OneShare logoOneShareLegal Center

Last updated: September 2, 2026

Privacy Policy | سياسة الخصوصية | מדיניות פרטיות

How co-Suite collects, uses, stores, and protects user and business data.

Overview

co-Suite provides AI-powered tools for business onboarding, content generation, analytics, scheduling, and advertising workflow management. This policy explains what information we collect and how we use it.

Information we collect

  • Account data such as name, email address, login credentials, language preference, and billing-related identifiers.
  • Business profile data including business name, links, website content, social pages, brand assets, audience information, services, products, and strategy inputs.
  • Generated content including prompts, captions, images, carousels, videos, hashtags, approvals, rejections, schedules, and publishing history.
  • Connected platform data from services the user chooses to connect, including Meta/Facebook/Instagram pages, ad accounts, analytics, Google Ads account/campaign reporting data, and YouTube channel identity and publishing data.
  • Technical data such as IP address, browser, device, logs, error reports, cookies, and usage events needed to secure and operate the service.

How we use information

  • To create and manage user accounts and business suites.
  • To analyze business links and build brand, audience, and marketing strategy profiles.
  • To generate AI-assisted content, images, videos, ad ideas, reports, and recommendations.
  • To connect, read, and publish through third-party platforms only when the user authorizes that connection.
  • To monitor service performance, prevent abuse, secure accounts, and improve product quality.
  • To manage billing, subscriptions, balances, invoices, and support requests.

AI processing

co-Suite may send selected business data, prompts, uploaded assets, links, and generated drafts to AI model providers to provide requested functionality. We minimize the data sent where practical and use provider APIs according to their applicable terms. Users should not submit confidential, regulated, or third-party data unless they have the right to do so.

Third-party services

  • Meta platforms may be used for Facebook Pages, Instagram, Meta Ads, publishing, and analytics.
  • Google Ads may be used for OAuth connection, account selection, and campaign/ad reporting.
  • YouTube API Services are used to publish videos to channels the user connects. See the dedicated section below.
  • Cloud storage, hosting, database, payment, logging, and AI providers may process data as processors or service providers.

YouTube API Services

co-Suite uses YouTube API Services to publish videos to YouTube channels that a user explicitly connects. By connecting a channel, the user also agrees to be bound by the YouTube Terms of Service, and Google's Privacy Policy governs data handled by Google.

  • Scopes we request: youtube.upload to upload videos; youtube.readonly to confirm which channel an authorization actually belongs to before anything is published; youtube.force-ssl to attach caption tracks to videos we upload.
  • Data we store: the OAuth refresh token for the connected channel, the channel ID and title, and a record of what we published (title, description, tags, privacy setting, caption track, and timestamps).
  • We do not access watch history, subscriptions, private playlists, comments, messages, or channel analytics beyond confirming the target channel identity.
  • Google user data obtained through these scopes is never sold, never shared with third parties for their own purposes, never used for advertising or profiling, and never used to train AI models.
  • Stored YouTube authorized data is refreshed or deleted within 30 days, as required by the YouTube API Services Terms of Service.
  • Users can disconnect a channel inside co-Suite at any time, which deletes the stored authorization, or revoke access directly from their Google Account security settings.

Limited use of Google user data

co-Suite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features the user connected the account for, is not transferred except as needed to provide those features, with the user's explicit consent, or where required by law, and is not read by humans except with the user's consent, for security or abuse investigation, or where required by law.

Data retention and deletion

We keep information as long as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and operate billing records. Users may request access, correction, export, or deletion where applicable by contacting us. Disconnecting a platform deletes the stored authorization for that platform.

Contact

Privacy requests can be sent to legal@cosuite.app. This policy is a general product policy and should be reviewed by legal counsel before public reliance.