Privacy Policy

Last updated: 6 July 2026

SyncPostr ("we", "our", "us") operates the SyncPostr web application at syncpostr.com (the "Service"). SyncPostr lets you create a post once and publish or schedule it across social platforms — TikTok, Instagram, YouTube, Facebook, X, and LinkedIn — from one dashboard. This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

1. Information We Collect

Account information: When you register for SyncPostr, we collect your name and email address to create and manage your account.

Connected social accounts: When you connect a social platform, that platform issues us an access token (via our publishing provider, Post for Me) that lets us publish content on your behalf. We store these tokens securely. We never receive or store your social platform passwords, and we only request the permissions needed to publish the content you schedule.

Content you create: The captions, images, and videos you upload to publish or schedule are stored so we can deliver them to your connected platforms. Media is held in secure cloud storage (Cloudflare R2).

Payment information:Payments are processed by Stripe. We do not store your card details. Stripe's privacy policy governs the handling of your payment data.

Information we do NOT collect:

• Your social platform passwords
• Your browsing history or the websites you visit
• Direct messages or private content from your connected accounts
• Data for advertising, profiling, or resale

2. How We Use Your Information

Connected-account tokens are used exclusively to publish and schedule the content you create to the platforms you have connected. They are not used for any other purpose.

Account information is used to provide the Service, manage your subscription, send essential service communications (such as trial expiry notifications), and provide customer support.

We do not sell, trade, or rent your personal information to third parties. We do not use your data for advertising, analytics profiling, or creditworthiness purposes.

3. Data Security

We take the security of your data seriously:

• Encryption in transit: All data between your browser and our servers is transmitted over HTTPS.
• Encryption at rest: Social platform access tokens are encrypted before being stored in our database, and are only used at the moment they are needed to perform a publishing action you have initiated.
• Access controls: Your tokens and content are only accessible to the automated publishing system when processing the posts you schedule.
• Authentication: The application authenticates with our API using short-lived JWT tokens; access tokens expire after 15 minutes.

4. Data Retention and Deletion

Access tokens are stored for as long as you keep a platform connected in SyncPostr. You can disconnect a platform at any time from your dashboard, which immediately deletes the stored token for that connection.

If you delete your SyncPostr account, all associated data — including stored access tokens, your content, and account information — is permanently deleted.

5. Data Sharing

We share data only with the service providers needed to operate SyncPostr, and only as necessary:

• Post for Me (publishing provider): Receives the content you schedule and the relevant access tokens in order to publish to your connected platforms on your behalf.
• Social platforms you connect: The content you choose to publish is sent to the platforms you have connected (TikTok, Instagram, YouTube, Facebook, X, LinkedIn).
• Stripe (payments): Processes subscription payments. No connected-account tokens or content are shared with Stripe.
• Resend (email): Delivers transactional emails such as verification and trial-expiry notices.
• Legal requirements: We may disclose information if required by law or in response to valid legal requests.

We do not share, sell, or transfer your data to any other third parties.

6. Your Rights (UK GDPR)

If you are located in the United Kingdom, you have the following rights under the UK General Data Protection Regulation:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data.
• Restriction: Request that we restrict processing of your data.
• Portability: Request your data in a portable format.
• Objection: Object to our processing of your personal data.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we will also notify you via email or through the SyncPostr dashboard.

8. Contact Us