1. Introduction

SchedulePost ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media scheduling and publishing service.

2. Information We Collect

Account Information

Email address
Authentication credentials (securely hashed)

Connected Social Media Accounts

OAuth access tokens and refresh tokens
Account identifiers (usernames, account IDs)
Token expiration information

Content Data

Videos you upload for publishing
Captions and hashtags
Scheduling preferences
Publishing history and status

3. How We Use Your Information

We use the collected information to:

Authenticate you and maintain your session
Publish content to your connected social media accounts
Schedule and manage your posts
Display publishing statistics and history
Improve and optimize the Service
Communicate with you about your account

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit using TLS/SSL
Access tokens are securely stored in our database
We use Row Level Security (RLS) to ensure users can only access their own data
Videos are stored temporarily and may be deleted after successful publishing

5. Third-Party Services

We integrate with the following third-party platforms:

YouTube - Google's YouTube Data API for publishing Shorts
TikTok - TikTok Content Posting API
Instagram - Meta's Instagram Graph API for publishing Reels
Threads - Meta's Threads API
X (Twitter) - X API v2

Each platform has its own privacy policy. We encourage you to review them.

When you use YouTube features, Google also processes data under the Google Privacy Policy.

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only:

With social media platforms to publish your content (as authorized by you)
When required by law or legal process
To protect our rights or prevent fraud

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Disconnect social media accounts at any time
Export your data
Withdraw consent for data processing

8. Deleting Stored Data and Revoking Access

If you want SchedulePost to stop accessing your YouTube or Google data, first disconnect the YouTube account inside the app.

You can also revoke SchedulePost's access at any time from Google's security settings page: Google security settings.

To request deletion of stored YouTube-authorized data, email support@fulinlabs.com. We will delete the associated stored connected-account data within 30 days unless we must retain limited records for legal or fraud-prevention reasons.

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law. Uploaded videos may be deleted immediately after successful publishing or upon your request.

10. Cookies and Tracking

We use essential cookies and local storage for authentication and session management. We do not use tracking cookies for advertising purposes.

11. Children's Privacy

The Service is not intended for children under 13 (or under 16 in some jurisdictions). We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@fulinlabs.com.