Privacy Policy
Last updated 26 October 2026 · Effective 26 October 2026
This Privacy Policy explains what personal data I collect, why, how long I keep it, who I share it with, and how you can have it deleted.
It covers this website (thouseef-hamza.com) and the apps I build and run to publish posts, read results and reply to comments and messages on social platforms ("my apps").
Who I am
I am Thouseef Hamza, an independent software developer based in Doha, Qatar. I am responsible for the personal data described here. Contact: thouseefhamza.codes@gmail.com or WhatsApp +974 7477 2478.
Data this website collects
This website has no sign-up, no contact forms, no advertising and no analytics or tracking tools.
The time calculator and other tools on the site run entirely in your browser. What you type into them is not sent to me or stored.
The site is hosted on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes technical data such as your IP address, browser type, the pages you request and the time of the request. These logs are kept for a short period for security and fault-finding only. See Cloudflare's privacy policy.
When you contact me
If you message me on WhatsApp, call me or email me, I receive your name, phone number or email address and what you write. I use it only to reply to you and to discuss or deliver your project.
WhatsApp messages are carried by WhatsApp (Meta) and email by Google (Gmail) under their own privacy policies.
My apps and connected social accounts
My apps connect to social media accounts that I own or manage, and to accounts whose owners have authorized me to manage them (for example, a client's business page). The apps can:
- publish and schedule posts, photos, videos and stories;
- read the account's posts, comments and performance figures (such as reach, views and followers);
- read and reply to comments and direct messages sent to the connected account.
When an account is connected through the platform's official login, my apps receive only the permissions the account owner approves on the platform's own consent screen.
Data received from social platforms
Depending on the platform and the permissions approved, my apps may receive:
- account details of the connected account: account or page ID, name, username, profile picture and the email address linked to the login, where the platform shares it;
- access tokens that let the app act on the connected account;
- the connected account's posts, media, captions and performance figures;
- comments and direct messages sent to the connected account. This includes the public name, username, profile picture and ID of the person who sent them, and the content of the comment or message.
If you comment on, or send a message to, an account managed by my apps, your public profile details and what you wrote are processed so the comment or message can be read and answered.
How I use this data
I use data from social platforms only to provide the features described above: publishing content, showing results to the account owner, and reading and replying to comments and messages. I do not:
- sell or rent personal data to anyone;
- use it for advertising, ad targeting or building advertising profiles;
- use it to decide anyone's eligibility for credit, jobs, housing or insurance;
- use it to train AI models.
To help draft replies, the text of a comment or message may be sent to an AI service provider. I only use providers' business plans under which, according to their terms, the data is not used to train their models. Replies are sent on behalf of the connected account.
Storage, security and how long I keep data
Data is stored on secure servers I control or rent from hosting providers. Access tokens are stored encrypted, and only I can access the systems.
- Access tokens are kept while the account stays connected and are deleted when it is disconnected or access is revoked.
- Posts, comments, messages and performance figures fetched from a platform are kept only as long as needed to provide the features, and no longer than 30 days unless the account owner asks me to keep a record.
- Data from YouTube API Services is deleted or refreshed at least every 30 days.
- When access is revoked through my apps, or you ask for deletion, I delete the related data within 7 days. When access is revoked through the platform's own settings, I delete the related data within 30 days.
- Messages you send me directly (WhatsApp, email) are kept as long as needed for our project and then deleted on request.
Google and YouTube
My apps use YouTube API Services. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove my apps' access to your Google account at any time from your Google security settings.
Meta, LinkedIn, X and TikTok
Data received from these platforms is used only as described in this policy and in line with each platform's developer terms. Each platform also handles your data under its own policy:
- Facebook, Instagram and WhatsApp: Meta Privacy Policy. Remove access in Facebook settings or Instagram settings.
- LinkedIn: LinkedIn Privacy Policy. Remove access in LinkedIn permitted services.
- X: X Privacy Policy. Remove access in X connected apps.
- TikTok: TikTok Privacy Policy. Remove access in the TikTok app under Settings and privacy, Security, Manage app permissions.
Your rights and deleting your data
You can ask me to tell you what personal data I hold about you, to correct it, or to delete it. You can also withdraw any permission you gave by disconnecting your account.
To have your data deleted, follow the steps on the Data Deletion page or email thouseefhamza.codes@gmail.com. I reply within 7 days.
I handle personal data in line with the laws that apply to me, including Qatar's Law No. 13 of 2016 on Personal Data Privacy Protection and, for people in India, the Digital Personal Data Protection Act, 2023.
Children
This website and my apps are meant for businesses and adults. They are not directed at children under 16, and I do not knowingly collect their personal data. If you believe a child has sent me personal data, contact me and I will delete it.
Changes to this policy
If I change this policy, I will update it on this page and change the date at the top. If a change affects how data from a connected account is used, I will tell the account owner before it takes effect.
Contact
Questions or complaints about privacy: thouseefhamza.codes@gmail.com or WhatsApp +974 7477 2478. Thouseef Hamza, Doha, Qatar.