How we keep your accounts and data safe: the technical detail
Godswill Iyke Dave2 min read
Your channels, Pages and ad accounts are your business. Optiq Studio Enterprise is built so that we can work on them without ever owning them, and so that you can see and withdraw every permission.
Signing in to platforms
- Only each platform's own sign-in: Google's OAuth with PKCE, Facebook Login for Business, TikTok's Login Kit. We never see or ask for a password.
- Only the permissions we use. Platforms review apps that ask for more, and so should you.
- One grant per channel or account, each listed in your dashboard, each revocable on the platform or with us.
What we hold, and how
- Refresh tokens are sealed with AES-256-GCM, each tagged with the key that sealed it so keys can be rotated. Access tokens live only in memory, for minutes.
- Secrets are stored as hashes. Invitation links, sessions and API keys are kept as SHA-256 hashes and compared in constant time, so a copy of the database is not a key to anything.
- Meta calls carry an app secret proof, so a leaked token is useless without our app's secret.
- Platform credentials are entered once, sealed, and never sent back to a browser; only whether they are set, and their last four characters, are ever shown.
Who can do what
| Side | Roles | What they can do |
|---|---|---|
| Your company | Owner, admin, billing, viewer | Owners and admins manage people and connections; billing sees and pays; viewers watch |
| Our team | Director, admin, finance, manager | Each person sees only the companies assigned to them; money only by finance and above |
Invitations expire, can be withdrawn, and are single-use. Nothing is posted without an approval, recorded with who gave it and when. Every action, by anyone, is written to an audit log.
Data rules we follow
- Audiences are kept only as groups, never as people.
- Each company's platform data is used for that company alone, as Google's, Meta's and TikTok's developer terms require.
- YouTube statistics are kept only while access is re-confirmed every 30 days.
- Meta's data deletion requests are honoured automatically.
Leaving cleanly
Disconnect an account and its grant is revoked and scheduled for deletion. Close your company and the same happens to everything it connected, on a date you can see. Your channels, Pages, ad accounts and audiences were always yours, and they stay exactly where they were. Your accounts stay yours.
