Privacy Policy

Last updated: 1 October 2026

This policy explains how Adapt (أدابت) at https://adaptflow.tech handles your data. The platform is a marketing tool for businesses: it learns your brand from your website and materials, proposes a content plan, designs ads and posts, publishes what you approve to your own Facebook, Instagram, LinkedIn and YouTube accounts, and shows you how they performed.

Data controller: [LEGAL ENTITY NAME - TO CONFIRM], [REGISTERED ADDRESS - TO CONFIRM]. Privacy contact: info@thegamingnest.com.

Data we collect

Your account

• Name, email address and password (stored as a hash, never in plain text).
• Your team members, their roles and permissions inside your account.

Your brand

• Your website address and the public pages we read from it to understand your business and products.
• The logo, colours, fonts, images and files you upload, and the facts about your brand you confirm.
• What you ask the platform for, the designs, copy and plans it creates, and your approve, reject and edit decisions.

Accounts you connect

When you connect Facebook, Instagram or LinkedIn, you sign in with that platform, grant the permissions there, and choose which pages and accounts to connect. We then receive:

• The ID, name, picture and username of each page or account you select.
• The access tokens the platform issues so we can do what you authorised.
• The posts you publish through us, and performance metrics for those posts and the account (such as reach, engagement and followers).
• If you connect a Meta ad account: its campaigns and ads with their performance and spend.
• If you enable conversations: comments and messages received on the connected accounts, so we can show them to you in the app.

Publishing to YouTube goes through a third-party publishing partner. You connect your channel through it, and we send it only what you ask us to publish.

Technical data

• Server logs (such as IP address, browser type and request time) for operations and security.
• Cookies strictly needed to sign you in and keep your session. We do not use advertising cookies.

Platform permissions we request and why

Facebook and Instagram (Meta)

• pages_show_list, business_management: list your pages and accounts so you can choose which to connect.
• pages_manage_posts, instagram_content_publish: publish the posts you approve or schedule.
• pages_read_engagement, read_insights, instagram_basic, instagram_manage_insights: read account details and post performance to show them to you.
• ads_read: read your ad campaigns and their performance if you connect an ad account.

LinkedIn

• openid, profile: identify your account when you connect it.
• w_member_social, w_organization_social: publish what you approve to your profile or company page.
• r_organization_social, rw_organization_admin: list the company pages you administer and read their post performance.

We never publish anything to your accounts that you did not approve or schedule yourself.

How we use data

• To run the service: understand your brand, create plans, designs and copy, and publish what you approve at the time you choose.
• To show the performance of your posts, accounts and campaigns, and suggest improvements.
• To keep accounts secure, prevent abuse, and provide support when you ask for it.

We do not sell your data, and we do not use data from your connected accounts to advertise to you or for anyone else. Each account's data is isolated from every other account, and your brand's identity or content is never used to create content for another brand.

Where data is processed and who receives it

• Hosting: the platform runs on a virtual private server (VPS) rented from a hosting provider, which stores the database and files.
• AI providers: to generate text and images we send third-party AI providers, such as OpenAI, only what each request needs: your request, the relevant brand information, and the images a design builds on.
• Publishing platforms: Meta, LinkedIn and our YouTube publishing partner receive only what you ask us to publish.
• This website: loads fonts from Google Fonts, so Google receives your browser's IP address.
• We may disclose data where the law or a competent authority requires it.

How we protect data

• Access tokens for your connected accounts are encrypted before storage with AES-256-GCM envelope encryption and are never shown in the app.
• Traffic between your browser and the platform is encrypted (HTTPS).
• Each account's data is isolated at the database level.

Retention and deletion

• We keep your account and brand data while your account exists.
• When you disconnect an account, its scheduled posts are cancelled and its stored access token is deleted, unless another still-connected account uses it (such as an Instagram account linked to the same Facebook page). The history of what was already published stays until you ask us to delete it.
• You can ask us to delete your account and all its data at any time; see Data deletion.
• Posts already published stay on those platforms; delete them there if you wish.
• Copies may remain in backups for a limited time until those backups are replaced.

Your rights

You can ask to access, correct, delete or receive a copy of your data by emailing info@thegamingnest.com from the address registered on your account. You can also revoke the platform's permissions at any time in your Facebook or LinkedIn settings.

Children

The platform is built for businesses and is not intended for anyone under 18.

Changes to this policy

If we change this policy we update the date at the top, and we tell you in the app or by email when the change is material.