Privacy Policy

Who we are

Ninecast, operated by System Magic Studio Ltd (“we”), provides a widget that previews and publishes social media content planned in Notion. This policy explains what we collect, why, and what we do with it.

What we collect

• Your account. Email address, and a display name and avatar if your sign-in provider supplies them.
• Your Notion connection. An access token issued by Notion when you authorise us, plus the content of the database pages you explicitly choose to share: titles, dates, captions, status values and attached files.
• Your social accounts. When you link one, the access token that platform issues, your account id, username and profile picture.
• Your media. Copies of the images and videos attached to the rows you share, because platform APIs cannot accept Notion’s temporary file links.
• Operational records. Sync and publishing activity, and error reports, so we can tell you why something failed.

What we do not collect

We do not read Notion pages you have not shared with us. We do not read your social media messages, followers or private data beyond what is needed to publish. We never see or store your passwords for any service, and we do not sell data to anyone.

How we use it

Solely to run the service you asked for: rendering your grid, publishing posts you have scheduled or requested, writing a published link back to your database when you have mapped that column, and contacting you about your account.

How it is protected

Every access token is encrypted at rest with AES-256-GCM before it reaches our database, and decrypted only inside the process that publishes on your behalf. Traffic is encrypted in transit. Your embed link is a random credential you can rotate at any time, which immediately invalidates the old one.

Who else is involved

We use infrastructure providers to run the service: Vercel (hosting), Supabase (database and file storage), and the social platforms you choose to connect. They process data on our instructions. We do not share your data with anyone else.

How long we keep it

For as long as your account is open. Disconnecting Notion or a social account deletes the relevant tokens immediately. Deleting your account removes your planners, mirrored media and connection records within 30 days.

Your rights

You can request a copy of your data, correct it, or have it deleted, by emailing us. You can revoke our access at any time from Notion’s connections settings or the relevant platform’s app settings, without contacting us at all.

Deleting your data

Email support@systemmagicstudio.com from your account address with the subject “Delete my data”. We confirm within 7 days and complete deletion within 30.

Contact

support@systemmagicstudio.com