Privacy Policy

1. Who we are

Octupost ("Octupost", "we", "us") is a social media scheduling and multi-sharing service available at octupost.com and app.octupost.com. It lets you connect your social media accounts and compose, schedule and publish content to them. For any privacy question or request, contact us at contact@octupost.com.

2. Data we collect

We collect only what the service needs to work:

• Account data — your email address and login credentials for your Octupost account.
• Connected account data — when you connect a social media account through the platform's official authorization flow (OAuth), we receive and store access tokens, and basic account metadata such as the account name, username/handle, profile image and account ID. We never receive or store your social media passwords.
• Content you create — the text, images and videos you compose, schedule or publish through Octupost, and the resulting post status (published, failed, scheduled) and basic engagement metrics the platforms report back.
• Technical data — standard server logs (IP address, browser type, timestamps) used for security and debugging.

3. How we use it

We use your data solely to provide the service: authenticating you, maintaining your account connections, publishing and scheduling the content you ask us to publish, showing you the status of your posts, and keeping the service secure. We do not sell your data, do not use it for advertising, do not use it to train AI models, and never post anything to your accounts that you did not create and approve.

4. Storage and security

Data is stored in a managed PostgreSQL database (Supabase) with access controls, and all traffic is encrypted in transit (HTTPS). Access tokens are stored server-side, are never exposed in the app's user interface or logs, and are used only to make authorized API calls to the respective platforms on your behalf.

5. Platform data

YouTube

Octupost uses YouTube API Services. By using Octupost with a YouTube account, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. Octupost accesses and stores your YouTube authorization tokens and basic channel metadata (channel name, ID, avatar) for as long as your account is connected, and uses them only to upload and manage the videos you publish through Octupost. We refresh tokens automatically to keep your connection alive and delete them when you disconnect the account. You can also revoke Octupost's access to your Google account at any time via Google security settings.

Facebook and Instagram (Meta)

When you connect a Facebook Page or Instagram account, we receive and store the tokens and basic profile/page metadata Meta provides, and use them only to publish the content you create and to read basic post status and engagement. Our use of Meta Platform Data follows Meta's Platform Terms and Developer Policies. You can remove Octupost's access at any time in your Facebook or Instagram settings under connected apps and websites, or by disconnecting the account inside Octupost.

TikTok

When you connect a TikTok account, we receive and store the tokens and basic profile metadata TikTok provides, and use them only to publish the content you create through TikTok's Content Posting API, following TikTok's Developer Terms of Service. You choose the privacy level of every TikTok post yourself at posting time. You can revoke Octupost's access in your TikTok settings under Security → Apps and services, or by disconnecting the account inside Octupost.

X (Twitter) and other platforms

The same principles apply to any other platform you connect: we store only the tokens and basic metadata needed to publish on your behalf, and use them for nothing else.

6. Sharing

We share data only with the infrastructure providers needed to run the service (hosting and database providers processing data on our behalf) and with the social media platforms you explicitly connect, in order to publish your content. We do not share your data with any other third party unless required by law.

7. Retention and deletion

We keep your data for as long as your account is active. Disconnecting a social account deletes its stored tokens. You can request full deletion of your account and all associated data at any time — see Data Deletion Instructions or email contact@octupost.com. Deletion requests are completed within 30 days and are free of charge.

8. Your rights

Depending on where you live (including under the GDPR), you have the right to access, correct, export, restrict the processing of, object to the processing of, and delete your personal data. To exercise any of these rights, email contact@octupost.com. If you believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.

9. Cookies

Octupost uses only essential cookies: session cookies that keep you signed in to the app. We do not use advertising or cross-site tracking cookies.

10. Children

Octupost is not directed at children and may not be used by anyone under the age of 13 (or the higher minimum age required in your country). We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

11. Changes

If we change this policy, we will update this page and its effective date. Material changes will be announced in the app or by email before they take effect.

12. Contact

Octupost — contact@octupost.com