Who we are
This policy applies to the Sharawi Studio client delivery and social media performance platform (the “Service”). Sharawi Studio operates the Service from Amman, Jordan. For privacy questions or data requests, contact hisha.shar.196@gmail.com.
Where we provide services to a business client, that client may determine what creative assets and client-related information are uploaded. In those situations, Sharawi Studio may process information on the client's instructions, subject to its service arrangement.
Information we handle
Depending on which features are used, we may process:
- Client and workspace records: client names or brands, projects, delivery links, assigned team contacts where provided, service requests and administrative records.
- Creative work: uploaded images, videos, visual guidelines, captions, deliverable versions, review decisions and comments.
- Social account connections: authorized account IDs, channel names, provider authorizations, and account-to-client assignments.
- Publishing and analytics: scheduled or published post references, URLs, provider statuses and performance metrics such as views, impressions, reach, likes, comments, shares and watch time when available.
- Technical and security information: necessary session cookies, access and invitation tokens, application errors and security or infrastructure logs.
We do not require you to provide social account passwords. Social platform authorization takes place through the relevant provider.
How information is used
We use information to deliver contracted creative work, authenticate authorized clients, host and review deliverables, publish or schedule approved content where requested, retrieve analytics for authorized accounts, attribute metrics to the correct client and deliverable, operate support functions, and protect the Service against unauthorized access.
We do not use social-platform data obtained through these integrations for the sale of personal information or to create unrelated advertising profiles.
Third-party services
When applicable, the Service integrates with Buffer for publishing and scheduling; Meta for Facebook and Instagram account data and insights; Google/YouTube for authorized channel details and analytics; and, if enabled and separately authorized, TikTok and LinkedIn for account and post data.
Our infrastructure uses Vercel, including private application records and deployments, and Cloudflare R2 or Vercel storage for uploaded media. These providers may process information according to their own terms and privacy notices. Publishing content to a social network is subject to that network's privacy settings and policies.
Social authorizations
The studio only retrieves connected-account data within permissions granted through the applicable provider. A Buffer connection used for publishing is separate from any read-only analytics authorization. Social access and refresh tokens are handled server-side and protected; they are not exposed to clients in the dashboard.
Accounts and analytics are assigned to specific client workspaces. Access granted to one client does not authorize that client to view another client's content or metrics. Revoking authorization at a social platform stops future authorized retrieval, but does not automatically remove records already stored in the Service; see Data Deletion.
Access, sharing and transfers
Client delivery links grant access only to authorized content assigned to that client. Studio administrators and authorized service providers may access information as needed to operate and support the Service. We share content and related metadata with social platforms or Buffer only when the relevant publishing action or integration requires it.
Because hosting and social services operate internationally, information may be processed outside your country. Applicable privacy protections and service-provider commitments apply.
Cookies and security
We use session or access-related cookies necessary for the private client portal and administrator functions. We do not currently describe an advertising-cookie program for this Service. Browser, hosting and security providers may separately collect technical usage information.
We use access restrictions, limited client assignments, temporary media links and protected credentials to reduce unauthorized access. No online system can guarantee absolute security.
Retention and your choices
We retain information while it is needed to provide services, maintain records, protect the platform, or meet applicable legal and contractual obligations. Retention varies by type of record and client arrangement; we do not promise a universal automatic deletion date.
You can ask to access, correct or delete personal information, or request that an authorized social account be disconnected, by emailing hisha.shar.196@gmail.com. We may request enough information to verify that the request is authorized. See our Data Deletion Instructions for the process and limitations.
Updates and contact
We may update this policy when integrations or data practices change. The effective date at the top identifies the version available here. Contact hisha.shar.196@gmail.com with questions about this policy or the Service.