Privacy Policy

Last updated 15 October 2026

YongFlow (www.yongflow.com) lets your AI assistant post and answer comments on the Facebook Pages and YouTube channels you connect. This page explains what we store, what we use it for, and how you delete it. Contact: gokusen.nz@gmail.com

What we store

• Your YongFlow account: name, email and password (stored as a hash).
• Facebook Pages: Page ID and name, the Page access token (encrypted), comments on the Page (commenter ID, name and text) with our replies, the Page's Messenger chats (customer name, messages, attachments, notes and labels), and posts sent through YongFlow.
• YouTube channels: channel ID and title, the refresh token from Google (encrypted), videos sent through YongFlow (video ID, description, publish time and status), and daily YouTube quota counts. A video's title, visibility and made-for-kids answer are sent to YouTube and not kept. If you set YouTube comment reply rules, we read the channel's comments and store the commenter ID, name and text.
• Uploaded files: images and videos your assistant uploads for posting, kept in Cloudflare R2 and deleted automatically after 30 days.
• API keys: stored as a hash, with the key's first characters so you can tell your keys apart.
• Webhooks: the URL you set for YongFlow to send events to, and a log of the events sent (copies of comments and chat messages).
• Cookies: a sign-in cookie, and short-lived cookies while you connect a Page or channel. No advertising or tracking cookies.

How we use it

Only to do what you or your AI assistant ask: publish, schedule, reschedule and cancel posts, reply to comments by the rules you set, show your data in the dashboard, and return it to the assistants that hold your API keys. We do not sell your data, use it for advertising, or use it to train AI models.

Who receives it

• Facebook and YouTube: the content you ask us to post or reply with is sent to that platform as your Page or channel.
• Your assistants and endpoints: programs holding your API keys can read your account's data, and we send events to the URL you set.
• Infrastructure providers: Cloudflare (website, files and request logs) and DigitalOcean (database) process data to run YongFlow.
• Anyone the law requires us to disclose it to.

YouTube and Google user data

• YongFlow uses YouTube API Services. By using YongFlow's YouTube features you agree to be bound by the YouTube Terms of Service. Google handles your data under the Google Privacy Policy.
• YongFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Pressing "ลบออก" (Remove) on the channel in the YongFlow dashboard deletes our copy of its token and its data. To revoke YongFlow's access in your Google Account, use your Google Account permissions page.

Retention and deletion

• Removing a Page or channel in the dashboard deletes its data at once: its token, rules, comment log, posts and chats. A Page or channel with a scheduled post can be removed once that post is canceled or has gone out.
• The log of events sent to a webhook is kept until you delete that webhook or your account.
• If you revoke access in your Google Account, YongFlow can no longer use the channel; its remaining data is deleted when you remove the channel or email us.
• Uploaded files are deleted automatically after 30 days.
• To delete your account and all its data, email gokusen.nz@gmail.com. We delete it within 30 days.

Security

All traffic uses HTTPS. Page and channel tokens are encrypted before they are stored; passwords and API keys are stored as hashes.

Changes

If we change this policy, we update this page and the date above.