Privacy Policy

We collect information directly from you when you register, as well as automatically through connected third-party platforms via OAuth protocols.

A. Information You Provide to Us Directly

• Account Credentials: When you register, we collect your name, email address, profile picture, and account password.
• Support Communications: Any information you provide when contacting customer support or providing feedback.

B. Information Collected from Connected Third-Party Platforms

When you connect your social media profiles (Facebook, Instagram, YouTube, TikTok) via OAuth, we request access to specific scopes to operate the Service. We collect:

• Account & Profile Identifiers: User ID, profile name, profile photo, and associated Page or Channel IDs.
• OAuth Access Tokens: Secure tokens required to maintain API connectivity and publish on your behalf.
• Media Content & Metadata: Captions, video files, post titles, thumbnails, view/like counts, publish dates, and permalinks retrieved from your connected accounts for previewing and queueing in the Import dashboard.

C. Automatically Collected Usage Data

• Log & Device Data: IP address, browser type, operating system, timestamp of requests, and referring URLs.

We use the collected information strictly for the following operational purposes:

• Operating the Service: To authenticate your identity, fetch your content across connected accounts, render previews, and publish/schedule posts to your selected social platforms.
• Account Management: To maintain your account session, send security alerts, and respond to support inquiries.
• Service Improvement: To analyze usage patterns, fix technical bugs, and optimize app performance.

We do NOT sell, rent, or trade your personal information or connected social media data to third parties, data brokers, or advertisers.

Where data protection law requires a legal basis, we rely on the following:

• Performance of a contract: to create and maintain your account, connect your social profiles, and publish or schedule content you request.
• Legitimate interests: to secure the Service, prevent fraud and abuse, and improve product performance and reliability.
• Consent: for optional analytics or marketing communications, and for the specific permissions you grant through each platform's OAuth consent screen. You may withdraw consent at any time.
• Legal obligation: to meet accounting, tax and other legal requirements, including those arising from purchases processed by our Merchant of Record.

We do not sell your data. We share personal data only with the following categories of recipients:

• Paddle (Merchant of Record): All purchases and subscriptions are sold and processed by Paddle.com, which acts as the reseller and Merchant of Record for our orders. Paddle handles checkout, payment processing, subscription management, tax compliance, invoicing, billing support and refunds, and processes your billing data (name, email, billing address, payment method details and transaction history) as an independent controller under its own Privacy Notice. We receive only limited order and subscription status information from Paddle; we never receive or store full card details.
• Service providers / subprocessors: hosting, database, storage, email and analytics providers that process data on our behalf under contract.
• Connected social platforms: Meta, Google/YouTube, TikTok and Threads, to the extent needed to fetch and publish the content you request.
• Professional advisers and authorities: legal and accounting advisers, and public authorities where required by law.

Some of these recipients may process data outside your country. Where data leaves the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Our Service connects directly with third-party platforms via official developer APIs. Your interactions with these features are governed by the respective platform policies:

A. Google & YouTube API Services

• YouTube Data Usage: Reposting uses YouTube API Services to read channel uploads and fetch video metadata. By using YouTube functionality in Reposting, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
• Revoking YouTube Access: You can disconnect your YouTube account at any time in Reposting settings, or revoke Reposting's permissions directly via the Google Security Settings Page.

B. Meta (Facebook & Instagram API)

Data accessed through Meta Graph APIs is used solely to fetch Page/Instagram feeds, display post metrics, and execute post scheduling. We comply strictly with Meta's Developer Policies and Data Processing Terms.

C. TikTok API

Data collected via TikTok Developer tools (Direct Post / Login Kit) is used solely to authenticate your profile and transfer requested video media.

• Storage: OAuth access tokens and account credentials are stored in encrypted databases using industry-standard AES encryption.
• Retention: We retain your account data and tokens only for as long as your account remains active or as necessary to provide you with the Service.
• Data Deletion: When you disconnect a social media account, all associated access tokens and cached media metadata are immediately deleted from our servers.

You have full control over your personal data:

• Disconnecting Platforms: You can remove any connected social account (Facebook, Instagram, YouTube, TikTok) at any time through the Accounts tab in Reposting.
• Account Deletion Request: To permanently delete your entire Reposting account and all associated stored data, send an email to privacy@reposting.app with the subject line "Delete My Account."

Step-by-step instructions are available on our Data Deletion Instructions page.

Our Service is strictly intended for individuals who are at least 18 years old (or the legal age of majority in your jurisdiction). We do not knowingly collect or solicit personal information from children under 13 (or under 18 where applicable). If we learn that we have collected personal data from a minor without parental consent, we will delete that information immediately.

We may update this Privacy Policy from time to time to reflect changes in legal requirements, API policies, or app features. Any updates will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes are published constitutes acceptance of the revised policy.

If you have questions, concerns, or privacy requests regarding this Privacy Policy or your data, please contact us at:

• Email: privacy@reposting.app / support@reposting.app
• Website: https://reposting.app