Chuhai Cloud

Privacy Policy

Last updated: 2026-07-28

Chuhai Cloud ("we", "us", "the Service"), operated by 1583523 B.C. LTD. (British Columbia, Canada), is a cross-border social-media management platform for businesses. It lets an authorized business user connect their own social media accounts (TikTok, YouTube, Instagram, Facebook and WhatsApp), publish content to those accounts, read back public performance metrics, and manage inbound messages and comments in a unified inbox. This policy explains what data we handle and why.

1. Information we process

• Account authorization. When you connect a platform account via OAuth, we store the access and refresh tokens the platform issues, and the account identifier (e.g. TikTok open id, YouTube channel id, Facebook Page / Instagram business id) needed to act on your behalf. We never receive or store your platform password.
• Content you publish. Videos, images, captions and scheduling details you submit through the Service so it can post them to the accounts you connected.
• Performance metrics. Public aggregate statistics for your connected accounts (follower count, view/play count, like count) retrieved through each platform's official API to populate your dashboards.
• Messages & comments. For the unified inbox feature, inbound direct messages and comments delivered to your connected accounts, so you can read and reply from one place.
• Operational data. Your Service login, organization and team settings, sales-lead / CRM records you create, and basic logs needed to run and secure the Service.

1b. Cookies and on-device storage

The Service stores, accesses and recognizes information directly on your device and browser — including by placing, accessing or recognizing cookies, browser localStorage and similar technologies. Specifically:

• Authentication token. We store your Service session token in your browser's localStorage so you stay signed in between page loads. It is read on each request to authenticate you and is cleared when you sign out.
• Essential cookies. We use strictly necessary first-party cookies/session identifiers required for the Service to function securely (session continuity, CSRF/security).
• Preferences. Local settings such as your chosen theme and UI state may be stored on your device to remember your preferences.

These are essential, first-party technologies used only to operate and secure the Service. We do not use advertising, cross-site tracking, or analytics-profiling cookies, and we do not allow third parties to place, access or recognize cookies or similar technology on your device through the Service. You can clear this on-device data at any time via your browser settings or by signing out.

2. How we use it

• To provide the features you request: publishing content, refreshing metrics, and routing inbox messages.
• To keep your account connections alive (periodically refreshing OAuth tokens before they expire) so scheduled actions do not silently fail.
• To secure, debug and operate the Service.

We do not sell your data, use it for advertising, or share it for any purpose unrelated to operating the Service.

3. Sharing

Data is shared only with the social-media platforms you connect, and only as needed to carry out the actions you direct (for example, sending a video to TikTok's Content Posting API). Your use of each platform through the Service is also governed by that platform's own terms and privacy policy. We do not share your data with unrelated third parties.

4. Retention & deletion

We keep connected-account tokens and content only while your account remains connected and for as long as needed to provide the Service. You can disconnect any account at any time, which revokes and deletes the stored tokens for that account. You may request deletion of your data by emailing hanzili02177@gmail.com; we will delete it unless we are required to retain it by law.

4b. Google user data (YouTube Data API Services)

When you connect a YouTube channel, Chuhai Cloud uses YouTube API Services and requests only two Google OAuth scopes:

• youtube.upload — used solely to upload the videos you explicitly choose to publish, to your own channel, at the moment you initiate the publish action.
• youtube.readonly — used solely to read your own channel statistics (subscribers, views, video list) for display in your dashboard.

Chuhai Cloud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not sell Google user data, do not use it for advertising, do not use it to train generalized AI/ML models, and no human reads it except with your explicit consent, for security purposes, to comply with law, or after aggregation and anonymization.

By using the YouTube features you also agree to the YouTube Terms of Service; Google's handling of your data is described in the Google Privacy Policy.

Deletion. Disconnecting a YouTube channel immediately deletes the stored Google OAuth tokens for that channel, and cached channel statistics are purged within 30 days. You can also revoke Chuhai Cloud's access at any time via myaccount.google.com/permissions.

5. Security

Access to the Service requires authentication. Tokens and credentials are stored on access-controlled infrastructure and transmitted over encrypted (HTTPS) connections.

6. Requests from governments and law enforcement

We do not give any public authority routine or bulk access to your data. When we receive a request from a government body, court or law-enforcement agency for personal data, we apply the following process:

• Legality review. Every request is reviewed before any data is disclosed, to confirm it is issued by an authority with jurisdiction over 1583523 B.C. LTD., is served through valid legal process, and covers only data we actually hold.
• Challenge. Where a request appears unlawful, overbroad, or inconsistent with the law of British Columbia, Canada, we will refuse it and, where appropriate, challenge it or require the requesting authority to obtain proper legal process.
• Data minimisation. If we must comply, we disclose the narrowest set of data that satisfies the request. We do not volunteer additional records, and we do not disclose data belonging to other customers.
• Documentation. We keep a written record of each request, the data disclosed, the legal reasoning, and the people involved in the decision.
• Notice. We will notify the affected customer unless we are legally prohibited from doing so.

7. Your rights

You may access, correct, export or delete your data, and withdraw platform authorizations, by using the in-app controls or contacting us at hanzili02177@gmail.com.

8. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

9. Contact

Questions about this policy: hanzili02177@gmail.com.