Privacy Policy

OneClick Scheduler · Effective date: 4 August 2026 · Updated: 22 October 2026 (payments through Razorpay)

OneClick Scheduler (“the App”, “we”, “us”) is a social-media scheduling product operated by Brainyaccountant Solutions Private Limited (brand: PracticeGuru), 905 Q Wing, Marina Enclave, Jankalyan Nagar, Malad West, Mumbai, Maharashtra 400095, India. This policy explains what data we collect, how we use it, and your choices. Questions: [email protected].

1. Information we collect

Category	Details
Account information	Your name, email, phone, and login credentials from your OneClick / PracticeGuru account, used to sign you in.
Connected social accounts	When you connect an Instagram, Facebook, LinkedIn, or Google Business Profile account, we receive—via that platform’s official OAuth flow and only with your consent—your account identifiers, profile/page names, and access tokens that let us publish on your behalf. Tokens are stored encrypted.
Content you provide	Poster images you upload or share into the App and the captions/text you write.
Payment information	When you buy a plan, the payment is made on a Razorpay page. We receive from Razorpay the payment ID, amount, status and time, and the email address and mobile number you enter on that page. We use them only to recognise your account, switch your plan on and keep the payment record. We never receive your card, UPI or bank details.
Scheduling & usage data	Post schedules, publish status/history, device push-notification tokens, and basic app usage/diagnostic data.

2. How we use your information

To schedule and publish your content to the social platforms you connect and instruct.
To send you notifications (e.g. “post published”, “post failed”, “reconnect your account”).
To provide customer support and manage your subscription.
To secure, maintain, and improve the App.

We act only on your instruction and only on accounts and content you own or are authorised to manage.

3. Platform data (Meta, LinkedIn & Google)

Data obtained through the Meta (Instagram & Facebook) Graph API and the LinkedIn API is used solely to provide the scheduling and publishing features you request. We do not sell this data, use it for advertising, or share it except as needed to publish your content. Our use complies with the Meta Platform Terms and the LinkedIn API Terms of Use. OneClick Scheduler is not affiliated with, endorsed, or sponsored by Meta, LinkedIn, or Google.

Google Business Profile

If you choose to connect a Google Business Profile, you sign in with Google and grant the business.manage permission. With it we access only:

the list of your Business Profile accounts and locations (their IDs and names), so you can choose which profile to post to;
the ability to create posts (your poster image and caption) on the profile you chose, at the time you scheduled;
the reviews on that profile (reviewer name and photo, rating, text, date, and your replies), which we show to you on the “Google reviews & stats” screen, and the ability to post, edit or delete your reply to a review — when you press the button to do so, or, only if you tick “Auto-reply to new 5★ reviews”, a short thank-you to 5-star reviews that arrive after you switched it on (you can switch it off at any time);
that profile’s performance numbers (views on Google Search and Maps, calls, website clicks, direction requests, and the search terms people used to find you), which we show only to you.

Reviews and performance numbers are fetched from Google and shown only to you. To make the screen load quickly we keep a temporary copy on our server for up to 30 minutes, after which it is replaced or discarded. To alert you about new 1–3★ reviews (you can switch this off on that screen), we check your reviews about once an hour and keep only the review’s ID, star rating and time (and, for automatic thank-you replies, the reply we posted), the number of reviews waiting for a reply, and whether an alert was sent — not the review text. Alerts go to your own phone through the OneClick Scheduler app (and, if you enable it, WhatsApp). We do not read your messages or any other Google data, and we do not change your business information. We store your Google access and refresh tokens encrypted, and use them only to publish the posts you schedule and to show and answer your reviews and stats as described above. Google user data is never sold, never used for advertising, never used to train AI or machine-learning models, and never transferred to anyone except as needed to publish your post or reply, or as required by law. No person at PracticeGuru reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.

OneClick Scheduler’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in the App (this deletes the stored tokens) or remove access from your Google Account at myaccount.google.com/permissions.

4. How we share information

Social platforms — we transmit your content to Instagram, Facebook, LinkedIn, or Google Business Profile to publish it, per your instruction.
Service providers — e.g. Amazon Web Services (AWS) for secure image hosting and email delivery. They process data only on our behalf.
Payments — Razorpay Software Private Limited processes your payment on its own page under its own terms and privacy policy, and tells us the result so we can activate your plan.
Legal — where required by law.

We never sell your personal data.

5. Data retention

Access tokens — kept until you disconnect the account or delete your account, then deleted/invalidated.
Poster images — retained only as long as needed to publish a scheduled post (up to your maximum scheduling window), then automatically deleted.
Account & history — kept while your account is active; deleted on request or account closure (see below).
Payment records — kept for as long as Indian tax and accounting law requires (currently up to 8 years), even if you close your account.

6. Your rights & choices

You can disconnect any social account at any time from within the App (which deletes its stored tokens), and you can request deletion of your data. Under India’s Digital Personal Data Protection Act and, where applicable, the GDPR, you may have rights to access, correct, or delete your data. To exercise these, see our Data Deletion page or email [email protected].

7. Security

We protect access tokens with encryption at rest, restrict database access, and follow least- privilege practices. No system is perfectly secure, but we work to safeguard your information.

8. Children

The App is intended for business users aged 18 and above and is not directed to children.

9. Changes

We may update this policy; we will post the revised version here with a new effective date.

10. Contact

Brainyaccountant Solutions Private Limited — [email protected].