Privacy Policy

Google connections in Devad CHAT

Devad CHAT uses YouTube API Services and Google Business Profile APIs to connect the channel or location you choose, import published comments or reviews into your workspace Inbox, and send public replies when an authorized workspace operator chooses Send. Google connections are available only where the required API access and permissions are enabled.

Google credentials are encrypted on the server. CHAT requests permission to read and reply to YouTube comments or Business Profile reviews, and uses OpenID to identify the Google authorization principal. CHAT does not request access to your Gmail, Drive files, contacts, or YouTube Analytics for these features.

Devad’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy . Google data is used to provide the features you request; it is not sold or used to train generalized AI models.

Manage connections in CHAT Channels. Pause stops new activity for the selected connection. Removal controls explain their scope before you confirm: deleting imported data stops that connection; revoking dedicated CHAT authorization can stop that Google account’s CHAT connections across workspaces. Published replies on Google are not deleted by removing their imported records. You can also revoke access in your Google Account at https://myaccount.google.com/permissions . For data-removal assistance, use Devad’s contact page.

Where Google connection features and data-removal controls are enabled, CHAT checks the age of imported Google comments and reviews and removes expired API records after 30 days without a refresh, including for paused connections. Removing imported records does not delete your workspace notes or the replies you wrote. A removal request queues the supported imported-data deletion process; a request acknowledgment is not confirmation that all records or backup copies have been erased. Contact Devad for the scope and completion of a privacy request.

Google’s privacy policy is available at https://policies.google.com/privacy . YouTube API Services are subject to the YouTube Terms of Service at https://www.youtube.com/t/terms .

1. Information we collect

2. Legal bases for processing (EEA visitors)

3. How we use the information

• To publish, schedule or delete posts and stories on your connected social accounts
• To deliver, receive and store messages via WhatsApp, Messenger, Instagram DM, etc.
• To show analytics (reach, impressions, replies) inside the dashboard
• To bill you, send quota alerts, and process plan upgrades/downgrades
• To maintain security, prevent spam or abuse, and debug issues
• To send you feature announcements or newsletters (you can unsubscribe)

4. Sharing and disclosure

We never sell personal data. We only share it:

• With the social-media platforms (Facebook, WhatsApp, Google, etc.) to perform the actions you request
• With providers used to operate the Services, such as payment processing, hosting, email delivery and error monitoring. Contact Devad for the current providers and applicable data-processing arrangements.
• When legally required (court order, government request)
• With your consent (for example, adding an affiliate or third-party plugin)

5. Data retention

• Retention depends on the type of data and the purpose for which it is held. The CHAT Google connection controls and imported-data retention are described above.
• Deleting an account disables its access and marks the account and its solely owned workspaces for deletion. This action does not confirm that every stored record has been permanently erased. Shared workspace ownership must be transferred or other members removed before an owner can delete the account.
• Removing active records does not immediately erase backup snapshots. Backup retention and deletion depend on the deployment and backup storage. Contact Devad for the scope and timing of a deletion request, including backup copies.
• Information required for accounting, security or legal obligations may need separate retention. Contact Devad with questions about a particular record; account closure does not imply a single deletion deadline for every data category.

6. Security

• The public Services use HTTPS. Account passwords are hashed, and Google connection credentials are encrypted on the server.
• Workspace permissions restrict access to tenant resources, and supported Google connections use OAuth authorization.
• Error monitoring helps us investigate failures. Contact Devad for current security practices and any available assessment reports; this policy does not claim a particular penetration-test schedule or certification.

7. International transfers

Our infrastructure and connected service providers may process data in different countries. Contact Devad for current hosting locations and the transfer safeguards applicable to your use of the Services.

• A connected platform may process information under its own privacy policy. The Google and YouTube policy links above explain their practices.

8. Your rights

9. Children

Our Services are not directed to children under 13. We do not knowingly collect data from minors. If you believe we have, contact us and we will promptly delete it.

10. Changes to this policy

We will post any material changes on this page and, if significant, notify you by email or in-app banner.

11. Contact us

Use the Devad contact page for privacy-related questions, exercising your rights, or to reach our Data Protection Officer.