سياسة الخصوصية — نسق CRM

Privacy Policy — NASQ CRM (English)

NASQ CRM is operated by Nasq Advertising & Marketing Company (Kuwait) for its authorized staff, to manage the company's clients and the social media accounts clients ask us to manage.

Facebook and Instagram data

When a client (or our staff on the client's behalf) connects a Facebook Page and its Instagram business account, we use only the permissions granted to: publish posts the client approved, read and reply to the Page's comments and messages, and show performance numbers (followers, reach, engagement). We store the Page name and ID, the Instagram username, and the Page access token encrypted. Comments, messages and insights are read from Meta when shown and are not stored. We do not use this data for advertising, and we never sell or share it.

YouTube, Google Business Profile, TikTok and Snapchat

When a client connects a YouTube channel, a Google Business Profile location, a TikTok account or a Snapchat Public Profile, we use only the permissions granted to publish content the client approved, and read the channel, location or account name and ID. We store the refresh token encrypted and no other data from these accounts. Our use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data

We request only the Google scopes we need: Google Sign-In (name, email, photo) for each staff member; and, for the company account only, Google Contacts to sync client names and numbers, Google Drive to keep each client's files in its folder in the "عملاء نسق" shared drive, and Google Ads to manage the ad accounts clients link to Nasq's manager account (view campaigns and metrics; create, edit and pause campaigns at the client's request). We read only the data these features need and use it for nothing else.

NASQ CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for targeted advertising, or transfer it to third parties, and no human reads it except the staff member assigned to that client or where needed for security or legal reasons.

Ad accounts (Meta, TikTok, Snapchat, Google Ads)

Clients grant Nasq access to their own ad accounts from inside each platform; we never ask for passwords. We use that access to show campaigns, spend and results, and to create, edit and pause campaigns at the client's request. We have no access to billing or payments; spend stays on the client's own account and card. We store the ad account ID and name and the client it belongs to, and keep access keys encrypted. Campaign metrics are read from the platform when shown; we never sell or share them.

Data deletion

A client can disconnect at any time in NASQ CRM (Accounts → disconnect); we then delete the stored token and Page data immediately. Removing NASQ CRM in Facebook (Settings → Business integrations) stops our access at once. For any other deletion request, email info@nasq.net; we delete within 30 days and confirm.

Contact

Nasq Advertising & Marketing Company, Kuwait — info@nasq.net