Privacy Policy
Last updated: 23 September 2026
This Privacy Policy explains how Onshur collects, uses, shares and protects personal data when you use our website at https://onshur.net and our social media management service (together, the "Service"). Onshur is operated by CairoStack, an IT company in Egypt ("we", "us", "our"). We process personal data in line with the laws of the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020 ("Law 151/2020").
Who we are
- Operator: CairoStack
- Address: Entrance 3, Building 2, 7th Floor, Serag Mall, Madinet Nasr, Cairo, Egypt
- Phone / WhatsApp: +20 100 678 5604
- Privacy contact: privacy@onshur.net
- Company contact: contact@cairostack.com (https://cairostack.com)
Data we collect
Account data. Your name, email address, a hash of your password (never the password itself), your language preference, and, if you sign in with Google, your Google profile information (such as name, email and profile picture).
Workspace and team data. The workspaces you create or join, their members and roles, and, for agencies, the projects set up for each client.
Connected-platform data. When you connect Facebook Pages, Instagram professional accounts, Messenger, WhatsApp Business, TikTok, YouTube or LinkedIn, we receive data through each platform's official API. This includes page and account identifiers, access tokens (encrypted at rest), posts, comments, direct messages and insights.
Content you upload. Videos, images and brand documents you add to the Service, plus the captions, clips, replies and images you create with it.
Payment metadata. Your plan, billing history, invoices and the payment status and reference returned by our payment processor. We never store full card numbers.
Usage and device logs. Pages and features used, actions taken, IP address, browser and device type, and error logs, used to run, secure and improve the Service.
Transactional emails. Records of the service emails we send you (such as sign-in, billing and account notices), including delivery status.
How we use your data
We use personal data to:
- create and manage your account and workspaces;
- connect your social accounts and schedule, publish and manage posts on your behalf;
- provide AI features you choose to use;
- process payments and issue invoices;
- send transactional emails and service notices;
- provide support and respond to your requests;
- keep the Service secure, prevent abuse and fix errors;
- comply with legal obligations, including tax law.
Our legal bases are performing our contract with you, your consent (for example, when you connect a platform account or enable a feature), our legitimate interests in running a secure and reliable service, and compliance with legal obligations.
AI features
Onshur offers these AI features:
- Captions: AI writes captions based on your company's brand knowledge.
- Video clips: AI cuts long videos into short clips, with transcription.
- Reply bot: AI answers comments and direct messages.
- Poster editor: AI generates images.
To provide these features, we send the relevant content (such as prompts, brand documents, audio, or incoming messages) to the AI providers listed below. Messages processed by the reply bot are sent to AI providers solely to generate replies. We do not use customer content to train our own models. For text AI, we configure OpenRouter to exclude providers that train on prompts.
AI outputs can be inaccurate. You are responsible for reviewing content before publishing it and for any auto-replies you enable.
Platform data: Meta (Facebook, Instagram, Messenger, WhatsApp)
- We access Facebook, Instagram, Messenger and WhatsApp data only to provide the features you enable, such as publishing posts, showing insights, and reading and replying to comments and messages.
- We do not sell this data.
- Data deletion: you can delete your connected data at any time by:
- disconnecting the account in Onshur;
- deleting your Onshur account (Settings → Danger zone → Delete account); or
- emailing privacy@onshur.net.
- You can also remove the Onshur app from Facebook Settings → Apps and Websites.
See our Data Deletion page for details.
Platform data: YouTube and Google
Onshur uses YouTube API Services. By using Onshur's YouTube features, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (http://www.google.com/policies/privacy).
What YouTube data we access: your channel identifier and basic channel information, the videos you choose to publish or manage through Onshur, comments on your videos, and channel and video insights.
What we store: channel identifiers, access tokens (encrypted at rest), the posts and videos you schedule or publish through Onshur, comments, and insights, for as long as needed to provide the features you use.
What we share: we share YouTube data only with the sub-processors listed below, as needed to run the Service (for example, hosting, storage, and AI features you enable). We do not sell it.
You can revoke Onshur's access to your Google account at any time at https://security.google.com/settings/security/permissions. You can also disconnect YouTube in Onshur or delete your account, and we will delete the related data as described below.
Onshur's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Platform data: TikTok
We post content to TikTok only with your explicit consent for each post, and we respect your TikTok privacy settings.
Platform data: LinkedIn
We use LinkedIn data only to publish content and show information for the accounts you connect.
Sub-processors
We share personal data with these service providers only as needed to run the Service:
| Sub-processor | Purpose |
|---|---|
| Convex | Database and backend |
| Vercel | Web hosting |
| Cloudflare R2 | Media storage |
| Resend | Email delivery |
| Trigger.dev | Background media processing |
| OpenRouter and the AI model providers it routes to | Text AI (configured to exclude providers that train on prompts) |
| ElevenLabs | Speech-to-text |
| fal.ai and Higgsfield | Image and video generation |
| Paymob | Payments |
| Sign-in and YouTube API |
We may also disclose data if required by law or a competent authority, or to protect our rights and users' safety. We do not sell personal data.
Payments
Payments are processed by Paymob. Card details are tokenized by Paymob, and we never store full card numbers. Mobile wallets are also supported. We keep payment metadata such as the plan, amount, date, status and invoice.
International transfers
Some of our sub-processors process data outside Egypt, in the United States and the European Union. For these transfers, we rely on appropriate safeguards and, where required by Law 151/2020, on your consent.
Security
We protect data with technical and organizational measures, including encrypting access tokens at rest and restricting access to personal data. No system is fully secure, so please keep your password safe and tell us promptly at privacy@onshur.net if you suspect unauthorized access.
Retention
- Account data is kept while your account is active.
- When you delete your account, we delete your personal data within 30 days. Backups roll off within a further 60 days.
- Invoices are kept for as long as Egyptian tax law requires.
- When you disconnect a platform account, we stop accessing it and delete its connected data.
Your rights
Under Law 151/2020, you have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your data;
- object to processing;
- withdraw consent at any time, without affecting earlier processing;
- data portability, by exporting your data;
- complain to Egypt's Personal Data Protection Center.
To exercise these rights, email privacy@onshur.net. We may need to verify your identity before acting on a request.
Children
The Service is not intended for anyone under 18 or under the age of majority where they live. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or in the app before they take effect. The date at the top shows the latest version.
Contact
For privacy questions or requests, email privacy@onshur.net. For general support, email support@onshur.net. You can also reach CairoStack at +20 100 678 5604 (phone and WhatsApp) or at Entrance 3, Building 2, 7th Floor, Serag Mall, Madinet Nasr, Cairo, Egypt.

