Last updated: 30 October 2026
This policy explains what data TrackMedia collects, why we collect it, how long we keep it, and how you can have it deleted. TrackMedia is operated by NQM STUDIO LTD, registered at 128 City Road, London EC1V 2NX, United Kingdom. Questions about this policy can be sent to maruf@trackmedia.app.
TrackMedia is a social media management tool. It lets you connect social media accounts you own or administer, schedule and publish content to them, and view analytics about that content. We act on your instructions — we do not post anything you have not asked us to post.
When you create a TrackMedia account we collect your name, email address, and, for paid plans, billing details. Payments are processed by our payment provider; we do not store full card numbers.
When you connect a social account, that platform issues us an access token. We never see or store your social media password. Using that token, and only within the permissions you granted, we access:
| Platform | What we access |
|---|---|
| Facebook Pages | Pages you manage, page metadata, posts we published, page and post insights |
| Professional account profile, media we published, media and account insights | |
| Threads | Profile, threads we published, post insights |
| TikTok | Basic profile, account statistics, your public video list, videos we published |
| Member or organisation identity, organisation posts and their analytics | |
| X | Account identity, posts we published, post metrics |
| YouTube | Your channel's name, picture and subscriber count, the videos we upload for you, and view, like and comment counts for your videos |
If you connect YouTube, we ask Google for three permissions. youtube.upload lets us upload to your channel the video you chose in TrackMedia, with the title, description, tags and visibility you set, when you publish it or when a post you scheduled comes due. youtube.readonly lets us read your channel's name, picture and subscriber count, and the view, like and comment counts of your videos, so you can see which channel is connected and how your posts perform, and lists your playlists so you can pick one. youtube.force-ssl lets us add a video we uploaded for you to the playlist you picked; we use it for nothing else. We store your channel ID, name and picture, the IDs of videos we published and their counts, and your access and refresh tokens (encrypted). We do not change or delete anything on your channel except by uploading a video you asked us to upload and adding it to a playlist you picked.
TrackMedia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide and improve the features you see in TrackMedia. We do not sell it, use it for advertising, or allow people to read it, except with your consent, to investigate abuse or a security issue, to comply with the law, or where it is aggregated and anonymised.
TrackMedia uses YouTube API Services. By connecting YouTube you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke TrackMedia's access to your YouTube data at any time in your Google security settings, or by disconnecting the channel in TrackMedia. Either way we stop accessing your channel, and we delete the data we hold for it as described in section 6.
The text, images and video you upload in order to publish it, plus scheduling information.
Log data such as IP address, browser type, pages viewed and timestamps, used for security, debugging and abuse prevention.
We also use an analytics script, Microsoft Clarity, on our website and in the TrackMedia app to analyse how people use TrackMedia and to improve it. It records how you interact with our pages — pages viewed, clicks, taps, scrolling and mouse movement — together with technical details such as your device, browser, screen size and approximate location, and it sets cookies to recognise a returning visitor. We use this to find what is confusing or broken and to decide what to build next, not for advertising. Microsoft processes this data on our behalf under the Microsoft Privacy Statement. You can block or delete these cookies in your browser settings, and TrackMedia keeps working if you do.
We also use Google Analytics on our website and in the app to measure traffic: which pages are visited, where visitors come from, and how they move between pages. It collects technical details such as your device, browser and approximate location, and sets cookies to tell visits apart. Google processes this data on our behalf under the Google Privacy Policy; we do not use it for advertising. You can opt out with the Google Analytics opt-out add-on or by blocking cookies.
We process the data above to provide the service you asked for: publishing content to accounts you connected, showing you analytics for that content, supporting you when something breaks, and keeping the service secure. We also use usage and analytics data to understand how TrackMedia is used, fix problems and improve the app. We do not sell your data. We do not use your content or your audience's data for advertising, and we do not use it to train machine learning models.
Our legal bases under UK and EU data protection law are: performing our contract with you (providing the service), our legitimate interests (keeping the service secure, and analysing and improving TrackMedia), legal obligations (such as tax and accounting records), and your consent where the law requires it.
Several platforms impose their own retention limits, and where they are stricter than ours, theirs apply.
| Data | Retention |
|---|---|
| Account and billing records | For the life of the account, then as required by tax and accounting law |
| Content you scheduled or published | For the life of the account, unless you delete it sooner |
| Access tokens | Until you disconnect the account or the token expires |
| Platform analytics | Refreshed or deleted per each platform's rules; deleted within 30 days where a platform requires it |
| Server logs | Up to 90 days |
If content is deleted on a social platform, we remove our copy of it, in every case within the window that platform requires and at most 24 hours where the platform sets that limit.
We share data only with infrastructure providers acting on our instructions — hosting, database, error monitoring, payment processing and analytics (Microsoft Clarity, Google Analytics) — and only as far as needed to run and improve the service. We may disclose data if legally compelled to. We do not sell or rent personal data to anyone.
You can have your data deleted at any time. Disconnecting a social account removes its token and the data we hold for it. Deleting your TrackMedia account removes everything associated with it. You can also email maruf@trackmedia.app and we will action it within 30 days. Full instructions, including how to request deletion without logging in, are on our Data Deletion page.
If you revoke TrackMedia's access from inside a social platform's own settings, that platform stops accepting our token. As soon as our regular token check detects this, we stop accessing the account and delete the data we hold for it, as if you had disconnected it, and we tell you in TrackMedia. You can reconnect the account at any time.
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, export it, or object to how we process it. Email maruf@trackmedia.app to exercise any of these. We respond within 30 days. If you are in the EEA or UK and are unhappy with our response, you may complain to your local data protection authority — in the UK, the Information Commissioner's Office.
Access tokens are encrypted at rest. Data is transmitted over TLS. Access to production systems is restricted to staff who need it. No system is perfectly secure, but we take this seriously and will notify you promptly if a breach affects your data.
TrackMedia is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Our infrastructure may process data outside your country. Where we transfer personal data out of the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
We will update this page when our practices change and revise the date at the top. Material changes will be notified by email or in the product before they take effect.
NQM STUDIO LTD
128 City Road, London EC1V 2NX, United Kingdom
maruf@trackmedia.app