Privacy Policy
Last updated: 1 August 2026
This policy describes how Zesyl handles your data. The short version: we collect only what we need to run the service, we only publish what you schedule, we never sell your data, and you can disconnect or delete everything at any time.
1. Who we are
Zesyl (“Zesyl”, “we”, “us”, “our”) provides a social media automation platform that lets businesses and creators plan, create, and publish content to Facebook, Instagram, TikTok, X, LinkedIn, and Pinterest from one dashboard. This policy explains what personal data we collect, why we collect it, how we protect it, and the choices you have.
Zesyl operates the website at zesyl.com and the Zesyl application. For any privacy question or request, contact us at privacy@zesyl.com. For general support, contact hello@zesyl.com.
2. Information we collect
We collect the following categories of information:
- Account information. When you create a Zesyl account we collect your name, email address, and password (stored as a salted hash — we never store plain-text passwords).
- Social media account connections. When you connect a social media account, the platform’s OAuth flow provides us with an access token, plus identifiers and basic metadata for the connected page or profile (such as the page or profile ID, name, and avatar). We use these solely to display your connected accounts and to publish the content you schedule. We never receive or store your social media passwords.
- Content. The posts, captions, images, and videos you create, upload, generate, or schedule in Zesyl, together with their scheduling settings (target platforms, dates, and times).
- Usage data. Basic technical information about how you use the service — such as log data, IP address, browser type, and pages visited — used to keep the service secure and reliable.
- Messages you send us. If you contact us through the website form or by email, we receive your name, email address, and the contents of your message.
3. How we use your information
We use the information above only to:
- provide the core service: publishing and scheduling your content to the social media accounts you have connected;
- display your connected accounts and their status inside Zesyl;
- generate content (videos, images, copy) that you explicitly request through the AI creation tools;
- operate, secure, and improve the service, including troubleshooting and preventing abuse;
- communicate with you about the service — for example replies to your messages, early-access updates, and important account or policy notices.
Zesyl only publishes content that you create and schedule. We never post to your social media accounts without your action, and we never use your accounts, audience data, or content for any purpose other than providing the service you asked for. We do not sell your personal data, and we do not use your data for third-party advertising.
4. Third-party platforms
Zesyl integrates with Meta (Facebook and Instagram), TikTok, X, LinkedIn, and Pinterest through their official APIs. When you connect an account, the data we receive from that platform (access tokens, page or profile identifiers, and related metadata) is used solely to provide the Zesyl service to you — connecting your accounts, showing you what is connected, and publishing the content you schedule.
Our use of data received from each platform complies with that platform’s developer and platform policies. In particular:
- Zesyl’s use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies.
- Our use of data received from the TikTok API adheres to the TikTok Developer Terms of Service, and we use it only to provide the features you request.
- Our use of data received from the X API adheres to the X Developer Agreement and Policy.
- Our use of data received from LinkedIn APIs adheres to the LinkedIn API Terms of Use.
- Our use of data received from the Pinterest API adheres to the Pinterest Developer Guidelines.
Each platform’s own privacy policy governs the data those platforms collect from you directly. Disconnecting a platform from Zesyl (see Data Deletion Instructions) immediately revokes and deletes the tokens we hold for it.
5. AI content generation
When you use Zesyl’s AI creation tools, the prompts you write and any reference material you provide may be processed by third-party AI providers — for example Higgsfield for video and image generation — solely to generate the output you requested. We share only what is needed to fulfil your request, and we do not permit these providers to use your prompts or content to train their models on their own behalf beyond what their published terms allow.
Generated content is stored in your Zesyl account so you can review, edit, schedule, or delete it, and is removed as described in the Data retention section below.
6. Storage and security
- Encryption of tokens. OAuth access tokens for your connected social accounts are stored encrypted at rest.
- Encryption in transit. All traffic between your browser, Zesyl, and the platform APIs uses HTTPS/TLS.
- Access controls. Access to production systems and customer data is restricted to authorized personnel who need it to operate the service, and is logged.
- Passwords. Account passwords are stored as salted hashes and are never accessible to our staff.
No online service can guarantee absolute security, but if we become aware of a breach affecting your personal data we will notify you and the relevant supervisory authority as required by law.
7. Data retention
We keep your data only for as long as your account is active and it is needed to provide the service:
- While your account is active — account details, connected-account tokens, and your content remain stored so the service works.
- When you disconnect a platform — the access tokens and platform data for that connection are deleted immediately.
- When you delete your account — your profile, connected accounts, tokens, and stored content are deleted within 30 days, except where a short additional retention period is required by law (for example, records of a legal request).
8. Your rights
Depending on where you live — including under the EU GDPR and UK GDPR — you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- have your data deleted (“right to erasure”);
- receive a copy of your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time — including disconnecting any social media account from Zesyl at any moment, which immediately revokes our access;
- complain to your data protection authority.
To exercise any of these rights, email privacy@zesyl.com. We respond to all requests within 30 days.
9. Data deletion
You can delete your data at any time: delete your account from Settings → Account inside Zesyl, disconnect an individual platform from Settings → Connections, or email privacy@zesyl.com with the subject “Data deletion request”. Full step-by-step instructions — including how to revoke Zesyl’s access from within each social platform — are on our Data Deletion Instructions page.
11. Children
Zesyl is a business tool and is not directed at anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us at privacy@zesyl.com and we will delete it.
12. Changes to this policy
We may update this policy as the service evolves. When we make material changes we will update the “Last updated” date at the top of this page and, where the change significantly affects how we handle your data, notify you by email or in the app before it takes effect.
13. Contact us
Privacy questions and requests: privacy@zesyl.com. General questions: hello@zesyl.com. You can also reach us through the contact page.