Summary
Social Hub helps you write one post and publish it to YouTube, TikTok, Instagram, Threads, X, and LinkedIn, now or on a schedule. This policy explains what data we collect, why, where it is stored, and how you can delete it.
- We do not sell your data.
- We do not show ads or use your data for advertising.
- We only access social accounts that you connect yourself, and only for the features you use.
Data we collect
- Your Social Hub account: email, name (if provided), and password. Passwords are managed by Supabase Auth and stored hashed; we never see them.
- Social accounts you connect: account ID, name or username, profile picture, and the access and refresh tokens from the platform’s official sign-in (OAuth). We never receive your social media passwords.
- Content you create: captions, photos and videos you upload, selected destination accounts, schedules, per-platform settings, and the status and links of published posts.
- Content from your accounts: when you open the “Account content” pages, we fetch your profile, posts, and statistics (e.g. likes, comments, views) directly from the platform APIs to show them to you. This data is not stored in our database.
- Technical data: standard server logs from our hosting provider (e.g. IP address and access time) for security and troubleshooting.
How we use data
- Publishing and scheduling posts to the accounts you choose.
- Showing your post history, its status, and your account content.
- Refreshing access tokens automatically so scheduled posts keep working.
- Sending account emails, such as email verification and password resets.
- Keeping the service secure and fixing errors.
We do not use your content or account data to train AI models, for advertising, or for any purpose beyond the list above.
Data from third-party platforms
Access to each platform only happens after you approve it on that platform’s official sign-in page, and only with the permissions needed to publish posts and show your content. Your use of each platform is also subject to its own policies.
YouTube / Google. Social Hub uses YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service and the Google Privacy Policy. Social Hub’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account security settings.
Meta (Instagram, Threads), TikTok, X, and LinkedIn. Data from these platforms is only used for the features described in this policy. You can revoke the app’s access at any time from each platform’s security or connected-apps settings.
Storage and security
- Account and post data is stored in a Supabase Postgres database; sign-in is handled by Supabase Auth.
- Photos and videos are stored in Cloudflare R2; the app runs on Cloudflare Workers.
- Social media access and refresh tokens are encrypted (AES-GCM) before they are stored.
- Media files can only be accessed by you, or by the destination platform’s servers through signed links that expire within 6 hours.
- All connections use HTTPS.
These providers process data on our behalf to run the service. Data may be processed on servers outside your country.
How long we keep data
- Social account tokens are kept until you disconnect that account on the Accounts page; disconnecting deletes them immediately.
- Post history is kept until you delete it on the History page.
- Media files are kept until you delete your Social Hub account. Deleting a post from History does not delete posts already published on the platforms.
- Your Social Hub account data is kept while your account is active.
How to delete your data
- Disconnect a social account: go to Accounts and click Disconnect. The access tokens and data for that account are deleted from Social Hub immediately.
- Delete a post from history: go to History and click Delete on the post.
- Delete your whole account and data: go to Settings and click Delete Account. Your account, connected social accounts, post history, and all your media files are permanently deleted right away. If you can’t sign in, email (contact email not configured) from your account’s email address. Full steps: How to delete your account.
- Revoke access on the platform: you can also revoke Social Hub’s access directly from the connected-apps settings of Google, Meta (Instagram/Threads), TikTok, X, or LinkedIn.
Posts already published on social platforms are not deleted; delete them directly on the platform if needed.
Your rights
You can request a copy of your data, correct inaccurate data, and request deletion, in line with applicable data protection laws (including Indonesia’s Personal Data Protection Law No. 27 of 2022 and, where it applies, the GDPR). Contact us at the email below.
Children
Social Hub is not intended for children under 13, and we do not knowingly collect their data.
Changes to this policy
If this policy changes, we will update the effective date on this page. For significant changes, we will notify you by email or in the app.
Contact
Privacy questions or requests: (contact email not configured).