Privacy Policy

SocialPost ("we", "us") is a social media publishing platform that lets you post content to third-party social networks from one dashboard and API. This policy explains what data we collect, why we collect it, and the choices you have. We collect only what the service needs to work — we do not sell personal data and we do not run advertising.

Account data. Your email address, name, and a securely hashed password when you register, plus plan and billing records if you subscribe.

Connected social accounts. When you connect a social network (TikTok, Instagram, Facebook, LinkedIn), we receive and store the account identifier, username/display name, and the OAuth access and refresh tokens the network issues. Tokens are used solely to publish content you request and to keep the connection alive. We never receive or store your social network passwords.

Content. The videos, photos, text, and documents you upload for publishing, and the resulting post records (status, links to published posts, errors).

Usage data. API request logs (endpoint, method, status, timestamp) tied to your account for quota enforcement and troubleshooting.

We use the data above to:

• publish, schedule, and queue content to the networks you choose;
• show you the status, history, and analytics of your posts;
• authenticate you and secure your account;
• enforce plan limits and prevent abuse;
• send transactional notifications you have enabled (e.g. publish results).

We do not use your content or social account data for advertising or profiling, and we do not sell it to anyone.

Publishing requires exchanging data with the social networks you connect. Content and captions you submit are transmitted to the selected networks via their official APIs (TikTok Content Posting API, Meta Graph API, LinkedIn API). Our use of data received from these platforms is limited to providing the publishing features you request and complies with each platform's developer terms, including TikTok's Developer Terms, the Meta Platform Terms, and the LinkedIn API Terms of Use. Each network's own privacy policy governs the data it holds about you.

We use only essential cookies: a session cookie to keep you signed in and a preference for your light/dark theme. We do not use tracking or advertising cookies.

Disconnecting a social account from the Users page deletes its stored tokens immediately. Deleting a profile deletes its posts and connected accounts. To delete your entire account and associated data, contact us via the Help Center and we will complete the deletion within 30 days. You can also revoke SocialPost's access at any time from the connected network's own security settings.

All traffic to and from SocialPost and the platform APIs is encrypted in transit (HTTPS). Passwords are stored only as salted hashes. OAuth tokens are held server-side and are never exposed to your browser or to other users.

We will update this policy as the service evolves and change the date above when we do. Questions or requests can be sent through the Help Center.