🌉 PostsBridge

Privacy Policy

Last updated: 2026-10-28

PostsBridge ("we", "our", or "the Service") lets you compose a post once and publish it to multiple social media platforms. This policy explains what data we collect, why we collect it, and the choices you have.

Who We Are

The controller responsible for the personal data described in this policy is Abdulsamet Öğretir, reachable at [email protected] for any question or request about your data.

Information We Collect

We collect only the information needed to operate the Service:

  • Account details you provide: email address, username, and password (stored only as a secure hash).
  • Social account connections: OAuth access and refresh tokens plus basic profile, page, or channel identifiers for the platforms you connect, such as Facebook Pages, Instagram Professional accounts, LinkedIn profiles, YouTube channels, and TikTok accounts.
  • YouTube channel data returned by the YouTube Data API when you connect a channel: the channel ID, channel name, and channel avatar image URL. We do not request or store channel statistics such as the subscriber count.
  • Content you create: the text, images, and videos you upload to publish, together with their scheduling details and, for YouTube, the title, tags, category, and the required "made for kids" and "synthetic or altered media" declarations you provide. There is no separate YouTube description field: the video description is taken from the text of the post you wrote (its first 5,000 characters).
  • Publishing results: the identifier and link of the item created on the platform (for example the YouTube video ID), its publishing status, and error codes returned by the platform.
  • Technical data: limited log data such as timestamps and error records used to keep the Service secure and reliable.
  • Security data: the IP address, browser user agent, and timestamps of your sign-ins and of security-relevant actions, used for session management, rate limiting, and abuse prevention. Some of these security records may remain after your account is deleted, no longer linked to your account, where that is needed to prevent abuse.

How We Use Your Information

We use your information solely to provide the Service:

  • To authenticate you and keep your account secure.
  • To publish or schedule the content you create to the platforms you have connected, at your explicit instruction.
  • To show you your connected accounts, your posts, and their publishing status.
  • To maintain, protect, and improve the Service.

Third-Party Platforms

When you connect a social account and publish content, we send that content and the necessary tokens to the relevant platform (for example Meta's Facebook and Instagram, LinkedIn, TikTok, or YouTube, which is a Google service) to complete publishing on your behalf. We only access the permissions you explicitly grant when connecting. Your use of those platforms is also governed by their own terms and privacy policies.

YouTube and Google Data

PostsBridge uses YouTube API Services. When you connect a YouTube channel, you authorize PostsBridge through Google's OAuth consent screen, and we act on your channel only when you explicitly ask us to publish, or at the time you scheduled yourself.

We request exactly two permissions (scopes) and no others. The scope youtube.upload is used to upload the video you created in PostsBridge to your channel. The scope youtube.readonly is used to identify the channel you connected and to check the processing and visibility status of a video that PostsBridge uploaded.

We do not read or store your comments, your subscriber list, your watch or search history, your private messages, or any video that was not uploaded through PostsBridge. We never delete or edit videos on your channel, never manage playlists, and never post comments, ratings, or subscriptions on your behalf.

PostsBridge currently collects no engagement, statistics, or analytics data from YouTube: there is no analytics feature in the product and no such data is gathered. If we ever add one, we will update this policy first and ask for your consent before any such data is collected.

By connecting a YouTube channel and using the YouTube features of PostsBridge, you also agree to be bound by the YouTube Terms of Service, available at https://www.youtube.com/t/terms. Google's handling of your data is described in the Google Privacy Policy, available at https://policies.google.com/privacy.

  • What we store for a connected channel: the channel ID, channel name, channel avatar image URL, and the encrypted OAuth access and refresh tokens.
  • What we store for a video you publish through PostsBridge: the video ID, the title, tags, and category you entered, the description taken from your post text, the visibility (privacy status) applied — the one you chose in the composer, or private where no choice is offered — the upload and processing status returned by YouTube, and the resulting video link.
  • What we do not collect today: comments, subscriber identities, watch history, search history, analytics, engagement or revenue data, and any content on your channel that you did not publish through PostsBridge.

Data Sharing and Restrictions

We do not sell your data. We do not share YouTube or Google data with any third party, do not use it for advertising or ad targeting, do not build advertising profiles, and do not use it to train machine-learning or artificial-intelligence models. YouTube data is used only to show you the channel you connected and to publish the content you created.

The only processors involved are the infrastructure providers required to run the Service: our hosting provider, our database, and Cloudflare R2 object storage for the media files you upload. We may also disclose information where we are legally required to do so.

PostsBridge's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That policy is available at https://developers.google.com/terms/api-services-user-data-policy.

TikTok Data

When you connect a TikTok account, you authorize PostsBridge through TikTok Login Kit. We request only these scopes: user.info.basic (to identify the connected account and show its display name and avatar), video.publish (to post a video you created directly to your account, only after you confirm it), and video.upload (to send a video to your TikTok inbox as a draft, only if you choose that option).

We store the account's open_id, display name, avatar URL, the granted scopes, and the encrypted access and refresh tokens. For each video you post we keep the publish identifier and its status so we can show you the result. We do not access your followers, likes, comments, messages, or any video that was not published through PostsBridge, and we do not collect analytics from TikTok.

You can disconnect TikTok at any time from the Accounts page; this revokes our token with TikTok and deletes the stored connection. You can also remove PostsBridge from your TikTok app settings under Security, in the list of connected apps and services.

Pinterest Data

When you connect a Pinterest account, you authorize PostsBridge through Pinterest OAuth. We request only these scopes: user_accounts:read (to identify the connected account and show its username and profile image), boards:read (to list your own boards so you can choose where to save a Pin), boards:write (required by Pinterest to save a Pin to the board you choose; we never create, edit or delete boards), and pins:read and pins:write (to create the Pins you compose and confirm in PostsBridge).

We store the account identifier, username, profile image URL, the list of your board names and identifiers, the granted scopes, and the encrypted access and refresh tokens. For each Pin you publish we keep the Pin identifier and its link so we can show you the result. We do not access your followers, other users' Pins, messages, or analytics, and we do not use Pinterest data for advertising.

You can disconnect Pinterest at any time from the Accounts page, which deletes the stored connection. You can also remove PostsBridge from your Pinterest settings under Security and logins, in the list of apps with access.

Threads Data

When you connect a Threads profile, you authorize PostsBridge through Meta's Threads OAuth. We request only these permissions: threads_basic (to identify the connected profile and show its username and profile picture) and threads_content_publish (to publish the posts you compose and confirm in PostsBridge).

We store the Threads user ID, username, display name, profile picture URL, the granted permissions and the encrypted access token. For each post you publish we keep the post identifier and its link so we can show you the result. We do not read your followers, replies, messages or insights, and we do not use Threads data for advertising.

You can disconnect Threads at any time from the Accounts page, which deletes the stored connection. You can also remove PostsBridge in the Threads app under Settings, Account, Website permissions. When you remove it there, or ask Meta to delete your data, we disable the connection and delete the stored token immediately.

Bluesky Data

When you connect a Bluesky account, you sign in on your Bluesky server's own page (PostsBridge never sees your password) and authorize PostsBridge through the AT Protocol OAuth flow. We request only permission to create posts and to upload the images and videos you attach to them.

We store your account's decentralized identifier (DID), handle, display name, avatar URL, the address of your Bluesky server, the granted permissions, the encrypted access and refresh tokens, and an encrypted key that binds those tokens to PostsBridge. For each post you publish we keep the post identifier and its link. We do not read your follows, likes, messages or notifications.

Posts on Bluesky are public by design. You can disconnect Bluesky at any time from the Accounts page, which deletes the stored connection, and you can also revoke PostsBridge's authorization from your Bluesky account settings.

Data Storage and Security

OAuth access and refresh tokens for your connected accounts are encrypted at rest using AES-256-GCM authenticated encryption. The encryption keys are held in the server environment, outside the database, and are never written to the database or to log files.

Passwords are kept only as salted hashes. Media files are stored using Cloudflare R2 object storage. All connections use HTTPS. Raw responses from platform APIs are not written to our logs, and access to your data is limited to what is required to run the Service.

Data Retention

We keep your data for as long as your account is active. When you disconnect a social account, the stored tokens and the connection details of that account are deleted immediately. When your account is deleted, the associated data is removed as described in our Data Deletion instructions.

We store the YouTube channel data returned at the moment you connect a channel (the channel ID, name, and avatar image URL) and keep it only while that channel stays connected. It is deleted the moment you disconnect the channel, and it is refreshed only when you reconnect: PostsBridge does not re-fetch it in the background, so it shows your channel as it was at the time of connection. For a video published through PostsBridge we keep the video identifier and its link so we can show you the history of what you published.

Revoking Access

You can disconnect any connected account at any time from the Accounts page in PostsBridge. Disconnecting deletes the tokens and the connection details we store for that account.

For Google and YouTube you can additionally, and at any time, revoke PostsBridge's access from your Google Account security settings at https://myaccount.google.com/permissions. Removing PostsBridge on that page withdraws the authorization on Google's side, independently of the data we delete on ours. We recommend doing both.

Revoking access stops any future publishing to that channel. Videos that were already uploaded remain on your channel and can be managed or deleted from YouTube Studio.

Your Rights and Choices

You can review and update your profile and disconnect any social account at any time from within PostsBridge. You may also contact us to request access to, correction of, or deletion of your data; the exact steps are described on our Data Deletion page.

Children's Privacy

The Service is not directed to individuals below the age required by their local law to consent to online services, and we do not knowingly collect their data.

Changes to This Policy

We may update this policy from time to time. Material changes are reflected by the "Last updated" date shown above.

Contact

For any questions about this page or a request regarding your data, contact us at: [email protected]