Privacy Policy
Last updated: February 16, 2026
This Privacy Policy explains how Post Studio ("Post Studio", "we", "our", or "us") collects, uses, stores, and shares information when you use our service to create and publish content to third-party platforms including Facebook Pages, Instagram, X, TikTok, and YouTube.
1. Information we collect
- Account details, such as email address, display name, and encrypted password.
- Connected account data, such as provider account identifiers, display names, and granted OAuth scopes.
- Access credentials for connected providers (access and refresh tokens), which are encrypted at rest.
- Content data you submit for publishing, including captions, media URLs, targeting selections, and platform publishing options.
- Operational data, such as publish attempt results, error logs, and timestamps needed to operate and secure the service.
2. How we use information
- To create and manage your account.
- To connect, maintain, refresh, and revoke third-party platform connections.
- To submit content to the platforms you choose.
- To troubleshoot failures, prevent abuse, and improve reliability.
- To comply with legal obligations and enforce our Terms of Service.
3. Legal basis and consent
By creating an account, you acknowledge this Privacy Policy and consent to processing required to provide the service. You may revoke provider permissions at any time in the platform settings and disconnect accounts within Post Studio.
4. Third-party platforms and APIs
Post Studio uses official APIs from Meta (Facebook and Instagram), X, TikTok, and Google/YouTube. Your use of those platforms is also governed by their own terms and privacy policies. We only access data necessary to provide requested publishing features and account management functionality.
We do not control how third-party platforms process content once published. Review each platform's settings and policies for retention, moderation, and audience controls.
5. Data storage and security
- Provider tokens are encrypted at rest and never intentionally exposed to clients.
- We use authenticated sessions for account access.
- We apply reasonable technical and organizational safeguards, but no method of storage or transmission is fully secure.
6. Data sharing
We share data with service providers and API platforms only as needed to deliver the service (for example, cloud hosting, storage, authentication, and social publishing APIs). We do not sell personal information.
7. Data retention
We retain account and publishing records while your account is active and as necessary for security, fraud prevention, legal compliance, and dispute resolution. You may request account deletion, subject to lawful retention requirements.
8. Your rights and choices
- Access, update, or correct your account information.
- Disconnect social providers to stop future API access.
- Request deletion of your account and associated data.
Depending on your location, additional privacy rights may apply under applicable law.
9. Children's privacy
Post Studio is not directed to children and is not intended for users under the age of 13 (or the applicable minimum age in your jurisdiction). Do not use the service if you do not meet age requirements.
10. International data transfers
Data may be processed in countries other than your own where our providers operate. By using the service, you acknowledge such transfers, subject to applicable safeguards.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date. Continued use of the service after changes become effective indicates acceptance of the updated policy.