hashed password and your time zone.
• Your workspace content: brands, posts, images and videos you upload, notes, saved replies and team settings.
• Connected social accounts: when you connect a Facebook Page, Instagram account, X profile, LinkedIn profile or Page, YouTube channel, Pinterest account, Google Business Profile location or Threads profile, we receive from that network an access token and basic profile data (id, name, username, picture, and for Pinterest your boards). We do not receive or store your password.
• Engagement data: comments, messages, mentions and reviews on your connected accounts, with the sender's public name and picture, so your team can read and answer them; and public counts (likes, comments, shares, views) of posts published from here.
• Basic technical data: sign-in sessions, IP address and browser type, kept to keep accounts secure and the service running.

How we use it

Only to provide the service you asked for: publishing the posts you create at the times you choose, showing your inbox and replying when you press Send, showing results, and keeping your account secure. We act only on your instruction: we never post, reply, follow or message anyone on your behalf unless you or your team did it in the app.

We do not sell personal data, do not use it for advertising, and do not use connected-account data to train artificial intelligence models.

Google user data

Ovelit Reach's use and transfer of information received from Google APIs (YouTube Data API and Google Business Profile APIs) adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube and Business Profile data only to upload the videos and posts you create, read and reply to comments and reviews, and show their results. You can remove our access at any time at myaccount.google.com/permissions. YouTube features are subject to the YouTube Terms of Service and the Google Privacy Policy.

Who else sees it

People in your workspace, according to their role. Clients you share a review link with see that brand's posts waiting for approval. The social networks receive what you publish or send to them. Our hosting provider stores the data on our behalf. We disclose data to authorities only when Bangladeshi law requires it.

How long we keep it

Until you delete it. Removing a channel deletes its access token and its inbox history straight away. Deleting a workspace deletes its brands, channels, posts, inbox and files. Posts already published stay on the networks; delete them there if you wish. Backups roll over within 30 days.

Your choices

• Remove a channel under Channels, or revoke our access in the network's own settings (for Facebook and Instagram: Settings, Business Integrations; for Google: myaccount.google.com/permissions).
• Change your name, email and password under My account.
• Ask for a copy of your data, or for deletion, at hello@ovelithub.com. See also data deletion.

Security

Access tokens and app keys are encrypted at rest. The site runs on HTTPS only. Passwords are hashed. Sign-in attempts are rate limited.

Changes

If we change this notice in a way that matters, we tell workspace owners in the app before it takes effect.