Privacy Policy
Last Updated: 26 October 2026
Google API Limited Use Disclosure: The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Welcome to Hyloca, a product of Nexart Tech. Hyloca (https://hyloca.com) is an automation and workflow platform that enables businesses to connect their communication channels, data sources, CRM tools, and marketing services into unified, automated workflows.
This Privacy Policy covers Hyloca and its subsidiary platforms, Hyloca Studio (https://studio.hyloca.com) and Hyloca Sales Hub (https://hub.hyloca.com), including their websites, mobile applications, connected accounts, and integrations. Hyloca Studio provides content creation, AI-assisted creative tools, media management, social media scheduling, and publishing. Hyloca Sales Hub provides sales, customer support, and content task management, team collaboration, follow-ups, and reporting. These platforms are operated by NexartTechnosolutions Private Limited ("Nexart Tech," "we," "us," or "our"). References to "Hyloca" or "our services" in this policy include Hyloca Studio and Hyloca Sales Hub unless stated otherwise.
This policy explains how we collect, use, store, share, and protect personal information about visitors, registered users, and customers (collectively, "Users"). Where customers use our services to process information about their own customers, contacts, or audiences, we process that information on their instructions. Those customers are responsible for providing appropriate notices and obtaining any permissions required for their activities.
Connecting an account or enabling a feature authorizes the processing needed for that feature, subject to the permissions you grant. Where applicable law requires consent, we obtain it separately; this policy does not replace that consent.
When you register for Hyloca, we collect:
When you connect your Google account to Hyloca, we collect and process the following data under the Google OAuth 2.0 framework:
We access your Google Sheets and Drive data solely to provide the automation and data routing services you configure within Hyloca. This includes reading spreadsheet data at user-configured polling intervals, appending and updating rows, and routing data based on conditions you define. We do not access any Google files or data outside of what you explicitly authorize and connect within Hyloca.
When you connect your Meta accounts, we collect and process:
The data accessed depends on the product, feature, API availability, and permissions you grant. We use it to enable the features you configure, including publishing and scheduling content to Facebook Pages, Instagram professional accounts, and Threads through Hyloca Studio, as well as automated replies, chatbot flows, broadcast campaigns, and lead routing through Hyloca. Connecting an account for Studio publishing does not by itself mean we access its private messages or every category of Meta data listed above.
Depending on the integrations you enable, we may process data from:
When you connect e-commerce or CRM platforms, we process:
When you connect advertising accounts, we process:
When you connect your Pinterest account to Hyloca, we use the Pinterest API to access and process Pinterest account data that you authorize, such as Pinterest account information, boards, Pins, media, publishing status, related analytics, and campaign data required to provide the features you configure in Hyloca.
Hyloca uses Pinterest API data only to provide user-authorized automation, publishing, analytics, and workflow features. Hyloca is not endorsed by, certified by, affiliated with, or sponsored by Pinterest.
If you disconnect your Pinterest account or revoke Hyloca's access, we stop accessing Pinterest API data. Pinterest-derived data stored for workflow logs, troubleshooting, or audit purposes will be deleted or anonymized within 30 days unless retention is required by law, security, fraud prevention, or billing/accounting obligations.
We do not sell, resell, sublicense, redistribute, or otherwise make available Pinterest content or Pinterest-derived data to third parties except as necessary to provide the Hyloca services you explicitly configure or as required by law.
Hyloca, Hyloca Studio, and Hyloca Sales Hub integrate with third-party AI services (including OpenAI and other AI providers) for conversational replies, chatbot flows, writing, creative generation or editing, audio transcription, conversation summaries, and sales or support analysis. When you use or configure these features:
Hyloca does not operate its own AI model. All AI-generated responses are powered by third-party APIs on your behalf.
We automatically collect technical information when you use Hyloca, including:
When you use Studio, we process content you upload, create, or configure, including brand profiles, creative briefs, prompts, text, captions, links, images, videos, generated outputs, drafts, campaign settings, selected publishing destinations, and schedules. We store this content as needed to provide your content library and publishing features.
Studio supports connections to Facebook, Instagram, LinkedIn, Pinterest, and Threads, and other available channels such as X (Twitter), Google Business Profile, Blogger, and Reddit. Availability depends on your account, enabled features, and each platform's API permissions. For integrations you enable, we may process:
We use this information to connect the accounts you select, display available destinations, create or schedule posts, upload media, publish on your behalf, and report publishing results. LinkedIn access may include your member profile or organizations you are authorized to manage; Pinterest access may include selecting or creating boards and publishing Pins; Threads access includes profile identification and authorized content publishing. We do not request your social platform password through these authorization flows.
Scheduled publishing and configured campaigns may run in the background without you being logged in. They follow the destinations, content, and settings you authorize and remain subject to platform rules. For Pinterest scheduling, you must choose each Pin to be published. Access to one channel does not authorize access to your other accounts.
When you use Sales Hub through the website or mobile app, we process information you or your authorized collaborators enter, upload, import, or receive through connected Hyloca workflows. Depending on the features used, this includes:
We use this data to organize work, route customer requests, manage access, support team collaboration, send invitations and follow-ups, track payments and task outcomes, and provide reports. Customers must have a lawful basis to provide other people's information and send communications, and must respect opt-outs and applicable messaging rules.
If you record a voice message, upload a call recording, or submit transcript text, we process the audio or text and associated task and uploader information. Call-related records may include the caller and called phone numbers, device identifiers and type, call initiation time, upload or matching status, and the associated recording reference. We store transcripts and generated summaries, lead scores, quality assessments, and analysis results to provide the features you use.
Microphone access is used for recording features you activate; uploading or matching an existing call recording is a separate feature from recording a voice message. You are responsible for providing notices and obtaining any required permissions from call participants and other people whose recordings or personal information you submit. AI outputs may be inaccurate and should be reviewed before being used to make decisions about customers or team members.
Sales Hub uses Firebase services for supported authentication and push notifications. We process sign-in identifiers, verified phone or account information supplied during authentication, session tokens, device and app information, and notification registration tokens to authenticate users, maintain sessions, and deliver notifications.
Depending on the feature and device, the app may request camera access to capture task media or profile pictures, microphone access for voice recording, access to selected files, photos, videos, or audio for attachments and recording uploads, and permission to save downloaded media or display notifications. You can manage permissions in your device settings; disabling a permission may limit the related feature.
Notifications may contain task titles, message previews, or other work details that can appear on your device's lock screen. You can control notification visibility through device settings. Device permissions do not by themselves authorize publishing or sharing your files outside the features you use.
We use the information we collect exclusively to:
We do NOT use your data for:
Hyloca's use of data received from Google APIs (including Google Sheets and Google Drive APIs) strictly adheres to the following principles, in compliance with the Google API Services User Data Policy:
Google API Limited Use Disclosure: The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Specifically, Hyloca:
The Google OAuth scopes requested by Hyloca are used solely to enable features you activate, such as syncing spreadsheets, creating and updating rows, triggering workflow actions, selecting authorized Business Profile locations or Blogger blogs, and publishing your content to those destinations.
We do not sell your personal data. We may share data in the following circumstances:
We share data with service providers who help us deliver the platform, including:
All service providers are contractually required to handle your data in accordance with applicable privacy laws and to use it only for the purposes we specify.
When you connect third-party platforms (including Google, Meta, LinkedIn, Pinterest, X, Reddit, Shopify, WooCommerce, Mailchimp, and Twilio), data is exchanged as necessary to operate the integrations you configure and as permitted by the platform's terms. For Studio publishing, this includes sending your selected text, media, links, and destination information to the relevant platform. A platform may fetch media through a hosted URL to process and publish it.
Content published to a public account, Page, board, blog, or community may be publicly visible and copied or shared by others, according to that destination's settings. Each platform governs its own processing and retention. Disconnecting an integration or deleting content from Studio does not automatically remove posts already published on that platform; manage those posts directly on the platform where necessary.
We may disclose your data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Hyloca, its users, or the public.
In the event of a merger, acquisition, or sale of Hyloca or its assets, your data may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on the platform.
Where you link Hyloca and Studio or use shared sign-in, we exchange account identifiers, profile and subscription information needed to authenticate you, link your accounts, and provide access to included features. If you enable Hyloca reply automation for a Studio post, the relevant connected account identifiers, post identifiers, post text and media references, and selected reply configuration are exchanged to carry out that feature. These connections are used to provide the services you request.
Where you link Sales Hub to Hyloca, we exchange account and profile identifiers, authentication and subscription information needed for shared sign-in and access to features. Configured lead or support routing may transfer customer contact details, source information, tags, and conversation summaries into Sales Hub tasks. If status synchronization is enabled, task status and the relevant spreadsheet or workflow references are sent back to Hyloca to update the connected source. Configured WhatsApp, SMS, or email follow-ups and support invitations send recipient details, message content, and selected attachments through Hyloca and the relevant delivery providers. AI requests may also use the connected account's AI configuration and record usage against that account.
Task information and collaboration content are shared with task owners, members, and invited participants according to their roles and available module permissions. This may include customer contacts, messages, attachments, recordings, transcripts, payment records, and activity or performance information. Support recipients may have access to relevant task information and conversations under the applicable access controls. Invitations and notifications may disclose the details needed to identify or participate in a task.
Authorized users may download files, export reports, or share information through features available to them. Review participants and permissions before adding personal or confidential information. Removing access does not retrieve copies someone has already downloaded or received.
We retain your personal data for as long as your account is active or as needed to provide services. Specifically:
Hyloca uses cookies and similar tracking technologies to:
You can control cookie settings through your browser. Note that disabling certain cookies may affect platform functionality.
We implement industry-standard security measures to protect your data:
While we take commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.
You have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@nexart.tech.
Social platform data deletion requests: To request deletion of data received from Facebook, Instagram, Threads, LinkedIn, Pinterest, or another connected platform, email support@nexart.tech with the subject "Hyloca / Studio Data Deletion Request." Identify your Hyloca or Studio account and the connected platform, and tell us whether you want that platform's data or your entire account deleted. Do not send passwords or access tokens. We may request information needed to verify your identity before acting. We will delete or anonymize the relevant personal data within 30 days of verifying the request, except where retention is required by law or a shorter period is required by applicable law or platform terms.
Disconnecting an account is separate from requesting deletion of stored content or account data. Cancel scheduled posts or campaigns you no longer want to run. Deletion by Hyloca applies to data held by our services; requests concerning copies held by a social platform, including published posts, must also be directed to that platform.
Sales Hub account and task data: You can use the account deletion feature in Sales Hub or contact support@nexart.tech with the subject "Hyloca Sales Hub Data Deletion Request." Identify the account and whether the request concerns your profile, particular customer or task information, recordings, or the entire account. Account deletion removes your Sales Hub account, sessions, and tasks you own, and removes your membership from other people's tasks. Content you contributed to tasks owned by other users may remain with your user reference removed; those task records may still contain personal information within messages, files, or transcripts. Contact us about any remaining personal information so we can assess and address the request with the relevant task owner and applicable legal obligations.
Deleting a Sales Hub account does not automatically delete a linked Hyloca or Studio account or copies already delivered to external recipients. Specify the platforms and data you want deleted. If your information was supplied by a business using Sales Hub, you may also contact that business to request access, correction, or deletion; we assist with requests concerning information processed on its behalf.
Hyloca and Studio integrate with third-party services including Google, Meta (Facebook, Instagram, Threads, WhatsApp), LinkedIn, Pinterest, X, Reddit, Shopify, WooCommerce, Mailchimp, Twilio, and AI providers. Review the privacy policies of the services you connect, including Meta (including Threads), Instagram, LinkedIn, Pinterest, Google, X, and Reddit. Their policies govern processing by those services. An integration does not imply endorsement or sponsorship by the platform.
Sales Hub also uses authentication, notification, storage, and AI services for the features described above. Google's privacy policy applies to processing by Google services such as Firebase. Links, invoice URLs, exported files, and content shared outside our services may be subject to the receiving service's own privacy practices.
Hyloca is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.
Hyloca operates globally and your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your data.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
The revised date identifies the latest version. Where a change requires new consent or additional platform authorization, we will obtain it before carrying out the affected processing.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Company: NexartTechnosolutions Private Limited
Products: Hyloca (https://hyloca.com), Hyloca Studio (https://studio.hyloca.com), and Hyloca Sales Hub (https://hub.hyloca.com)
Email: support@nexart.tech
We will respond to all requests within a reasonable timeframe, and no later than 30 days.