Privacy Policy
Last Updated: August 15, 2026
Overview
Nexus1010 is a secure, multi-company digital performance platform that lets organizations manage official social media account connections — TikTok, Facebook, Instagram and YouTube today — across all of their brands. This Privacy Policy explains what information is collected, how it is used, stored and protected when an authorized user connects an external platform account.
Information We Collect
When an authorized administrator connects an official platform account (TikTok, Facebook, Instagram or YouTube), the application receives limited public profile information from that platform — such as an account ID, display name and avatar — through the permissions each connected feature requires. No customer information, private content or messages are collected.
How We Use Information
Collected information is used solely to identify the connected account, display its connection status, maintain secure OAuth connections and enable authorized administrators to manage their company's official brand accounts.
Platform Login Integrations
Nexus integrates with TikTok using the official TikTok Login Kit, and with Facebook, Instagram and YouTube using each platform's official OAuth 2.0 Authorization Code Flow with PKCE. User authentication is performed directly by the platform being connected — never by Nexus. Access tokens are securely exchanged on the server, encrypted before storage and are never exposed to client-side applications.
Cookies
The application uses secure, httpOnly cookies only for authentication, encrypted session management and maintaining administrator sessions. These cookies are essential for platform functionality and are never used for advertising, analytics or cross-site tracking.
Data Security
OAuth credentials and connection information are protected using industry-standard encryption and transmitted exclusively over HTTPS. Security controls are implemented to prevent unauthorized access to connected social media accounts (TikTok, Facebook, Instagram and YouTube).
Data Retention
Connected account information is retained only while an active connection exists. Disconnecting a platform account permanently removes the locally stored encrypted OAuth credentials associated with that connection.
Data Sharing
Nexus does not sell, rent or disclose personal information to third parties. Information is processed only as required to provide the platform login integrations (TikTok Login Kit, Meta OAuth, Google OAuth) or when required by applicable law.
Your Rights
Authorized users may disconnect a social account at any time to immediately delete its locally stored connection information, or request correction, removal or full deletion by visiting our Delete Your Data page or contacting souadtorfi10@gmail.com.
Contact Us
If you have any questions regarding this Privacy Policy, please contact us at souadtorfi10@gmail.com or visit our Support page. Additional platform information is available on our About page.
Google user data and YouTube API Services
Nexus1010 lets an authorized user connect their own YouTube channel and Google Analytics property to read performance reports. This section describes exactly what Google user data Nexus1010 accesses and how it is handled.
Nexus1010's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Nexus1010 uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
What we access, and why
- YouTube (youtube.readonly): the connected channel's name, picture and ID, its list of videos, and their public statistics (views, likes, comments). Used only to show analytics and reports to the user who connected the channel.
- YouTube (youtube.upload): used only when an authorized user explicitly chooses to publish a video from Nexus1010. Nothing is ever uploaded automatically or without that user's action.
- Google Analytics (analytics.readonly): read-only, aggregated website reports — sessions, users, traffic sources, pages and countries — for the property the user selects. These reports are read live and are not stored by Nexus1010.
How it is stored and protected
Access and refresh tokens are encrypted at rest. Metric snapshots (such as follower and view counts) are kept in our database so reports can show change over time. We do not collect or store individual website visitors' personal data from Google Analytics.
What we do not do
We do not sell Google user data, use it for advertising, or share it with third parties except where required by law. It is not sent to third-party AI services and is not used to develop, improve or train generalized AI or machine-learning models. People at Nexus do not read it except for security, abuse prevention or legal compliance.
Revoking access and deleting data
You can disconnect YouTube or Google Analytics at any time from the brand's Social Accounts page, and revoke Nexus1010's access from your Google Account permissions page. To have your stored data deleted, follow the steps on our data deletion page; we delete it within 30 days of a verified request.
This Privacy Policy may be updated periodically to reflect changes to the platform, applicable laws or platform developer requirements (TikTok, Meta, Google). The latest version will always be available on this page.