Privacy Policy
Last updated 10 October 2026.
Isharo is a social media service: we make posts for businesses, each business approves them in its own Isharo console, and Isharo publishes the approved posts to the business's own social media accounts and shows how they did. This policy explains what data Isharo handles, why, who it's shared with, how long it's kept, and how to have it deleted.
Who we are
Isharo is provided by Elden Studios Company, Commercial Registration No. 7051824170, King Abdulaziz ibn Abdulaziz Saud Branch Street, Riyadh, Kingdom of Saudi Arabia ("Elden Studios", "we", "us"). Website: elden-studios.com. Contact for anything in this policy: bazerbashi@elden-studios.com.
What we collect
If you join the waitlist: your email address, your business or brand name, and the platforms you tick.
If you use the Isharo console:
- Your email address, which you sign in with. Sign-in codes are sent and checked by Cloudflare Access, which keeps you signed in with a cookie on our domain.
- What you do in the console: approvals, posts sent back with notes, schedule changes, notes to the studio and requests, each recorded with who did it and when, so the history of every post is clear.
- The content you give us or approve: photos, videos, captions, brand details (words, colours, faces you choose, your plan) and the posts we make from them.
If you connect a social media account (Instagram, Facebook, Threads, TikTok, and when available X or YouTube), we receive from that platform, with your permission:
- The account's name and ID, and for Facebook the Page you choose.
- An access token that lets Isharo publish for you. We store it encrypted, and use it only for your account.
- For the posts Isharo publishes: their IDs, and their results (reach, views, likes, comment counts, saves, shares, profile visits and, for videos, watch time).
We don't collect your social media password, your followers' personal details, or anything from accounts you haven't connected.
How we use it
- To make your posts, show them to you for approval, and publish only the ones you approve, at the time you chose.
- To show you how your posts did, and to plan better posts with you.
- To let the people you invite use your brand's console, and nobody else.
- To write to you about your account, or, for the waitlist, about a place on Isharo.
- To keep Isharo secure and working: preventing abuse, fixing problems.
We don't sell your data, use it for advertising, or share one business's data with another. Data we receive from Instagram, Facebook or any other platform is used only to provide Isharo to the business it belongs to.
Who we share it with
Only the services Isharo runs on, each for its part of the service:
- Cloudflare: hosting, the database, file storage, sign-in (Cloudflare Access) and protection against abuse.
- The platforms you connect (Meta for Instagram, Facebook and Threads, TikTok, and X or Google for YouTube when you connect them): to publish your approved posts and read their results.
- AI services we use to help make posts: currently Anthropic (Claude) to help plan, write and check posts, and fal.ai to generate video only when a post uses generated video. They receive only what's needed to make your posts.
We may also disclose data if the law requires it. If any of these services change, we'll update this page.
How long we keep it
- While you're a client: your posts, their history and results, and your brand's details, so the console can show them.
- When you disconnect an account: its access token is deleted at once. You can disconnect any account on the Accounts page.
- When you stop using Isharo, or ask us to: we delete your brand and everything in it (posts, files, results, notes, connected accounts and the people invited) within 30 days.
- Waitlist details: until you ask us to remove them, or until you become a client.
- Backups: copies kept to protect against mistakes are deleted within 90 days.
How we protect it
Isharo runs over encrypted connections only. Access tokens for your social accounts are encrypted before they're stored. Each business sees only its own brand: this is enforced by Isharo's servers, not just its screens. Signing in needs a one-time code sent to your email.
Your choices
You can ask us for a copy of your data, to correct it, or to delete it, by writing to bazerbashi@elden-studios.com. You can disconnect any social account at any time on the Accounts page, or from the platform itself.
How to delete your data
To have Isharo delete your data, including everything we received from Facebook or Instagram:
- Email bazerbashi@elden-studios.com with the subject "Delete my Isharo data", from the email you use with Isharo, and the name of your business.
- We confirm, then delete your brand and everything in it within 30 days, and reply when it's done.
You can also remove Isharo's access from Facebook yourself: in Facebook, go to Settings & privacy → Settings → Business integrations, choose Isharo, then Remove. Isharo then stops publishing to your accounts, and you can ask us to delete the rest as above.
Children
Isharo is a service for businesses. It isn't meant for anyone under 18, and we don't knowingly collect children's data.
Changes to this policy
If we change this policy, we'll update this page and its date. If a change matters for how we use your data, we'll tell clients by email before it applies.