Connected Platforms

• Least privilege. We request only the permissions the features you use need. Where a platform offers a broader scope and a narrower one that suffices, we take the narrower.
• Your data is not the product. We do not sell platform data, do not use it for advertising, and do not use it to train machine-learning models.
• Tokens are encrypted at rest with AES-256-GCM and are never sent to your browser or exposed through our API.
• You can disconnect at any time. Disconnecting deletes the stored token immediately. See Data Deletion.
• Each platform’s own terms still apply. Connecting a platform through Alnara does not replace your agreement with that platform.

Alnara’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: we use Google user data only to provide the features you have asked for, we do not transfer it except as necessary to provide those features or where required by law, we do not use it for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and de-identified.

By using Alnara’s YouTube features you also agree to the YouTube Terms of Service, and the Google Privacy Policy describes how Google handles your data. You can revoke Alnara’s access to your Google account at any time from the Google security settings page.

Publish and schedule posts as yourself or as a company page you administer, and read back the comments on page posts.

Permissions we request

• Identify you and show whose account is connected — openid, profile, email
• Publish and schedule posts as you — w_member_social
• Publish as a company page you administer, and read its comments — w_organization_social, r_organization_social
• List the pages you administer, and your role on each, so publishing can be blocked where your role does not allow it — rw_organization_admin

What we store. Your member URN, name, profile picture URL and email; for each connected page, its organization URN, name, logo URL and your role on it. The access token is encrypted at rest.

The organization permissions are only requested where this installation has been approved for LinkedIn’s Community Management API. A company page holds no token of its own — it is published to with the administrator’s.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Settings → Data privacy → Permitted services.

Manage the Pages you administer: publish and schedule posts, photos, videos, reels and stories; read, reply to, hide and delete comments; read and answer Page messages; and see Page insights. Separately, create Facebook fundraisers for a charity and follow their donations.

Permissions we request

• Identify you and show whose account is connected — public_profile
• List the Pages you manage, including Pages you manage through a business portfolio, so you can choose which to connect — pages_show_list, business_management
• Publish and schedule posts to those Pages, and show them with their reactions — pages_manage_posts, pages_read_engagement
• Read the comments on those Pages, and reply to, hide or delete them — pages_read_user_content, pages_manage_engagement
• Read a Page’s Messenger conversations, shown next to its posts, and send the replies you write there as the Page. A reply goes only when you press Send: within 24 hours of the person’s last message, or up to 7 days after it as a reply you write yourself (Messenger’s Human Agent tag). Alnara sends no automated or promotional messages. — pages_messaging
• Get notified of new comments and messages on a connected Page — pages_manage_metadata
• Show a Page’s reach and engagement figures — read_insights
• Only if you turn fundraisers on, with a separate Facebook sign-in that asks for nothing else: create fundraisers for a charity as you, follow how much each has raised and its donations, change its title, story, goal or end date, and end it. A fundraiser is created only when you press Create. A donation shows its amount, time and payment ID; Facebook shares no donor’s name, and Alnara asks for none. — manage_fundraisers

What we store. Your user ID and name; for each connected Page, its ID, name, picture, your role on it and its Page access token; and, for a new comment or message, a notification holding its first words. Posts, comments, messages and insights are read from Facebook when you open them and kept for at most ten minutes. Replies you send stay in the Page’s Messenger conversation; Alnara keeps no copy. If you turn fundraisers on: that sign-in’s access token, your user ID, name and profile picture; and, for each fundraiser created in Alnara, its Facebook ID, the charity’s Page ID and the name you gave it, and its title, story, goal, currency and end date. If you tick “Share my name and email” for a fundraiser, a copy of your Alnara name and email from that moment is kept with it, and given to that charity when it asks for the people who raised money for it — to no one else. Fundraising totals and donations are read from Facebook when you open them and kept for at most two minutes; a new donation’s notification holds its amount. The access token is encrypted at rest.

Fundraisers have their own Facebook login configuration, so connecting a Page never asks for manage_fundraisers. Turning fundraisers off in Alnara revokes manage_fundraisers at Facebook and deletes the token and Alnara’s records of the fundraisers made with it; the fundraisers themselves stay on Facebook until you end or delete them there. Removing Alnara in Facebook, or asking Facebook to delete your data, deletes them the same way.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Settings → Apps and Websites.

Publish and schedule posts, carousels, reels and stories to an Instagram professional (Business or Creator) account, with Instagram’s “Paid partnership” label when you ask for it; read, reply to, hide and delete its comments; read and answer its direct messages; see its insights; and, for a brand, keep its list of approved creators.

Permissions we request

• Read the account’s profile and media — instagram_basic, instagram_business_basic
• Publish and schedule images, carousels, reels and stories — through a Facebook Page, a post or reel may carry the “Paid partnership” label and name up to two brands — instagram_content_publish, instagram_business_content_publish
• Read comments, and reply to, hide or delete them — instagram_manage_comments, instagram_business_manage_comments
• Show the account’s reach and engagement figures. Through a Facebook Page, also look up a public Business or Creator account by the username you type (Business Discovery), to name it as a brand partner on a post or approve it as a creator — instagram_manage_insights, instagram_business_manage_insights
• Read the account’s direct message conversations, shown next to its posts, and send the replies you write there as the account. A reply goes only when you press Send: within 24 hours of the person’s last message, or up to 7 days after it as a reply you write yourself (Instagram’s Human Agent tag). Alnara sends no automated or promotional messages and never starts a conversation — instagram_manage_messages, instagram_business_manage_messages
• For a brand account connected through a Facebook Page: keep its list of creators approved to name it in Instagram’s “Paid partnership” label — add a creator by username, see whether each one is on the list, and remove one. Only when you press the button; Alnara creates, boosts, pays for and manages no ads — instagram_branded_content_brand
• On a post you published from Alnara with the “Paid partnership” label, allow or withdraw a brand it names to boost it (Instagram’s “Allow brand partner to boost”), only when you flip the switch. The brand does any promoting from its own ad account; Alnara creates, runs and pays for no ads — instagram_branded_content_creator

What we store. The Instagram account ID, username and profile picture; the publishing IDs of what you post through Alnara; and, for a new comment, mention or message, a notification holding its first words. Messages are read from Instagram when you open them and kept for at most ten minutes; replies you send stay in the Instagram conversation, and Alnara keeps no copy. Signed in with Instagram, the account’s access token too. For a post with the “Paid partnership” label, the usernames and Instagram IDs of the brands it names. For a brand account, each creator approved from Alnara: their Instagram ID, username, name and picture address, who added them and when, and Instagram’s last answer about whether they are on the list — kept until they are removed. When you allow or withdraw a brand’s permission to boost a post, that choice and when, on the post. The access token is encrypted at rest.

An Instagram account connects one of two ways. Through the Facebook Page it is linked to, Alnara uses the instagram_* permissions of your Facebook sign-in, and revoking Facebook revokes Instagram with it. With Instagram’s own login, Alnara uses the instagram_business_* permissions, which you revoke in Instagram under Settings → Apps and websites.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Facebook Settings → Apps and Websites.

Send and receive messages through a WhatsApp Business number you own.

Permissions we request

• Send and receive messages on your business number — whatsapp_business_messaging
• Find your WhatsApp Business accounts and their numbers, read their message templates, and have their messages delivered to Alnara — whatsapp_business_management, business_management

What we store. Your Facebook sign-in’s access token, encrypted; the IDs of your WhatsApp Business account and numbers; and each conversation — the person’s WhatsApp name, number or WhatsApp user ID, and the messages sent and received through Alnara. Photos and files stay with WhatsApp: Alnara keeps only their IDs, and WhatsApp deletes what people send after 7 days. The access token is encrypted at rest.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Meta Business Settings → Apps.

Connect a Google account to read and write calendar events and contacts.

Permissions we request

• Identify you and show whose account is connected — openid, email, profile
• Show and create calendar events for scheduled publishing — https://www.googleapis.com/auth/calendar
• Read contacts for addressing messages — https://www.googleapis.com/auth/contacts

What we store. Your Google account ID, name, email and picture. The access token is encrypted at rest.

Alnara requests no Gmail or Drive permission of any kind.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Google Account → Third-party apps with account access.

Upload videos and Shorts to a channel you own, read and answer its comments, read its analytics, and see when it goes live.

Permissions we request

• Read the channel and its videos, upload videos and thumbnails, read, answer and moderate comments, and see when the channel is live — https://www.googleapis.com/auth/youtube.force-ssl
• Show the channel’s analytics: views, watch time, subscribers and top videos — https://www.googleapis.com/auth/yt-analytics.readonly

What we store. The sign-in’s tokens, encrypted; the channel’s ID, name, handle, picture, country and counts, refreshed whenever you open it; and, for each upload started through Alnara, its title, description, tags, settings, file name and size, and YouTube’s video ID. Your video files go from your browser straight to YouTube and never reach Alnara’s servers. Comments and analytics are read from YouTube when you look at them and not kept. The access token is encrypted at rest.

Each YouTube channel is a sign-in of its own, separate from the Google connection. Disconnecting a channel in Alnara revokes Alnara’s access at Google.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Google Account → Third-party apps with account access.

Post videos and photos to your TikTok account now or at a time you pick, send them to the TikTok app as drafts, and — for a Business account — read and answer its direct messages.

Permissions we request

• Identify you and show whose account is connected — user.info.basic, user.info.profile
• Show your follower, like and video counts on your connected account — user.info.stats
• List your public videos with their views, likes, comments and shares — video.list
• Post videos and photos to your profile, with the privacy and settings you choose for each post — video.publish
• Send videos and photos to your TikTok inbox as drafts, to finish and post in TikTok — video.upload
• Business accounts: identify the account and confirm it is a Business account — user.info.basic, user.info.username, user.account.type
• Business accounts: read your direct messages and answer them — message.list.read, message.list.send, message.list.manage

What we store. Your TikTok account’s ID, display name, username and avatar; the posts you send through Alnara and TikTok’s id for each; and, for a Business account, the direct-message conversations Alnara receives — deleted when you disconnect the account. The access token is encrypted at rest.

Posting and messages are two separate sign-ins, because TikTok runs them as two developer platforms. Alnara posts only what you publish or schedule, with the privacy you choose, never adds a watermark, and cannot delete a TikTok post — TikTok offers apps no way to.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: TikTok Settings and privacy → Security and permissions → Apps and services.

Post and schedule to your Threads account, answer and moderate the replies to your posts and the posts that mention you, and see your Threads insights — next to your other accounts.

Permissions we request

• Show whose Threads account is connected — its username, name, profile picture, bio and verified badge — and list the posts that account has made, with their text, picture, time and link — threads_basic
• Publish the posts you write or schedule in Alnara — text, photos, videos, carousels, polls and multi-part threads — with the reply settings and topic you pick — threads_content_publish
• Delete from Threads a post Alnara published, only when you remove it in Alnara and choose to delete it on Threads too — threads_delete
• Show the replies to your posts, so you can read the conversation in Alnara — threads_read_replies
• Answer replies, hide or unhide them, and approve or ignore the replies waiting for your approval — threads_manage_replies
• Show the posts that mention you, and tell you when there is a new one — threads_manage_mentions
• Show your account’s and your posts’ insights — views, likes, replies, reposts, quotes, link clicks and followers — threads_manage_insights
• Search public Threads posts by keyword or topic tag, when you run a search — threads_keyword_search
• Look up a public Threads profile and its posts by username, when you ask for it — threads_profile_discovery
• Search Threads’ places when you type one, and tag the place you pick on your post; Alnara keeps only that place, on that post — threads_location_tagging
• Share a post you publish to your linked Instagram account’s story, when you ask — threads_share_to_instagram

What we store. Your Threads user ID, username, name, profile picture URL, bio and whether the account is verified; the posts you publish or schedule through Alnara and Threads’ id for each; the IDs of the replies and mentions Alnara has told you about, for 30 days; and a count of the searches and profile lookups Alnara ran for the account in the last 24 hours, to show you Threads’ daily limits. Your posts, replies, mentions, insights, search results and other profiles are read from Threads when you open them and are not stored. Disconnecting deletes all of it. The access token is encrypted at rest.

Threads offers apps no direct messages, so Alnara has no Threads inbox. What Alnara reads from Threads is shown only to the person who connected the account. The sign-in lasts 60 days and Alnara renews it before it runs out; removing Alnara in Threads, or asking Meta to delete your data, deletes the connection here.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Threads → Settings → Account → Website permissions → Active → Remove.

Post to and moderate channels on a server where the Alnara bot has been invited.

Permissions we request

• Identify you and show whose account is connected — identify, email
• List the servers you belong to so you can choose which to manage — guilds

What we store. Your Discord user ID, username and avatar; for each connected server, its ID, name and icon. The access token is encrypted at rest.

Signing in identifies you but cannot post. Sending messages requires separately inviting the Alnara bot to the server, which somebody with Manage Server must do — the connection is a pair, and removing either half stops it.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: User Settings → Authorized Apps.

Post and schedule announcements to channels you choose, see mentions, direct messages and replies to your posts in one inbox, and manage those channels.

Permissions we request

• Post, edit and delete Alnara’s own messages, and schedule them — chat:write
• Post to a public channel you pick without joining it first — chat:write.public
• Post under a name and icon you set for a post — chat:write.customize
• List channels so you can choose where to post — channels:read, groups:read
• Join a public channel when you ask Alnara to — channels:join
• Create, rename and archive channels, and invite or remove people, when you ask — channels:manage, groups:write, channels:write.invites, channels:write.topic
• Show people’s names and avatars in threads and pickers — users:read
• Show the workspace’s name, domain and icon — team:read
• Receive mentions of @Alnara and direct messages to it for your inbox — app_mentions:read, im:history
• Receive replies under Alnara’s posts in channels Alnara is in — other messages are ignored, never stored — channels:history, groups:history
• Count and add reactions on Alnara’s posts — reactions:read, reactions:write
• Pin posts and add channel bookmarks when you ask — pins:read, pins:write, bookmarks:read, bookmarks:write
• Upload the files you attach to a post — files:write
• Recognise Alnara’s own posts, so a post is never sent twice — metadata.message:read
• The /alnara command inside Slack — commands

What we store. The workspace ID, name, domain and plan; the channels Alnara can see; and only the messages Alnara needs — its own posts, replies under them, mentions and direct messages — deleted after 90 days, or within a day of Alnara being removed from the workspace. The access token is encrypted at rest.

Alnara posts as the Alnara app. It can only see channels it has been added to, it does not copy your workspace’s history, and a workspace admin can remove it at any time. Slack message content is never used to train any model.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Slack → Manage apps → Alnara → Remove.

Give your Twitch channel a chat bot run from Alnara — commands, spam filters, quotes, counters, giveaways and timed messages — and hear its chat, follows, subscriptions, cheers, raids and channel point redemptions as they happen, for the bot, your automations and your stream alerts.

Permissions we request

• Read chat — user:read:chat
• Write in chat — user:write:chat
• Act as a chat bot — user:bot
• Let Alnara’s bot into your chat — channel:bot
• Hear new followers and answer !followage — moderator:read:followers
• Hear subscriptions and gifts — channel:read:subscriptions
• Hear cheers — bits:read
• Hear channel point redemptions — channel:read:redemptions
• Time out and ban people — moderator:manage:banned_users
• Delete chat messages — moderator:manage:chat_messages
• Change the chat’s modes — moderator:manage:chat_settings
• Send shoutouts — moderator:manage:shoutouts
• Post announcements — moderator:manage:announcements
• Change the title and category — channel:manage:broadcast
• Hear hype trains — channel:read:hype_train
• Hear charity donations — channel:read:charity
• See and hear ad breaks — channel:read:ads
• Run ad breaks — channel:edit:commercial
• Snooze ad breaks — channel:manage:ads
• Hear polls — channel:read:polls
• Hear predictions — channel:read:predictions
• Hear goals — channel:read:goals

What we store. Your Twitch user ID, login name, display name and profile picture URL; the channel’s title, category, whether it is live and its viewer count, as Alnara last read them; which of Twitch’s events the channel is subscribed to and when Twitch last sent one. The bot keeps its commands, quotes, counters and giveaways, and who has chatted in the channel (someone not seen for a year is forgotten), while the channel is connected; its log of what it did, for 14 days. Chat messages are read as they arrive and not stored. Disconnecting deletes all of it. Alnara’s own bot account grants user:bot, user:read:chat, user:write:chat once; no token of it is kept. The access token is encrypted at rest.

Alnara reaches only the channels you sign in as, and shows what it reads only to the person who connected them. The bot speaks in a channel only while its owner has it switched on, as the account they choose — Alnara’s bot (with Twitch’s Chat Bot badge), the channel itself, or another account of theirs. It moderates as the channel, so no one has to make Alnara a moderator. Twitch’s events reach Alnara over Twitch’s own EventSub connection, opened by Alnara.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: Settings → Connections → Other Connections.

Run your Kick channel from Alnara: its live dashboard and viewer count, title, category and tags, the chat with moderation, follows, subscriptions, gifts and KICKs, channel rewards and their redemptions — and, if you set it up, a post in your Discord the moment you go live.

Permissions we request

• See who the account is — user:read
• Read the channel — channel:read
• Change the title, category and tags — channel:write
• Write in chat — chat:write
• Hear chat, follows, subscriptions and going live as they happen — events:subscribe
• Ban and time out people — moderation:ban
• Delete chat messages — moderation:chat_message:manage
• Read the KICKs leaderboard — kicks:read
• Read channel rewards — channel:rewards:read
• Manage channel rewards and redemptions — channel:rewards:write
• Show the stream key — streamkey:read

What we store. Your Kick user ID, username, channel address and profile picture URL; the channel’s title, category, whether it is live and its viewer count, as Alnara last read them; the chat messages Kick sends for the channel, for 30 days; follows, subscriptions, gifts, KICKs, bans and reward redemptions, for 180 days; and each stream’s start, end and the viewer counts Alnara read during it, for 365 days. The stream key is shown when you ask for it and never stored. Rewards are read from Kick when you open them and are not stored. The bot keeps its commands, quotes, counters and giveaways, and who has chatted in the channel (someone not seen for a year is forgotten), while the channel is connected; its log of what it did, for 14 days. Disconnecting deletes all of it and revokes Alnara’s tokens at Kick. The access token is encrypted at rest.

Alnara reaches only the channels you sign in as, and shows what it reads only to the person who connected them. Kick gives apps a viewer count, not who is watching. Kick’s live events reach Alnara signed by Kick and are checked before anything is kept. A post in Discord when you go live is an automation you make, for the channels you choose, and can be switched off or deleted at any time.

How to revoke. Disconnect it in Alnara under Connections, and revoke at the platform itself: kick.com → Settings.

Send and receive messages through a Telegram bot you create and control.

Permissions we request

• Everything the bot can do is decided by Telegram and by you, not by a permission we request

What we store. The bot token you paste (encrypted), the bot’s ID and username, and the chats and messages it handles. The access token is encrypted at rest.

Telegram has no OAuth and no sign-in screen. You create a bot with @BotFather and paste its token, so no Telegram account of yours is ever authorized — the bot is the whole connection. Use /revoke in @BotFather to invalidate the token.

How to revoke. Remove it in Alnara under Connections. See Data Deletion for the platform-side step.

Join channels on an IRC network and read and send messages.

Permissions we request

• None — IRC has no authorization step

What we store. The server address, port, nickname and password you supply (encrypted), and the messages exchanged. The access token is encrypted at rest.

An IRC connection is a plain server credential you give us, not a grant from a third party. Deleting it in Alnara is the entire revocation.

How to revoke. Remove it in Alnara under Connections. See Data Deletion for the platform-side step.

If a permission listed here is not clear, or you believe we are requesting something we do not need, write to [email protected]. We treat over-broad permissions as a bug.