NamSocial Privacy Policy
Version 1.1 · Effective date: 4 November 2026 Web: https://namsocial.namlab.com.tr · Türkçe sürüm: /yasal/gizlilik
NamSocial is a social media assistant made by NamLab, a brand of Namiştain Global Dış Ticaret Limited Şirketi (Çalı Mah. Ahıska Cad. Enmes Group No:209, Nilüfer / Bursa, Türkiye · MERSİS 0629172069800001 · Bursa Trade Registry 137340). We are the data controller for account and billing data. For content you connect from your social media and email accounts, we process data on your instructions.
Contact: namlab@namistainglobal.com · Data protection requests: kvkk@namistainglobal.com or registered e-mail (KEP) namistain.global@hs01.kep.tr · Phone: +90 444 4 982
1. What NamSocial does
NamSocial helps you research trends, create short videos, Reels and carousels with captions, schedule and publish them to YouTube and Instagram, and draft or send replies to comments, Instagram direct messages and emails. You choose either "Preview and approve" (nothing is published or sent before you approve it) or "Fully autonomous" mode.
2. Data we collect
Account data: name, email address, password hash, language, time zone, plan and billing details.
Data from connected accounts (only after you connect them and only with the permissions you grant):
| Service | Permissions we request | Data we access | Why |
|---|---|---|---|
| Instagram (Instagram API with Instagram Login) | instagram_business_basic | Account ID, username, profile picture, media list, follower count, media insights | Show your account and performance in the dashboard |
| instagram_business_content_publish | Media you approve for publishing | Publish Reels and carousels you created in NamSocial | |
| instagram_business_manage_comments | Comments on your media, commenter username | Show comments, draft replies, post replies, hide spam | |
| instagram_business_manage_messages | Direct messages sent to your account, sender's Instagram-scoped ID and username | Show messages, draft and send replies within Instagram's 24-hour messaging window | |
| YouTube (YouTube Data API v3) | youtube.upload | Videos you approve for upload | Upload videos as private; they become public only at the time you approved |
| youtube.force-ssl | Channel info, your videos, comments on your videos | Read and reply to comments, update titles/descriptions you edited | |
| youtube.readonly | View counts and basic statistics of your videos | Show the views chart and choose good posting times | |
| Gmail (optional) | gmail.modify (or IMAP for other providers) | Messages in your inbox, labels | Notify you of important mail, prepare a reply draft, send it only when you press Send |
Content you create: prompts, generated scripts, images, videos, captions, your brand profile (tone, topics, words to avoid).
Technical data: IP address, device and browser type, sign-in times and security logs.
We do not collect payment card data. Payments (when introduced) are handled by PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.; card data is entered on their payment page and never reaches us.
3. How we use data
- To provide the features you turn on (research, creation, publishing, replies, dashboard).
- To generate text, images, audio and video with AI providers (see Section 5).
- To keep the service secure, prevent abuse and fix errors.
- To send service emails (account, security, billing). We do not send marketing emails without your separate consent.
We do not sell personal data, use it for advertising, or build profiles of the people who comment on or message your accounts.
4. Google API data — Limited Use
NamSocial's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: - We use Google user data only to provide and improve the user-facing features described above. - We do not transfer it to others except as needed to provide those features (for example, sending an email's text to our AI provider to draft your reply), to comply with law, or as part of a merger with your notice. - We do not use it for advertising and we do not use it to train general AI models. Google user data is sent only to Anthropic and OpenAI, whose API terms prohibit training their models on API data by default; it is never sent to image or video generation providers. - Humans do not read your Google data unless you ask us for support and agree, it is needed for security or abuse investigation, or the law requires it.
NamSocial uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service. See also the Google Privacy Policy. You can revoke NamSocial's access at any time at Google security settings. YouTube API data we store is refreshed or deleted at least every 30 days, and deleted within 30 days after you disconnect.
5. Who we share data with (sub-processors)
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database (D1), file storage (R2) | Global network, USA |
| GitHub, Inc. (Microsoft) | Running video production jobs | USA |
| Anthropic PBC | Writing replies, scripts and captions | USA |
| OpenAI, L.L.C. | Trend analysis, images, speech | USA |
| ElevenLabs Inc. | Voice-over | USA / EU |
| Kling AI (Kuaishou) | Optional motion clips from images (no personal data, only prompts and generated images) | Singapore / China |
| Zoho Corporation B.V. | Service emails | EU |
| Meta Platforms and Google LLC | The platforms you connect; we send them what you publish or reply | USA / Ireland |
Only the minimum data needed for each task is sent. For example, to draft a reply to a comment we send the comment text and your brand profile, not your whole account.
6. International transfers
Our providers are located outside Türkiye. Transfers are made under Article 9 of Law No. 6698 (KVKK) using standard contractual clauses, and under the providers' data processing terms.
7. Retention
- Access tokens: until you disconnect the account or delete your NamSocial account.
- Instagram comments and messages, and emails: up to 90 days for history, then deleted or anonymized. YouTube comments and any other YouTube API data: refreshed or deleted within 30 days. Counts (e.g. "214 replies this week") are kept without personal data.
- Generated media files: 7 days after publishing in our file storage, unless you keep them in your library.
- Billing records: 10 years, as required by Turkish tax and commercial law.
- Security logs: 1 year.
8. Deleting your data
- In the app: Settings › Connected accounts › Disconnect, or Settings › Delete account. Deletion from active systems is immediate; backups are cleared within 30 days.
- From Instagram/Facebook: remove NamSocial in Instagram Settings › Website permissions › Apps and websites. Meta notifies us and we delete the data we received from that account within 30 days. Instructions: https://namsocial.namlab.com.tr/yasal/veri-silme
- From Google: revoke access at https://myaccount.google.com/connections.
- By email: write to kvkk@namistainglobal.com from your account email, or via KEP to namistain.global@hs01.kep.tr.
9. Your rights
Under KVKK Article 11 (and GDPR where applicable) you can ask what data we hold about you, its correction, deletion, restriction, a copy in a portable format, and you can object to processing. People who comment on or message an account connected to NamSocial can contact us too; we will act together with the account owner. We answer within 30 days. You can also complain to the Turkish Personal Data Protection Authority (KVKK).
10. Security
Connections use HTTPS. Access tokens are encrypted at rest (AES-256-GCM) and are never shown in the app. Access to production systems is limited to authorized staff with two-factor authentication. We log sign-ins and sensitive actions.
11. Children
NamSocial is not intended for people under 18.
12. Changes
We will notify you by email and in the app before material changes take effect. The version and date are shown at the top of this page.