Privacy Policy

This Privacy Policy explains how IT Gateway (“we”, “us”, or “our”) — the service operated on the domain bistab.com.np — collects, uses, stores, and protects your information when you use our application and its connected social features (the “Service”).

We are committed to protecting your privacy and to handling your data transparently and lawfully. By using the Service, you agree to the practices described in this policy. We only access data that you explicitly authorize, and only to provide features you actively use.

1Information We Collect

We collect only what is necessary to operate the Service:

Data	Source	Why we collect it
Basic profile	Login Kit — user.info.basic	To identify your account and show your display name, avatar, and user ID inside the Service.
Videos you choose to send	You, via the Service — video.publish / video.upload	To upload the video you select to your own account or draft inbox.
Access & refresh tokens	OAuth	To keep you connected and perform the actions you request without asking you to log in every time.
Basic usage & technical data	Automatically	To operate, secure, and troubleshoot the Service (e.g. timestamps, error logs).

We do not collect your password, your private messages, your contacts, or any data beyond the scopes listed above.

2How We Use Your Information

• To authenticate you and display your basic profile.
• To upload or publish a video to your account only when you explicitly trigger that action.
• To operate, maintain, secure, and improve the Service.
• To respond to your support requests and comply with legal obligations.

3What We Never Do

• We never sell, rent, or trade your personal data.
• We never use your data for advertising, profiling, or to train machine-learning/AI models.
• We never post, edit, or delete content on your account without your explicit action and consent.
• We never share your data with third parties except as strictly required to run the Service or comply with the law.

4Connected Platforms & Third Parties

Our video features are provided through the platform’s Login Kit and Content Posting API. Your use of these features is also governed by the platform’s own Privacy Policy and Community Guidelines. We request the minimum scopes required:

• user.info.basic — to display your name and profile picture.
• video.publish / video.upload — to share the videos you choose to your own account.

We may rely on trusted infrastructure providers (for hosting and secure processing) who act only on our instructions and are bound to protect your data.

5Data Storage, Security & Retention

Access and refresh tokens are stored securely and used only to perform the actions you request. We apply reasonable technical and organizational safeguards to protect your information, though no method of transmission or storage is completely secure.

We retain your data only as long as needed to provide the Service. If you disconnect your account or request deletion, we remove your stored profile data and revoke/delete stored tokens within 30 days, except where retention is required by law.

6Your Rights & Choices

• Access, correct, or delete the personal data we hold about you.
• Withdraw consent or object to certain processing.
• Revoke our access at any time from your account: Settings and privacy → Security & permissions → Manage app permissions.

7Children’s Privacy

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If we learn we have, we will delete it promptly.

8International Transfers

Your information may be processed in countries other than your own. Where this happens, we take steps to ensure appropriate safeguards are in place.

9Changes to This Policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version. Material changes will be made clear on this page.

10Contact Us

Questions about this policy or your data? Reach out any time: