Nayavo Privacy Policy

This Privacy Policy explains how Nayavo Studio Private Limited (“Nayavo”, “we”, “us”) collects, uses, and protects your information when you use the Nayavo platform, website, and mobile applications (the “Service”). By using the Service you agree to the practices described here.

1. Information we collect

We collect information you provide and information generated as you use the Service:

• Account & profile data — name, email, phone number, company, and billing details.
• Brand & content data — brand profiles, uploaded media, captions, calendars, and AI-generated content you create in the Service.
• Connected platform data — when you connect Shopify, Instagram, Meta, Google, WhatsApp, Amazon, Zomato, or Swiggy, we access the data those integrations authorise (e.g. products, orders, posts, ad metrics, messages) to operate features you enable.
• Usage & device data — log data, device identifiers, cookies, and analytics about how you interact with the Service.

2. How we use your information

• To provide, maintain, and improve the Service and its AI features.
• To generate content — including images, videos, captions, and other media — using AI, based on the inputs and materials you provide. You own and are solely responsible for the content you create, upload, or generate through the Service.
• To sync, publish, and manage content across your connected channels at your direction.
• To process payments, manage subscriptions, and prevent fraud.
• To communicate with you about your account, security, and product updates.
• To analyse usage and improve performance, reliability, and safety.

3. Third-party integrations

The Service connects to third-party platforms only with your explicit authorisation. We use that access solely to deliver the features you enable and in accordance with each platform’s developer policies (including Shopify, Meta, and Google API terms). You can disconnect any integration at any time from your account settings, which revokes our access going forward.

4. Google user data

This section describes specifically how Nayavo handles data obtained through Google APIs. It applies in addition to, and where relevant takes precedence over, the general terms above.

You connect your own accounts. Nayavo never creates or accesses a Google account or a Google Ads account on your behalf. A connection is established only when you start it from inside Nayavo and complete Google’s own OAuth consent screen, where Google shows you the permissions being requested and you choose which accounts to share. You sign in with Google directly — we never receive, store, or have access to your Google password.

When you connect a Google Ads account, we request the following scopes and use each one only for the stated purpose:

• .../auth/adwords — to read and manage the Google Ads accounts you select: creating, editing, pausing and resuming campaigns; managing budgets, audiences and targeting; and retrieving performance metrics such as impressions, clicks, conversions, spend and ROAS for reporting inside Nayavo.
• .../auth/content — to read the Google Merchant Center product data linked to your account, so shopping and Performance Max campaigns can be built against your real catalogue.
• .../auth/userinfo.email, .../auth/userinfo.profile, openid — to identify the Google account that granted the connection, so the correct grant can be shown, refreshed, and revoked.

If you separately choose to link Google Analytics, we additionally request .../auth/analytics.edit, used solely to create and remove the link between your Google Analytics property and your Google Ads account at your request. This is a separate connection and a separate consent screen.

Limited Use. Nayavo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not sell Google user data; we do not use it for advertising of our own; we do not use it to train, retrain, or improve generalised artificial-intelligence or machine-learning models; and we allow humans to read it only where you have given explicit permission, where it is necessary for security or to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

Nothing happens without your instruction. Campaigns are created, changed, paused, or funded only when you take that action in Nayavo. AI recommendations are suggestions you review and approve; they never apply themselves. Your campaigns and their history remain in your own Google Ads account at all times.

Security. All communication with Google APIs uses encrypted (TLS) connections, and the access and refresh tokens Google issues to us are encrypted at rest and scoped to the permissions you granted. We hold tokens, not credentials.

Revoking access. You can disconnect a Google account at any time from Integrations inside Nayavo, or revoke it directly from your Google Account at myaccount.google.com/permissions. Either route stops our access immediately. We then delete the stored tokens, and you may request deletion of the associated data through our data deletion process.

5. How we share information

We do not sell your personal information. We share it only with:

• Service providers (e.g. cloud hosting, payment processors, AI model providers) under contract and only as needed to run the Service.
• Connected platforms you authorise, to perform the actions you request.
• Legal & safety recipients, where required by law or to protect rights, safety, and the integrity of the Service.

6. Data retention & security

We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations. We apply industry-standard technical and organisational measures to protect your data, though no method of transmission or storage is completely secure.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. To have your account and associated data deleted, follow our data deletion instructions, which set out what we delete, what we must retain, and how long each step takes.

8. International transfers & children

Your information may be processed in countries other than your own. The Service is intended for business users and is not directed to individuals under the age of 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, notify you within the Service.

10. Contact us

Questions about this policy or your data? Reach us at:

Nayavo Studio Private Limited
Shop No. 16-A, First Floor, Bikaner Road, Near Nayara Petrol Pump
Anupgarh, Sri Ganganagar, Rajasthan 335701, India
Email: support@nayavo.ai