Privacy Policy
Last updated August 12, 2026
This policy explains what Aura AI collects, why, and what you can do about it. Aura AI is operated by Zaina Omar for Online Selling ("we", "us"). It is a tool for managing social media accounts you already own: you connect your own Facebook Pages, Instagram professional accounts and TikTok accounts, and we act on your behalf.
Information you give us
When you create an account we store your name, email address and a hashed password. If you are invited to an organisation, we store which organisation you belong to and your role in it.
We store the content you create in Aura AI: draft and published posts, captions, scheduled times, uploaded media, and saved replies.
Information from connected social accounts
When you connect a Facebook Page or Instagram professional account, Meta gives us an access token for that account. We store it so we can act on your behalf, and we use it only for the features described here.
When you connect a TikTok account, TikTok gives us an access token and a refresh token, which we store for the same purpose. From TikTok we receive your account's display name, username and profile picture, so you can tell which account you are posting to. We do not receive your TikTok password.
Publishing: we send the posts and comments you create in Aura AI to the accounts you connected. For TikTok this means we upload the video you selected and the caption, audience and interaction settings you chose in Aura AI.
Removing posts: when you delete a post in Aura AI that has already been published, we also remove it from the Facebook Page or Instagram account it was posted to.
Your TikTok posts: we retrieve the videos already published on your connected TikTok account — their descriptions, cover images, links and view, like, comment and share counts — so your published work appears alongside what you have scheduled.
Inbox: we retrieve Messenger and Instagram conversations, message content, comments on your posts, and the names and profile pictures of the people who wrote them, so you can read and answer them in one place.
Analytics: we retrieve performance insights for your accounts and for the posts published through them, such as reach, views and engagement.
We request only the permissions these features need. We do not read your personal Facebook profile, your friends, your private messages as a consumer, or anything belonging to accounts you have not connected. On TikTok we do not read your For You feed, the accounts you follow, or your direct messages.
How we use it
To provide the features above, to keep your account secure, and to diagnose faults.
We do not sell your data. We do not share platform data with third parties for their own purposes. We do not use your content or your customers' messages to train machine-learning models.
Who can see it
Members of your organisation in Aura AI can see that organisation's content, connected accounts and conversations, according to their role.
We use service providers to run the product — hosting, storage and email delivery. They process data on our instructions and may not use it for their own purposes.
We may disclose data if the law requires it.
How long we keep it
We keep your account and content while your account is open.
Disconnecting a social account stops all further collection from it immediately and deletes the stored access token for that account.
When data is deleted it is removed from our live systems promptly and from backups as those backups age out.
Deleting your data
You can disconnect any social account at any time from the Accounts screen, and you can ask us to delete your Aura AI account entirely.
You can also request deletion through Facebook or Instagram. When you remove Aura AI from your Facebook settings, Meta notifies us and we delete the data associated with that account; we give you a confirmation code and a status page where you can check the request. For TikTok, revoke Aura AI's access in the TikTok app under Settings and privacy, then Security and permissions, then Manage app permissions — and disconnect the account in Aura AI to delete the data we hold for it. To ask us directly, email aomarab@outlook.com.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to aomarab@outlook.com and we will respond.
Security
Traffic is encrypted in transit. Access tokens and passwords are stored so that they cannot be read back from our database. Access to production systems is limited to people who need it.
Changes
If we change this policy materially we will update the date at the top of this page and, where the change affects you, tell you in the product.
Contact
Zaina Omar for Online Selling, a Sole Establishment licensed in Dubai, United Arab Emirates under commercial licence no. 1596159.
For any privacy question or request: aomarab@outlook.com.