Privacy Policy

OneClick Scheduler · Effective date: 4 August 2026 · Updated: 26 October 2026 (YouTube, free social media check-up, Premium connectors: My folders, website blogs, Learnings certificates, link clicks)

OneClick Scheduler (“the App”, “we”, “us”) is a social-media scheduling product operated by Brainyaccountant Solutions Private Limited (brand: PracticeGuru), 905 Q Wing, Marina Enclave, Jankalyan Nagar, Malad West, Mumbai, Maharashtra 400095, India. This policy explains what data we collect, how we use it, and your choices. Questions: [email protected].

1. Information we collect

Category	Details
Account information	Your name, email, phone, and login credentials from your OneClick / PracticeGuru account, used to sign you in.
Connected social accounts	When you connect an Instagram, Facebook, LinkedIn, Google Business Profile or YouTube account, we receive—via that platform’s official OAuth flow and only with your consent—your account identifiers, profile/page names, and access tokens that let us publish on your behalf. Tokens are stored encrypted.
Content you provide	Poster images you upload or share into the App and the captions/text you write.
My folders	Pictures you upload into your folders (for example client reviews, team or event photos), their captions, whether you confirmed the people in them agreed to be shown, your posting rule for each folder, and when each picture was posted.
Website blogs (WebifyTax)	If you connect your WebifyTax website: its address, firm name and login email from WebifyTax, and for each blog you publish its title, summary, link and sharing picture. If you switch on “Show my Google reviews” there, we send your Google reviews to WebifyTax (see the Google section).
Learnings certificates	If you switch on the Learnings certificates rule: for certificates earned by you or by people in your PracticeGuru Learnings office, the person’s name, the course and the date, and the certificate picture.
Link clicks	Links in your posts point to your own website with tracking tags added. We receive only the number of clicks on each tagged link (from your WebifyTax website where you have one). We do not receive who clicked.
Payment information	When you buy a plan, the payment is made on a Razorpay page. We receive from Razorpay the payment ID, amount, status and time, and the email address and mobile number you enter on that page. We use them only to recognise your account, switch your plan on and keep the payment record. We never receive your card, UPI or bank details.
Scheduling & usage data	Post schedules, publish status/history, device push-notification tokens, and basic app usage/diagnostic data.

2. How we use your information

To schedule and publish your content to the social platforms you connect and instruct.
To send you notifications (e.g. “post published”, “post failed”, “reconnect your account”).
To provide customer support and manage your subscription.
To secure, maintain, and improve the App.

We act only on your instruction and only on accounts and content you own or are authorised to manage.

3. Platform data (Meta, LinkedIn, Google & YouTube)

Data obtained through the Meta (Instagram & Facebook) Graph API and the LinkedIn API is used solely to provide the scheduling and publishing features you request. We do not sell this data, use it for advertising, or share it except as needed to publish your content. Our use complies with the Meta Platform Terms and the LinkedIn API Terms of Use. OneClick Scheduler is not affiliated with, endorsed, or sponsored by Meta, LinkedIn, or Google.

Google Business Profile

If you choose to connect a Google Business Profile, you sign in with Google and grant the business.manage permission. With it we access only:

the list of your Business Profile accounts and locations (their IDs and names), so you can choose which profile to post to;
the ability to create posts (your poster image and caption) on the profile you chose, at the time you scheduled;
the reviews on that profile (reviewer name and photo, rating, text, date, and your replies), which we show to you on the “Google reviews & stats” screen, and the ability to post, edit or delete your reply to a review — when you press the button to do so, or, only if you tick “Auto-reply to new 5★ reviews”, a short thank-you to 5-star reviews that arrive after you switched it on (you can switch it off at any time);
that profile’s performance numbers (views on Google Search and Maps, calls, website clicks, direction requests, and the search terms people used to find you), which we show only to you.

Reviews and performance numbers are fetched from Google and shown only to you, with one exception that you control: if you connect your WebifyTax website and switch on “Show my Google reviews” in your WebifyTax dashboard, we send your 4★ and 5★ reviews that have text (reviewer name and photo, rating, text, date), your average rating and your review count to WebifyTax, once a day, to show publicly on your website’s Testimonials page. Switching it off stops this and removes WebifyTax’s copy. To make the screen load quickly we keep a temporary copy on our server for up to 30 minutes, after which it is replaced or discarded. To alert you about new 1–3★ reviews (you can switch this off on that screen), we check your reviews about once an hour and keep only the review’s ID, star rating and time (and, for automatic thank-you replies, the reply we posted), the number of reviews waiting for a reply, and whether an alert was sent — not the review text. Alerts go to your own phone through the OneClick Scheduler app (and, if you enable it, WhatsApp). We do not read your messages or any other Google data, and we do not change your business information. We store your Google access and refresh tokens encrypted, and use them only to publish the posts you schedule and to show and answer your reviews and stats as described above. Google user data is never sold, never used for advertising, never used to train AI or machine-learning models, and never transferred to anyone except as needed to publish your post or reply, to show your reviews on your own WebifyTax website if you switched that on, or as required by law. No person at PracticeGuru reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.

OneClick Scheduler’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in the App (this deletes the stored tokens) or remove access from your Google Account at myaccount.google.com/permissions.

YouTube

If you connect a YouTube channel, OneClick Scheduler uses YouTube API Services to upload the videos you schedule, or that your video auto-post rules create, to your channel. By connecting a channel you agree to the YouTube Terms of Service, and Google’s use of data is covered by the Google Privacy Policy.

We ask Google for two permissions: to upload videos to your channel, and to read your channel’s basic details (channel ID, name and picture), which we use only to show which channel is connected and to post to it. We store your channel ID, name and picture link, the Google access and refresh tokens (encrypted), and, for the posts you schedule, the video title, description, privacy choice (public, unlisted or private) and the resulting video ID. We never read your other videos, comments, subscribers or analytics, and we never share this data with third parties or use it for advertising or to train AI models.

You can disconnect YouTube at any time in Connected accounts: we then revoke our access at Google and delete the stored tokens and your YouTube settings straight away. You can also remove access yourself at security.google.com/settings/security/permissions. To have all your data deleted, use our data-deletion page or email [email protected].

Free social media check-up

The check-up looks only at your own accounts, and only when you tick them and press “Run my check-up”. We never look up or check anyone else’s accounts. When you run it, we read, for the last 90 days:

Instagram and Facebook Page — the posts you sent through OneClick Scheduler (caption, date, type, likes and comments). Reading your other older posts directly from Instagram and Facebook will be added only after Meta approves it; this policy will say so when it does;
LinkedIn — the posts you sent through OneClick Scheduler;
Google Business Profile — your opening hours, website, phone and category, your reviews and whether they have a reply, and your Google posts;
the posts you have scheduled for the next 14 days and your auto-post rules.

We use this only to show you the result: posting gaps, due-date and festival posts found or not found, caption wording to review, and Google profile gaps. Your posts and reviews are read for the check-up and not saved. We keep only the result (and the words of up to three captions it flags, which are your own) for up to 90 days, shown only to you. It is never shown to our sales staff, used to contact you, or shared with anyone. You can delete it at any time with “Delete my check-up”; disconnecting any account, or a data-deletion request, also deletes it. We keep a record that you agreed to each check-up (what you ticked and when).

If you ask us to email you the result, we send it only to your login email. Tips and offers by email, and a WhatsApp call-back, are separate choices you can tick or leave; you can stop them at any time.

Premium connectors: My folders, website blogs and Learnings certificates

These post content from outside the social platforms to the accounts you connected, only when you switch them on, and only to the platforms you tick.

My folders — you choose what to upload. Post only pictures you have the right to share. For client reviews, success stories and event photos you confirm that the people shown agreed; pictures without that confirmation are kept in your folder but never posted. Do not upload PAN, Aadhaar, client documents, phone numbers or private messages: whatever is in a picture becomes public when it is posted. We do not read or analyse your pictures. They are shown only to you in the App and sent only to the platforms you choose.
Website blogs — WebifyTax tells us when you publish a blog, and we post its title, summary, link and picture. Disconnecting your website in either product stops this.
Learnings certificates — a certificate earned by you, or by someone in your Learnings office, is posted to your pages with your contact details (name, course and date as shown on the certificate). Switch the rule off to stop it. If you are a staff member and do not want your certificate posted by your office, ask your office owner, or write to us and we will stop it.

4. How we share information

Social platforms — we transmit your content to Instagram, Facebook, LinkedIn, Google Business Profile or YouTube to publish it, per your instruction.
Service providers — e.g. Amazon Web Services (AWS) for secure image hosting and email delivery. They process data only on our behalf.
Payments — Razorpay Software Private Limited processes your payment on its own page under its own terms and privacy policy, and tells us the result so we can activate your plan.
Legal — where required by law.

We never sell your personal data.

5. Data retention

Access tokens — kept until you disconnect the account or delete your account, then deleted/invalidated.
Poster images — retained only as long as needed to publish a scheduled post (up to your maximum scheduling window), then automatically deleted.
My folders pictures — kept while they are in your folder, so they can be posted again on your schedule. When you delete a picture or a folder, the uploaded picture is deleted from our storage. Copies already posted stay on the social platforms, and in your post history, until you delete them there.
Website blogs and Learnings certificates — the blog or certificate details are kept with the post they created, as part of your post history.
Account & history — kept while your account is active; deleted on request or account closure (see below).
Social media check-up — the latest result only, up to 90 days (see “Free social media check-up” above).
Payment records — kept for as long as Indian tax and accounting law requires (currently up to 8 years), even if you close your account.

6. Your rights & choices

You can disconnect any social account at any time from within the App (which deletes its stored tokens), and you can request deletion of your data. Under India’s Digital Personal Data Protection Act and, where applicable, the GDPR, you may have rights to access, correct, or delete your data. To exercise these, see our Data Deletion page or email [email protected].

7. Security

We protect access tokens with encryption at rest, restrict database access, and follow least- privilege practices. No system is perfectly secure, but we work to safeguard your information.

8. Children

The App is intended for business users aged 18 and above and is not directed to children.

9. Changes

We may update this policy; we will post the revised version here with a new effective date.

10. Contact

Brainyaccountant Solutions Private Limited — [email protected].