Privacy Policy

1. Introduction

Lewrage ("we", "our", or "us") operates the platform available at app.lewrage.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including when you connect third-party services such as Meta (Facebook and Instagram) and Google (YouTube).

By using Lewrage, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and profile details provided during registration.
• Meta / Instagram data: When you connect your Instagram or Facebook account, we access analytics data including post metrics, reach, impressions, engagement, and follower statistics through the Meta Graph API. We do not store your Meta password.
• Google / YouTube data: When you connect your YouTube channel via Google OAuth, we access your channel statistics (subscriber count), video list, and per-video metrics (views, likes, comments) through the YouTube Data API v3 and YouTube Analytics API. We do not store your Google password.
• OAuth tokens: Access tokens and refresh tokens issued by Meta and Google to retrieve your analytics. These are stored securely and used solely to fetch your account's performance data.
• Usage data: Pages visited, features used, and interaction logs within the platform.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Lewrage platform
• Display your social media analytics and performance insights
• Sync data from connected Meta accounts (Instagram posts, stories, reels, and account insights)
• Sync data from connected Google accounts (YouTube channel stats, video metrics, and subscriber counts)
• Communicate with you about your account or platform updates
• Improve and develop new features

We do not sell, trade, or rent your personal information, Meta data, or Google/YouTube data to third parties.

Lewrage's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Meta Permissions

When you connect your Instagram account, we request the following Meta permissions:

• instagram_basic — To read your Instagram profile and media
• instagram_manage_insights — To read post, story, and reel performance metrics
• pages_show_list — To identify Facebook Pages linked to your Instagram account
• pages_read_engagement — To read engagement data from linked Pages
• business_management — To identify linked Pages and Instagram Business Accounts associated with your business

We only request permissions necessary to provide analytics features. You can disconnect your Meta account at any time from the platform settings, which will revoke our access.

5. Google / YouTube Permissions

When you connect your YouTube channel via Google OAuth, we request the following scopes:

• youtube.readonly — To read your YouTube channel information, video list, and public video statistics (views, likes, comments)
• yt-analytics.readonly — To read YouTube Analytics data including subscriber counts and video performance metrics

We access only the data necessary to display your channel analytics within Lewrage. We do not modify your YouTube content, playlists, or account settings. You can disconnect your YouTube channel at any time from the platform settings, which immediately removes your stored tokens.

Google user data obtained through these APIs is used exclusively to provide analytics features within Lewrage and is never shared with third parties, used for advertising, or sold.

6. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL). OAuth access tokens are stored in our database and used solely to retrieve your analytics on your behalf. We implement industry-standard security measures to protect your information against unauthorized access, alteration, or disclosure.

Google refresh tokens are stored to enable ongoing analytics syncs without requiring you to re-authenticate. You may revoke access at any time by disconnecting your account within Lewrage or by visiting your Google Account permissions page.

Meta access tokens expire after 60 days and are refreshed automatically. Disconnecting your Meta account immediately removes stored tokens.

7. Data Sharing

We do not share your personal data, Meta analytics data, or Google/YouTube data with third parties except:

• When required by law or legal process
• With service providers who assist in operating the platform (e.g., Supabase, Vercel) under strict confidentiality agreements
• With your explicit consent

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Disconnect your Meta or Google account and revoke our access at any time
• Revoke Google access directly at myaccount.google.com/permissions
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the email below.

9. Data Deletion

You can request deletion of all your data, including connected Meta and Google tokens and analytics data, by contacting us at afzaljazeelpriv@gmail.com. We will process your request within 30 days.

You may disconnect your Instagram or YouTube account directly from the platform settings page, which immediately removes your stored access tokens from our systems.

To revoke Google access independently, visit myaccount.google.com/permissions and remove Lewrage.

To request deletion of data collected through our Meta integration, contact us at afzaljazeelpriv@gmail.com.

10. Cookies

We use session cookies to maintain your authenticated state within the platform. We do not use tracking cookies or third-party advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy, contact us at: