Privacy

This page describes information Postgen stores to run the scheduling workspace. It applies to people with an account, people invited to a workspace, and visitors who only read these public pages.

An account stores a name, an email address, a password hash, and the time the account was created. Postgen does not store the password itself.

A workspace stores its name, a slug, a plan, and the time it was created. Membership stores which account belongs to which workspace, and the role on that workspace.

An invite stores the invited email, the role, a token, and an expiry time. The token is how the invited person joins.

Influencer profiles store a name, notes, an optional avatar, a status, and the local part of an inbox address. Mail sent to that address stores the sender, subject, a short preview, the time it arrived, and the full message with its attachments so it can be opened in the workspace.

Videos store the uploaded file, its title, captions, and an optional cover image.

Publish jobs store the platform, a status, the scheduled time, the published time when there is one, the settings chosen for that post (such as the title, caption, audience, and disclosures), and the result returned by the platform.

Connecting YouTube, TikTok, or Instagram stores the platform, an external id, a display name, access and refresh tokens, token expiry, the granted scopes, and a connection status.

Those tokens are used to carry out publish jobs for that account and to read the numbers described below. They are not used to sign in to Postgen, and nothing is posted unless a workspace member chose to post or schedule it.

Disconnecting an account revokes Postgen's access with the platform where the platform allows it, deletes the stored tokens, and deletes the stored numbers for that platform.

Postgen uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to the data YouTube holds.

With the youtube.upload permission, Postgen uploads a video to the connected channel only when a workspace member posts or schedules it, with the title, description, visibility, made-for-kids answer, and altered-content label chosen in the post dialog.

With the youtube.readonly permission, Postgen reads the channel's id, name, handle, and picture, to show which channel is connected, and the view, like, and comment counts of videos that Postgen uploaded, to show them next to each video. It does not read other videos, subscribers, or private channel data.

This data is shown only to members of the workspace that connected the channel. It is not sold and not used for advertising. Cloudflare hosts the service and stores these records only to run it. Postgen does not transfer or disclose Google user data to any other party, and does not use it to train AI or machine-learning models.

Video counts are refreshed every hour. Stored counts that are not refreshed are deleted after 30 days, and all of a channel's stored counts are deleted when the channel is disconnected or the influencer is deleted.

You can disconnect the channel in Postgen at any time, or remove Postgen's access from your Google Account at https://myaccount.google.com/connections. Either way, Postgen can no longer use the channel.

Security procedures are in place to protect the confidentiality of Google user data. That data is the OAuth access and refresh tokens, the connected channel's id, name, handle, and picture, and the view, like, and comment counts of videos Postgen uploaded.

We use encryption to protect your information. Traffic between your browser, Postgen, and Google is encrypted with HTTPS (TLS). The database that stores the tokens and channel records is encrypted at rest. The YouTube client secret is kept as a production secret, separate from the application, and the tokens are not shown in the workspace or sent to the browser.

Only a signed-in member of the workspace that connected the channel can use that connection. Postgen requests only the youtube.upload and youtube.readonly permissions, and uses the tokens only for the upload and the counts described above. Disconnecting the channel revokes Postgen's access where Google allows it and deletes the stored tokens.

For TikTok, Postgen reads the account's name, username, and picture, and the posting options TikTok allows for that account, to show them in the post dialog. It posts a video only when a workspace member confirms it there, with the audience, interaction settings, and disclosures chosen.

For Instagram, Postgen publishes reels a workspace member posts or schedules and reads the numbers of those reels. The same rules apply: data is only shown inside the workspace, refreshed or deleted within 30 days, and deleted on disconnect.

Signing in sets an HttpOnly cookie named mh_session. It identifies the session and expires after 30 days, or sooner if you sign out. The cookie is not used for advertising.

The public pages remember a light or dark theme in local storage on your browser. That value stays on the device.

This information is used to sign you in, run the workspace, queue and publish posts, show mail that arrives for an influencer, and send an invite to an email address a member entered.

Postgen does not sell personal information and does not run advertising trackers on these pages.

Account, workspace, and scheduling records stay until they are deleted from the workspace or the workspace is removed. A session ends when it expires or when you sign out. An invite expires at the time stored on the invite.

Platform tokens stay while the account is connected. Disconnecting an account revokes and deletes them. Numbers read from a platform are refreshed hourly and deleted after 30 days without a refresh.

Questions about an account, or a request to delete your data, go to the person who issued the account. See the contact page.