Privacy Policy

Thank you for using Zernio (the "Service"), operated by us at zernio.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media scheduling API service.

The Service is operated by:

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our Service.

Our Service uses YouTube API Services. By using our Service to interact with YouTube, you are also agreeing to be bound by the Google Privacy Policy, available at https://www.google.com/policies/privacy.

For more information, please see our Terms of Service and Legal Disclosure.

1. Information We Collect

1.1 Personal Information

We collect the following personal information:

• Name: To personalize your experience and for account identification
• Email Address: For account communication, support, and service updates
• Payment Information: Processed securely through third-party payment providers (we do not store payment details)
• API Usage Data: To monitor usage limits and provide analytics

1.2 Social Media Account Data

When you connect social media accounts to our Service, we collect and store access tokens and basic profile information necessary to schedule and publish posts on your behalf.

1.3 Automatically Collected Information

• IP addresses and device information
• Browser type and version
• Usage patterns and API request logs
• Cookies and similar tracking technologies

2. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following lawful bases:

• Contractual Necessity: Processing necessary to perform our contract with you, such as providing the Service, managing your account, and processing payments.
• Consent: Where you have given explicit consent to the processing of your personal data for specific purposes, such as marketing communications.
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our Service, preventing fraud, and ensuring security, provided these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal obligations, such as tax reporting and responding to lawful requests from authorities.

3. How We Use Your Information

We use your information for the following purposes:

• Providing and maintaining our API service
• Processing payments and managing subscriptions
• Scheduling and publishing social media posts
• Monitoring API usage and enforcing rate limits
• Providing customer support and technical assistance
• Sending important service updates and notifications
• Improving our Service and developing new features
• Ensuring security and preventing fraud

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our Service (payment processors, hosting providers)
• Social Media Platforms: To publish content on your connected social media accounts as requested
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, sale of assets, or acquisition

5. AI Assistants and MCP Access

You can connect third-party AI assistants and agents, such as Claude, ChatGPT, or Cursor, to your Zernio account through our Model Context Protocol (MCP) server at mcp.zernio.com, or by issuing them an API key. This section explains what that access involves.

5.1 How access is authorized

AI assistants authenticate using OAuth 2.0 with PKCE. Before access is granted, you are shown a consent screen describing the access being requested, and access begins only if you approve it. We then store an access token that expires after one hour and a refresh token that expires after 30 days. Expired tokens are deleted automatically. If you instead give an assistant an API key, that key remains valid until you delete it in your dashboard.

5.2 What a connected assistant can access

Authorization is account-wide: once you approve a connection, the assistant can call any Zernio tool on your behalf. This includes the ability to:

• Posts and content: Read, create, schedule, edit, and delete posts on your connected social media accounts
• Messages and comments: Read your inbox and send messages, comment replies, and broadcasts
• Analytics: Read performance and audience metrics for your posts, accounts, and ad campaigns
• Account connections: View, connect, and disconnect the social media accounts linked to your profile
• Advertising: Create, edit, pause, and run ad campaigns, which can spend your advertising budget
• Contacts and automations: Manage contacts, sequences, comment automations, and webhooks

5.3 Data shared with the assistant provider

When a connected assistant requests data, that data is transmitted to the provider operating the assistant. Once it leaves Zernio, it is handled under that provider's own privacy policy and terms, and we do not control how they store, process, retain, or further disclose it. Review the privacy policy of any AI assistant before connecting it, and only connect assistants you trust.

5.4 What we record

We log the tool calls a connected assistant makes, including the parameters supplied and the identity of the authorized client, as API usage data described in Section 1. We use these records to operate the Service, enforce usage limits, detect abuse, and provide support. We do not receive your conversations with the assistant beyond the data supplied to the tools it calls.

5.5 Model training

We do not use the content accessed through our MCP server or API to train machine-learning models.

5.6 Ending an assistant's access

You can end a connection yourself at any time. In your Zernio dashboard, go to Settings and then Connected apps, where every AI assistant you have authorized is listed alongside the access it was granted and when it was last used. Revoking a connection there takes effect immediately: the assistant's access token, its refresh token, and any pending authorization are all invalidated, so it loses access on its very next request and cannot renew it. The assistant would have to go through the consent screen again to regain access.

Access also ends on its own: access tokens expire one hour after issue and refresh tokens expire 30 days after issue, so an assistant you stop using loses access automatically. If you gave an assistant an API key instead of connecting it over OAuth, delete that key in your dashboard. Deleting your Zernio account revokes all authorizations.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure API endpoints, and regular security audits.

7. Data Retention

We retain your personal information for as long as necessary to provide our Service and comply with legal obligations. When you delete your account, we will delete or anonymize your personal information within 30 days, except as required by law.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data ("right to be forgotten") in certain circumstances.
• Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

We will respond to your request within 30 days as required by GDPR. We may need to verify your identity before processing your request.

To exercise any of these rights, please contact us at miki@zernio.com or use the form below:

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and maintain user sessions. You can control cookie preferences through your browser settings, though this may affect Service functionality.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on our website. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: