1. Introduction
TimedPost ("we", "our", or "us") operates the website app.timedpost.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform.
By using TimedPost, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, and profile picture through your chosen authentication provider (e.g., Google).
2.2 Connected Social Media Accounts
When you connect a social media platform, we collect and store:
- Platform account identifiers and display names
- OAuth access tokens and refresh tokens (encrypted at rest)
- Profile pictures from connected accounts
- Page/channel information (for Facebook Pages, YouTube channels, LinkedIn profiles)
We support the following platforms: Instagram, Facebook, TikTok, YouTube, Threads, X (Twitter), and LinkedIn.
2.3 Content You Create
We store the content you create through our platform, including:
- Post captions, descriptions, and hashtags
- Uploaded images and videos
- Scheduling preferences and publishing history
- Draft posts and templates
2.4 Usage Data
We automatically collect certain information about your device and usage patterns, including browser type, IP address, pages visited, and interaction timestamps.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our social media scheduling and publishing service
- Publish content to your connected social media accounts on your behalf
- Display analytics and insights about your social media performance
- Manage your subscription and process payments
- Send service-related notifications and updates
- Improve and optimize our platform
- Respond to support requests
4. Third-Party Services and APIs
TimedPost integrates with the following third-party APIs to provide its services:
- Meta (Instagram, Facebook, Threads): We use the Instagram Graph API, Facebook Pages API, and Threads API to publish content and retrieve basic profile information. Data is processed in accordance with Meta's Privacy Policy.
- TikTok: We use the TikTok Content Posting API to upload and publish videos. Data is processed in accordance with TikTok's Privacy Policy.
- YouTube (Google): We use the YouTube Data API to upload videos and manage channel content. Data is processed in accordance with Google's Privacy Policy.
- X (Twitter): We use the X API to publish posts. Data is processed in accordance with X's Privacy Policy.
- LinkedIn: We use the LinkedIn API to publish posts to personal profiles. Data is processed in accordance with LinkedIn's Privacy Policy.
- Stripe: Payment processing is handled by Stripe. We do not store credit card details. See Stripe's Privacy Policy.
- Supabase: We use Supabase for database hosting and file storage. Data is stored securely with row-level security enabled.
5. Data Storage and Security
We implement industry-standard security measures to protect your data:
- All data is transmitted over HTTPS/TLS encryption
- OAuth tokens are stored in a database with row-level security (RLS) enabled
- API routes are protected with authentication and rate limiting
- We use HMAC-signed OAuth state parameters to prevent CSRF attacks
- Passwords are never stored — we use third-party authentication providers
Data is stored on servers located in the European Union and United States through our infrastructure providers (Vercel, Supabase).
6. Data Sharing
We do not sell, rent, or trade your personal information. We only share data in the following circumstances:
- With social media platforms when you publish content (at your direction)
- With payment processors to handle subscription billing
- When required by law or to comply with legal processes
- To protect the rights, safety, or property of TimedPost or its users
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Uploaded media files are deleted from our storage when you remove them from the platform or delete your account.
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a machine-readable format
- Withdraw consent: Disconnect social accounts or delete your account at any time
- Restrict processing: Request that we limit how we use your data
To exercise any of these rights, contact us at [email protected].
9. GDPR Compliance (EU Users)
If you are in the European Economic Area (EEA), we process your personal data based on the following legal bases:
- Contract: Processing necessary to provide the service you signed up for
- Consent: When you connect social media accounts or enable optional features
- Legitimate interest: To improve our services and ensure platform security
10. CCPA Compliance (California Users)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
11. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but some features may not function properly.
12. Children's Privacy
TimedPost is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.
14. Data Deletion Request
You can delete your data at any time by:
- Disconnecting social accounts from the Channels page
- Deleting individual posts, drafts, and media from the dashboard
- Requesting full account deletion by emailing [email protected]
For step-by-step instructions and all available deletion methods, see our Data Deletion page.
Upon account deletion, all associated data including tokens, posts, media, and profile information will be permanently removed within 30 days.
15. Contact Us
If you have any questions about this Privacy Policy, please contact us: