Privacy Policy

1. Introduction

Welcome to SHONJOG ("we," "us," "our," or "the Service"). SHONJOG is a social media management platform that enables users to upload and distribute their own original video content across multiple social media platforms simultaneously.

We are deeply committed to protecting your privacy and handling your data with transparency, security, and compliance with applicable data protection laws. This Privacy Policy explains in detail:

• What information we collect and why
• How we use, store, and protect your data
• Your rights regarding your personal information
• How we comply with third-party platform policies
• Our practices regarding advertising and monetization

SHONJOG is designed exclusively for users to share their own original content. We strictly prohibit the unauthorized copying, re-uploading, or distribution of content that you do not own or have explicit rights to use.

2. Information We Collect

To provide our services effectively and securely, we collect several categories of information. We adhere to the principle of data minimization, collecting only what is necessary to deliver our core functionality.

2.1 Information You Provide Directly

Account Registration Data

When you create a SHONJOG account, we collect:

• Username: Your chosen display name for the platform
• Email Address: Used for account verification, communication, and password recovery
• Password: Securely hashed using industry-standard encryption (bcrypt). We never store passwords in plain text

Content Metadata

When you upload content, you provide:

• Video URL: Link to your original video content
• Title & Description: Text metadata for your video
• Hashtags: Tags to categorize your content
• Platform-Specific Settings: Privacy levels, upload options, and interaction settings

2.2 Information from Third-Party Services (OAuth)

Authentication Tokens

When you connect social media accounts (YouTube, Facebook, Instagram, TikTok, X/Twitter) using OAuth 2.0:

• Access Tokens: Temporary credentials that allow us to post content on your behalf
• Refresh Tokens: Used to obtain new access tokens when they expire
• Token Scope: Limited permissions specific to posting content (we request minimal necessary scopes)

Basic Profile Information

Through OAuth, we may receive limited public profile data:

• Display name or username
• Profile picture (for visual identification in your dashboard)
• Public email address (if provided by the platform)
• Account/Page ID (for technical linking purposes)

2.3 Automatically Collected Information

Usage Data & Analytics

• Upload Activity: Timestamps, destination platforms, success/failure status
• Session Information: Login times, IP addresses (for security monitoring)
• Device Information: Browser type, operating system (for compatibility)
• Plan Usage: Upload counts, credit balance (for free users), plan expiration dates

2.4 Temporary Content Data

3. How We Use Your Information

We use your information exclusively for the following lawful purposes:

3.1 Core Service Delivery

• Account Management: Creating, maintaining, and securing your user account
• Content Distribution: Uploading your videos to your connected social media accounts as per your instructions
• Platform Integration: Maintaining connections with third-party APIs
• Usage Enforcement: Monitoring upload limits based on your subscription plan

3.2 Communication & Support

• Sending account verification emails (OTP codes)
• Password reset notifications
• Upload status notifications (success/failure alerts)
• Plan expiration warnings
• Responding to customer support inquiries
• Important service updates or policy changes

3.3 Service Improvement & Security

• Analyzing usage patterns to improve features and user experience
• Monitoring for fraudulent activity, abuse, or Terms of Service violations
• Diagnosing technical issues and bugs
• Ensuring platform security and preventing unauthorized access

3.4 Compliance & Legal

• Complying with applicable laws and regulations
• Responding to legal requests from authorities
• Enforcing our Terms of Service and this Privacy Policy
• Protecting our rights, property, and user safety

4. Data Sharing & Disclosure

Your privacy is paramount. We maintain strict data sharing practices:

4.1 With Your Connected Platforms (User-Directed)

When you click "Upload," you are explicitly instructing us to share your video content and metadata with the platform(s) you select. This is the core function of our service and is performed only at your direction.

4.2 Service Providers & Infrastructure

We use trusted third-party service providers for:

• Cloud Hosting: Secure servers for application hosting (e.g., AWS, DigitalOcean, Heroku)
• Database Services: MongoDB Atlas for secure data storage
• Email Delivery: Resend API for transactional emails
• Payment Processing: Lemon Squeezy, bKash, Nagad, Binance (payment gateways)

These providers are bound by strict contractual obligations to:

• Process data only as instructed by us
• Maintain industry-standard security measures
• Not use your data for their own purposes

4.3 Legal Requirements

We may disclose your information if required by law or if we believe in good faith that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect and defend our rights or property
• Investigate potential violations of our Terms of Service
• Protect the safety of users or the public

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5. Third-Party Platform Compliance

SHONJOG integrates with multiple social media platforms. We are committed to full compliance with each platform's terms of service, API policies, and data handling requirements.

5.1 YouTube (Google APIs)

Our use of YouTube's API is subject to the YouTube API Services Terms of Service.

• Scopes Requested: Minimal permissions for video upload only
• Data Access: Limited to channel/account information necessary for upload functionality
• Data Retention: OAuth tokens stored securely; revocable at any time via your Google Account settings
• Google Privacy Policy: https://policies.google.com/privacy

5.2 Facebook & Instagram (Meta Platforms)

Our integration with Facebook and Instagram complies with Meta's Platform Terms and Graph API policies.

• Permissions: Pages management, video upload (Facebook); content publishing (Instagram)
• Data Usage: Strictly limited to facilitating video uploads to pages/accounts you manage
• Meta Privacy Policy: https://www.facebook.com/privacy/policy/

5.3 TikTok

We integrate with TikTok's Developer API in accordance with TikTok's Developer Terms of Service.

• Scope: Video posting permissions only
• Content Guidelines: Users are responsible for ensuring content complies with TikTok Community Guidelines
• TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy

5.4 X (formerly Twitter)

Our X integration follows X's Developer Agreement and Policy.

• API Access: Media upload and tweet creation
• Data Handling: OAuth tokens for authenticated posting
• X Privacy Policy: https://twitter.com/privacy

6. Credit System & Advertising (Free Users)

6.1 How the Credit System Works

SHONJOG offers a free tier with limited functionality, monetized through an optional credit-based system:

• Credits Required: Free users need 5 credits to upload 1 video
• Earning Credits: Watch advertisements to earn 2 credits per ad
• Ad Duration: Typically 30 seconds (varies by ad network)
• Voluntary: Watching ads is completely optional; users can upgrade to paid plans to remove all limits and ads

6.2 Advertising Practices

Advertisements displayed to free users are provided by third-party ad networks (primarily Adsterra). We do not control the specific ads shown.

Third-Party Ad Networks

• Ad Provider: Adsterra and potentially other reputable ad networks
• Data Collection by Advertisers: Ad networks may use cookies, web beacons, and similar technologies to collect data for ad targeting. This data collection is governed by the ad network's privacy policy, not ours.
• Adsterra Privacy Policy: https://adsterra.com/privacy-policy/

What We Track

• Ad View Completion: We track whether you watched an ad for the required duration to award credits
• Credit Balance: Stored in your account to enforce upload limits
• Usage Metrics: Number of ads watched (for service analytics only)

6.3 Opting Out of Ads

To completely remove advertisements and credit requirements:

• Upgrade to a Standard Plan ($4.99/month) or Premium Plan ($9.99/month)
• Paid users receive unlimited uploads with no ads

7. Payment Information

7.1 Payment Methods Accepted

SHONJOG offers both manual and automatic payment options:

Manual Payments:

• bKash: Bangladesh mobile banking
• Nagad: Bangladesh mobile financial service
• Binance Pay: Cryptocurrency payments

Automatic Payments:

• Lemon Squeezy: International payment gateway (credit/debit cards)

7.2 Payment Data Handling

What We Store:

• Manual Payments: Transaction ID, amount, payment method type, timestamp (for verification)
• Automatic Payments: Lemon Squeezy order ID, subscription status, plan expiry date
• Never Stored: Full card numbers, CVV, PIN codes, OTP codes

7.3 Payment Processor Privacy Policies

Your financial information is governed by the respective payment processor's privacy policy:

• Lemon Squeezy: Privacy Policy
• bKash: Privacy Policy
• Nagad: Privacy Policy
• Binance: Privacy Policy

7.4 Refund Policy

Payment and refund practices are detailed in our Terms of Service. In summary:

• 24-Hour Partial Refund: Available within 24 hours of purchase
• After 24 Hours: No refunds (plan remains active until expiry)
• Plan Cancellation: Available in account settings; prevents auto-renewal but maintains access until current period ends

8. Data Security & Retention

8.1 Security Measures

We implement industry-standard security practices to protect your information:

Technical Safeguards

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS)
• Encryption at Rest: Database is encrypted; passwords are hashed using bcrypt
• Access Controls: Strict role-based access; only authorized personnel can access user data
• Secure Authentication: OAuth 2.0 for third-party logins; session tokens with expiration
• Regular Security Audits: Periodic reviews of code and infrastructure

Infrastructure Security

• Secure Hosting: Cloud infrastructure with DDoS protection and firewalls
• Database Security: MongoDB with authentication, IP whitelisting, and backups
• Temporary File Handling: Video files deleted immediately after processing (not stored)

8.2 Data Retention Policy

Retention Periods

• Account Data: Retained as long as your account is active
• OAuth Tokens: Stored until you disconnect a platform or delete your account
• Upload Logs: Retained for up to 90 days for troubleshooting and analytics
• Video Files: Deleted immediately after upload completion (never retained)
• Payment Records: Retained for 7 years for legal/tax compliance

Account Deletion

When you delete your account (or request deletion by contacting support):

• Your username, email, and hashed password are permanently deleted
• All OAuth tokens are revoked and deleted
• Upload history is anonymized or deleted
• Payment records may be retained for legal compliance but are disassociated from your identity

9. Your Rights & Choices

Depending on your location, you may have certain rights regarding your personal data. We respect and facilitate these rights:

9.1 Access & Portability

• View Your Data: Access your account information via the dashboard settings
• Request Data Export: Contact us to receive a copy of your data in a portable format (JSON/CSV)

9.2 Correction & Update

• Update Account Info: Change your username, email, or password in account settings
• Correct Inaccuracies: Contact us if you believe any information we hold is incorrect

9.3 Deletion & Erasure (Right to be Forgotten)

• Delete Account: Option available in account settings or by contacting support
• Data Erasure: Request complete deletion of your personal data (subject to legal retention requirements)

9.4 Revoke Platform Permissions

• Disconnect Accounts: Revoke SHONJOG's access to your social media accounts at any time via your dashboard
• Revoke OAuth: Also revocable directly through each platform's account settings:
  • Google: myaccount.google.com/permissions
  • Facebook: Settings → Apps and Websites
  • TikTok: Settings → Manage Account → Apps
  • X: Settings → Security and Account Access → Apps and Sessions

9.5 Object to Processing

• Opt-Out of Emails: Unsubscribe from marketing emails (transactional emails required for service operation)
• Restrict Processing: Contact us to limit how we use your data

9.6 Withdraw Consent

• If you previously consented to specific data processing, you can withdraw that consent at any time
• Withdrawal does not affect the lawfulness of processing before withdrawal

9.7 Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority in your jurisdiction (e.g., ICO in UK, CNIL in France, etc.).

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember information about your visit.

10.2 How We Use Cookies

Essential Cookies (Required)

• Session Management: Keeps you logged in as you navigate the site
• Security: Prevents cross-site request forgery (CSRF) attacks
• Authentication: Validates your identity

These cookies are necessary for the service to function and cannot be disabled.

Analytics Cookies (Optional)

• Usage Analytics: Understand how users interact with SHONJOG (e.g., Google Analytics)
• Performance Monitoring: Identify errors and slow pages

These cookies help us improve the service. They are anonymous and do not identify you personally.

Advertising Cookies (Free Users Only)

• Ad Networks: Third-party cookies from Adsterra or other ad providers
• Ad Targeting: May track browsing behavior for personalized ads

Managed by ad networks. See their privacy policies for details.

10.3 Managing Cookies

You can control cookies through your browser settings:

• Block All Cookies: Your browser settings (may break site functionality)
• Third-Party Cookies: Most browsers allow blocking third-party cookies only
• Clear Cookies: Delete existing cookies at any time

Learn more:

• Chrome: support.google.com/chrome/answer/95647
• Firefox: support.mozilla.org
• Safari: support.apple.com

11. Children's Privacy (COPPA Compliance)

SHONJOG is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction).

Our Policy:

• We do not knowingly collect personal information from children under 13
• We do not market our services to children
• If we become aware that a child under 13 has provided personal data, we will immediately delete that information

Age Verification: By using SHONJOG, you represent that you are at least 13 years old (or the minimum age in your jurisdiction).

12. International Data Transfers

SHONJOG operates globally and may transfer your data across international borders to provide our services.

12.1 Where Your Data May Be Processed

• Primary Servers: Hosted in [Your Server Location, e.g., United States, Singapore]
• Cloud Services: May utilize data centers in multiple regions (AWS, DigitalOcean, MongoDB Atlas)
• Third-Party APIs: Data sent to platforms (YouTube, Facebook, etc.) may be processed globally

12.2 Data Protection Standards

When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Platform Compliance: Relying on platform certifications (e.g., Google's EU-US Data Privacy Framework participation)

12.3 Your Rights Under GDPR (EU Users)

If you are in the European Economic Area (EEA), you have enhanced rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, and delete your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

See Section 9 for details on exercising these rights.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service features.

How We Notify You:

• Updated Date: The "Last Updated" date at the top will be changed
• Email Notification: For significant changes, we will send an email to your registered address
• Website Notice: A prominent banner on our homepage will alert users to policy updates

Your Continued Use:

By continuing to use SHONJOG after changes take effect, you accept the revised Privacy Policy. If you do not agree with changes, you should discontinue use and may request account deletion.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, we're here to help.

Contact Methods:

• Email: shonjog.site@gmail.com
• Subject Line Suggestions:
  • "Privacy Question" (general inquiries)
  • "Privacy Rights Request" (access, deletion, correction)
  • "Data Breach Concern" (security issues)
  • "Child Privacy Concern" (COPPA-related)

Response Time:

We strive to respond to all privacy-related inquiries within 30 days. For urgent security concerns, we aim to respond within 72 hours.

Data Protection Officer (DPO):

For EU users or GDPR-specific inquiries, you may request to speak with our Data Protection Officer by emailing shonjog.site@gmail.com with the subject "DPO Request."