Privacy Policy

This Privacy Policy applies to Social Poster - Lexerlabs ("Social Poster - Lexerlabs", "we", "us", or "our"), a cross-platform social-media publishing tool that helps creators publish the same content to their connected Facebook Pages, Instagram Business accounts, YouTube channels, and TikTok accounts from a single interface. This document describes what data we collect, how we use it, who we share it with, and your rights.

Contact for privacy questions or data-deletion requests: [email protected].

We collect only the data we need to operate the publishing service:

From Google sign-in:

• Your Google account ID
• Email address and verified status
• Display name and avatar URL

From connected social platforms:

• Facebook / Instagram (Meta): Page ID, Page name, and the credentials we need to publish on your behalf. When you link an Instagram Business account to a Page, we also receive its ID and username. Obtained through the Meta Graph API.
• YouTube (Google): YouTube channel ID, channel title, and the credentials we need to upload and manage videos on your behalf. Obtained through the YouTube Data API v3 under the youtube.upload and youtube.readonly scopes.
• TikTok: Your TikTok user ID, display name, account-level counters, and the credentials we need to publish on your behalf. Obtained through TikTok Login Kit and the Content Posting API under the video.publish, user.info.basic, and user.info.stats scopes.

From your activity inside Social Poster - Lexerlabs:

• Post content you compose: title, caption, scheduled time, target accounts.
• Media files you upload: stored in Cloudflare R2 with a publicly fetchable URL (required so the destination platforms can pull the file when publishing).
• Publish status and history: which targets succeeded or failed, the post ID each platform returned, error messages, and timestamps.

Social Poster - Lexerlabs's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide and improve user-facing features prominent in our interface (uploading videos to your YouTube channel and managing your scheduled / published content).
• We do not transfer Google user data to third parties except as needed to provide or improve the service, comply with applicable law, or as part of a merger / acquisition / sale of assets with notice to users.
• We do not use Google user data for advertising, including retargeted advertising or personalized advertising.
• We do not allow humans to read Google user data unless we have your affirmative consent for specific data, it is necessary for security purposes (e.g. investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.

You can revoke Social Poster - Lexerlabs's access to your Google account at any time by visiting https://myaccount.google.com/permissions and removing Social Poster - Lexerlabs from the list of connected apps.

Strictly to provide the publishing service you requested:

• Display your connected accounts so you can pick publish targets.
• Submit your media, title, and caption to the platforms you selected.
• Quietly renew the credentials each platform issued, so you don't have to reconnect every time they expire.
• Show you per-target publish status, errors, and history.
• Cancel scheduled posts, or delete already-published posts on platforms whose APIs support it.
• Detect and prevent abuse (rate limiting, fraud detection).

We do not use your data for advertising, do not sell it, and do not use it for AI/ML training.

We rely on the following third parties to operate Social Poster - Lexerlabs. Data we share with them is limited to what they need:

• Google — for sign-in (basic profile + email) and YouTube publishing (your videos and metadata you choose to publish). Subject to Google's Privacy Policy.
• Meta (Facebook & Instagram) — for Page and Instagram publishing. Subject to Meta's Privacy Policy.
• TikTok — for video publishing. Subject to TikTok's Privacy Policy.
• Cloudflare — for object storage (R2) and content delivery. Media you upload is stored in our R2 bucket with a publicly fetchable URL so destination platforms can pull it at publish time. Subject to Cloudflare's Privacy Policy.

• Account data (Google identity, posts, targets, error logs): kept for as long as your Social Poster - Lexerlabs account exists.
• Connected-platform credentials: deleted immediately when you disconnect the account from the Accounts page.
• Uploaded media: kept until the post finishes (published / failed / cancelled / deleted) plus 24 hours, then automatically removed.
• Operational logs (publish errors, request logs): retained up to 30 days for debugging, then purged.
• Account deletion: when you request deletion (via the email below), everything associated with your account — credentials, posts, targets, and remaining media — is permanently removed within 7 days.

We protect your data with industry-standard measures:

• HTTPS for all connections to and from Social Poster - Lexerlabs.
• Platform credentials are stored in a database that only our application server can reach.
• Regular dependency updates and security patches.

No system is 100% secure; we do our best, and we'll notify affected users promptly if a breach occurs.

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correct: ask us to update inaccurate data (most fields are user-editable in the app).
• Delete: request deletion of your account and all associated data.
• Disconnect: remove any connected social account at any time from the Accounts page; this revokes our copy of the platform's token immediately.
• Object / restrict: object to processing or ask us to restrict it for specific purposes.
• Data portability: receive your data in a machine-readable format.

To exercise any of these, email [email protected]. We respond within 7 days.

Social Poster - Lexerlabs may process data on servers located in the United States and Europe (depending on your closest Cloudflare R2 region). Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses for transfers from the EEA / UK to other countries.

Social Poster - Lexerlabs is not intended for users under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under those ages. If we learn we have collected such information, we will delete it. If you believe a child has provided us with personal data, please contact us at [email protected].

We use a single session cookie to keep you signed in. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

If we change this policy, we'll update the "Last updated" date at the top. For material changes, we'll notify connected users by email at least 30 days before the change takes effect.

Privacy questions, deletion requests, or any other concern: [email protected].