Privacy Policy

Last updated: July 4, 2026

1. Introduction

SchedulePost ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media scheduling and publishing service.

2. Information We Collect

Account Information

  • Email address
  • Authentication credentials (securely hashed)

Connected Social Media Accounts

  • OAuth access tokens and refresh tokens
  • Account identifiers (usernames, account IDs)
  • Token expiration information

Content Data

  • Videos you upload for publishing
  • Captions and hashtags
  • Scheduling preferences
  • Publishing history and status

ChatGPT App Data

  • Task-specific tool inputs that you explicitly ask ChatGPT to send, such as captions, media URLs, selected account IDs, and scheduling choices
  • Files you explicitly attach for uploading and publishing
  • Relevant tool results returned to ChatGPT, such as connected account names, post status, scheduled time, and publishing success or failure

SchedulePost does not request or reconstruct your full ChatGPT conversation history. It receives only the tool inputs and files selected for the action you request.

3. How We Use Your Information

We use the collected information to:

  • Authenticate you and maintain your session
  • Publish content to your connected social media accounts
  • Schedule and manage your posts
  • Display publishing statistics and history
  • Improve and optimize the Service
  • Communicate with you about your account
  • Respond to the specific SchedulePost actions you request in ChatGPT

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS/SSL
  • Access tokens are securely stored in our database
  • We use Row Level Security (RLS) to ensure users can only access their own data
  • Videos are stored temporarily and may be deleted after successful publishing

5. Third-Party Services

We integrate with the following third-party platforms:

  • YouTube - Google's YouTube Data API for publishing Shorts
  • TikTok - TikTok Content Posting API
  • Instagram - Meta's Instagram Graph API for publishing Reels
  • Facebook - Meta's Graph API for publishing authorized content
  • Threads - Meta's Threads API
  • X (Twitter) - X API v2
  • Telegram - Telegram Bot API for publishing to user-authorized destinations
  • OpenAI - transmits the tool inputs you approve to SchedulePost and receives the relevant tool result for display in ChatGPT
  • Cloud hosting and storage providers - host the service, database, and user-provided media on our behalf

Each platform has its own privacy policy. We encourage you to review them.

When you use YouTube features, Google also processes data under the Google Privacy Policy.

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only:

  • With social media platforms to publish your content (as authorized by you)
  • With OpenAI to return the result of a ChatGPT app action you requested
  • With infrastructure providers that process data on our behalf to host and secure the Service
  • When required by law or legal process
  • To protect our rights or prevent fraud

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Disconnect social media accounts at any time
  • Export your data
  • Withdraw consent for data processing

8. Deleting Stored Data and Revoking Access

If you want SchedulePost to stop accessing your YouTube or Google data, first disconnect the YouTube account inside the app.

You can also revoke SchedulePost's access at any time from Google's security settings page: Google security settings.

To request deletion of stored YouTube-authorized data, email [email protected]. We will delete the associated stored connected-account data within 30 days unless we must retain limited records for legal or fraud-prevention reasons.

9. Data Retention

Account data, connected-account tokens, post records, and uploaded media are retained while your account is active so the Service can publish, schedule, and show post history. Disconnecting a social account removes SchedulePost's ongoing access to that platform. When you delete your account or submit a verified deletion request, we delete associated personal data and stored media within 30 days, except where limited retention is required by law, security, or fraud-prevention obligations.

10. Cookies and Tracking

We use essential cookies and local storage for authentication and session management. We do not use tracking cookies for advertising purposes.

11. Children's Privacy

The Service is not intended for children under 13 (or under 16 in some jurisdictions). We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].