PeepaalFlow ("PeepaalFlow", the "App", the "Service") is operated by Peepaal.in, the trading name of Vaibhav Vishal, sole proprietor of M/s Mukti Nath Khad Beej Bhandar (registered in India, Udyam registration UDYAM-BR-01-0039282), through its registered unit Peepaal Flow ("we", "our", "us"). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have — with dedicated disclosures for every platform we integrate with.
PeepaalFlow is a social-media management and automation tool. It lets you schedule and publish content — Reels, image posts, Stories, and more — to your connected Instagram, Facebook, Threads, YouTube, TikTok and LinkedIn accounts, automate replies to direct messages and comments (optionally using AI), and view cross-platform analytics.
The Service consists of an Android app, a website at peepaalflow.com, and a secure cloud backend. Publishing to social platforms is performed by our backend on your behalf — never directly from your device.
By creating an account or using PeepaalFlow, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
When you connect an account through each platform's official OAuth flow, we receive and store — strictly within the scope of permissions you grant:
| Purpose | Data Used |
|---|---|
| Create and authenticate your account | Email, hashed password, auth user ID |
| Connect and maintain your social accounts | OAuth tokens, profile data |
| Schedule and publish your content | Media, captions, scheduling settings |
| Automate DM and comment replies | Automation rules, message/comment content |
| Generate AI-assisted replies (when enabled) | Trigger message content (sent to Google Gemini) |
| Show your cross-platform analytics | Profile and media engagement statistics |
| Store & deliver media for publishing | Uploaded images/videos (Cloudflare R2) |
| Maintain security & prevent abuse | Logs, rate-limit counters, tokens |
| Support, improve, and debug the Service | Diagnostics, account & communication records |
| Comply with legal obligations | As required by applicable law |
We do not sell, rent, or trade your personal information, and we do not use your content to build advertising profiles.
If you enable AI automation, the content of an incoming message or comment that matches your rules is sent to Google's Gemini API to generate a suggested reply, together with the minimum context you configure (such as your reply guidelines or an approved knowledge source).
Google's processing of this data is governed by the Google Privacy Policy and Google's Generative AI Terms.
When you connect your Instagram Business or Creator Account through Meta's official Instagram Business Login, or through Facebook Login via the Facebook Page it is linked to, we access the following data via the Instagram Graph API:
You can disconnect your Instagram account at any time from the app's Settings. Disconnecting immediately deletes the associated OAuth tokens and stops all automation for that account. You can also revoke access from Instagram's app permissions page.
Instagram data processing is governed by the Meta Privacy Policy and the Meta Platform Terms.
When you connect your Facebook Page through Facebook Login (OAuth), we access the following data via the Facebook Graph API:
You can disconnect your Facebook Page at any time from the app's Settings. Disconnecting immediately deletes the associated Page access tokens and stops all publishing to that Page. You can also revoke access from Facebook's Business Integrations settings.
Facebook data processing is governed by the Meta Privacy Policy and the Meta Platform Terms.
When you connect your Threads account through Meta's Threads API (OAuth), we access the following data:
threads_read_replies).threads_manage_replies).threads_manage_insights).You can disconnect your Threads account at any time from the app's Settings. Disconnecting immediately deletes the associated OAuth tokens and stops all publishing and reply automation on Threads, and the app deletes the Threads analytics stored on your device. You can also manage connected apps in your Threads/Instagram account settings.
Threads data processing is governed by the Meta Privacy Policy and the Threads Terms of Use.
When you connect your LinkedIn profile or Company Page through LinkedIn's OAuth 2.0 flow, we access the following data via the LinkedIn API:
A commenter’s name is used only while the reply is being prepared and is never stored. The text of a comment is shown in your automation activity log for up to 48 hours and is then removed. The reply your Page sent and the comment’s ID remain in the log. We do not use commenters’ data for advertising, lead generation, recruiting or any purpose other than replying on your behalf.
You can disconnect your LinkedIn account at any time from the app's Settings. Disconnecting immediately deletes the associated OAuth tokens and stops all publishing to LinkedIn. You can also revoke access from LinkedIn's Permitted Services page.
LinkedIn data processing is governed by the LinkedIn Privacy Policy and the LinkedIn API Terms of Use.
PeepaalFlow uses YouTube API Services. When you connect a YouTube channel through Google's OAuth 2.0 consent screen, we access the following data via the YouTube Data API, strictly within the permissions you grant (youtube.upload, youtube.force-ssl, youtube.readonly and your basic Google profile):
Your Google OAuth access and refresh tokens are kept on our servers only: they are encrypted in transit and at rest, are never sent to your browser or phone, are used only by our backend to perform the actions above, and are never shared with third parties. PeepaalFlow does not search, download or store other creators' YouTube videos or data.
You can disconnect your channel at any time from the app's Settings, which deletes the stored OAuth tokens and channel metadata from our databases, and automatically revokes your OAuth authorization directly with Google; deleting your PeepaalFlow account does the same for every channel it connected. You can also inspect or revoke PeepaalFlow's access at any time via the Google Security Settings permissions page.
How long YouTube data is kept: your channel information and tokens while the channel is connected (deleted when you disconnect it or delete your account); the activity log of YouTube comment replies (the commenter's public name and the reply sent) for 30 days; videos you schedule until they have been published everywhere you chose, or for 3 days after publishing finally fails.
PeepaalFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
By connecting YouTube you also agree to the YouTube Terms of Service. Google's handling of your data is governed by the Google Privacy Policy.
When you connect your TikTok account through TikTok Login Kit, we access the following data via the TikTok Content Posting API and Display API, within the permissions you grant (user.info.basic, video.upload, video.publish, video.list):
You can disconnect TikTok at any time from the app's Settings, which deletes the stored tokens and stops all publishing to TikTok. You can also remove PeepaalFlow in the TikTok app under Settings and privacy → Security → Manage app permissions.
TikTok's handling of your data is described in the TikTok Privacy Policy.
We share data only with processors that help us run PeepaalFlow, each acting on our instructions:
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service.
The data controller responsible for Platform Data received from Meta, LinkedIn, Google (YouTube), and TikTok is Peepaal.in (Vaibhav Vishal, sole proprietor of M/s Mukti Nath Khad Beej Bhandar), Ward No. 17, Khata No. 28, Nirpur Bheriyari, Forbesganj, District Araria, Bihar 854328, India.
No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards. If a breach affecting your personal data occurs, we will notify affected users within 72 hours of becoming aware of the breach, in compliance with applicable data protection regulations.
| Data | Retention |
|---|---|
| Account data | Until you delete your account |
| OAuth access tokens (all platforms) | Until you disconnect the platform or delete your account (or the token expires) |
| Scheduled-post media | Deleted from storage once published everywhere you chose, or when you cancel the post; media of a post that fails is kept 3 days so you can reschedule it |
| Automation rules & configuration | Until you delete them or your account |
| Automation activity logs | Kept while your account exists so you can review what was sent; YouTube comment-reply logs are deleted after 30 days; all logs are deleted with your account |
| Diagnostics / server logs | Up to 12 months |
| Permission | Why |
|---|---|
| Internet / Network | Communicate with our backend and platform APIs |
| Photos & Videos | Let you choose media to schedule and publish |
| Notifications | Publishing status, reminders, and automation alerts |
| Foreground service / Wake lock | Complete large uploads reliably in the background |
| Receive boot completed | Resume scheduled uploads after a device restart |
You can revoke any permission in your device Settings, though some features may stop working.
You can delete the data PeepaalFlow holds about you at any time, in any of these ways:
Deleting your account removes your profile, connected-account tokens, scheduled posts and their media, automation rules, activity logs and AI settings. Deletion is permanent and cannot be undone.
Depending on where you live, you may have additional rights under laws such as India's Digital Personal Data Protection Act, the EU/UK GDPR, and the California Consumer Privacy Act (CCPA) — including the right to lodge a complaint with your data-protection authority. We do not sell personal information and will not discriminate against you for exercising your rights.
If you are a California resident: you may request details about collected data, request deletion, and we will not discriminate against you for exercising rights. We do not sell personal information as defined by the CCPA.
If you are in the EEA, UK, or Switzerland: we process data on the basis of consent, contract performance, legitimate interests, and legal obligations. You have the right to lodge a complaint with your local supervisory authority. The data controller is Peepaal.in (Vaibhav Vishal, sole proprietor of M/s Mukti Nath Khad Beej Bhandar).
PeepaalFlow is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
Your information may be processed in countries other than your own, including the United States, where Google, Cloudflare, and Microsoft/LinkedIn operate data centers. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. By using the Service, you understand your information may be transferred internationally.
We may update this Privacy Policy from time to time. We will revise the "Last Updated" date above and, for material changes, provide notice in the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions or requests about this policy or your data:
PeepaalFlow / Peepaal.in (M/s Mukti Nath Khad Beej Bhandar)
📍 Registered address: Ward No. 17, Khata No. 28, Nirpur Bheriyari, Forbesganj, District Araria, Bihar 854328, India
📧 Email: [email protected]
🌐 Website: https://peepaalflow.com