Privacy Policy
Last updated: July 17, 2026
This Privacy Policy explains how Social Posting API ("we", "us", or "our") collects, uses, stores, and protects information when you use the Social Posting API and related services (the "Service"). We are committed to protecting your privacy and handling data responsibly and transparently.
1. Information We Collect
a. Account & contact information
When you register for or request access to the Service, we may collect information such as your name, email address, and organization details.
b. Platform authorization data
When you or your end users connect a third-party social media platform (such as TikTok, Instagram, or YouTube), we receive access tokens and basic profile information provided by that platform through its official authorization (OAuth) flow. We never receive or store the passwords of connected accounts.
c. Content data
To publish or schedule content on your behalf, we temporarily process the content you submit, including videos, images, captions, and scheduling details.
d. Usage & technical data
We may collect technical information such as API request logs, IP addresses, timestamps, and error data to operate, secure, and improve the Service.
2. How We Use Information
- To provide, operate, and maintain the Service, including publishing and scheduling content to connected platforms;
- To authenticate requests and manage platform connections securely;
- To communicate with you about your account, support requests, and important updates;
- To monitor, debug, and improve the reliability, security, and performance of the Service;
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use the content or platform data of connected accounts for advertising or any purpose unrelated to providing the Service.
3. How We Share Information
We only share information in the following limited circumstances:
- With social platforms: We transmit your content and requests to the platforms you have authorized (such as TikTok) in order to publish on your behalf.
- With service providers: We may use trusted infrastructure and hosting providers who process data on our behalf under confidentiality obligations.
- For legal reasons: We may disclose information if required by law or to protect the rights, safety, or property of our users or others.
4. Data Retention
We retain access tokens only for as long as your platform connection remains active and you continue to use the Service. Content submitted for publishing is processed transiently and is not retained longer than necessary to deliver it to the target platform, except where required for troubleshooting, security, or legal compliance. You may request deletion of your data at any time (see Section 7).
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including encryption of access tokens in transit and at rest, access controls, and the principle of least privilege. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Revoking Access
You can disconnect any connected platform at any time. You may also revoke the Service's access directly from the platform's own settings — for example, through your TikTok account's "Manage app permissions" (Security & permissions) settings. Once revoked, we will no longer be able to access that account and will delete the associated tokens.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to request a copy of it. To exercise any of these rights, contact us at codexfast@gmail.com and we will respond within a reasonable timeframe.
8. Children's Privacy
The Service is not directed to individuals under the age of 18 (or the age of majority in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
9. International Data Transfers
Your information may be processed and stored in countries other than your own. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection in accordance with applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above. We encourage you to review this page periodically.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at codexfast@gmail.com.