Privacy Policy
Effective Date: August 28, 2026 • Last Updated: August 28, 2026
Authorized Domain: postautoproapp.com (and www.postautoproapp.com)
1Introduction & Scope
Welcome to PostAutoPro ("we," "us," or "our"), operated under the authorized domain postautoproapp.com. PostAutoPro is an automated multi-channel short-form video publishing SaaS platform designed for content creators, agencies, and digital marketing teams.
This Privacy Policy describes how we collect, store, encrypt, process, and protect your information when you access our web application at https://www.postautoproapp.com, our mobile applications (iOS and Android), and our APIs.
2Information We Collect
A. Account Information
When you register an account, we collect your name, email address, hashed passwords (via secure scrypt/Argon2 algorithms), organization identifier, and subscription billing metadata.
B. Connected Social Media Accounts & Tokens
When you connect social networks via OAuth 2.0 (Google/YouTube, Meta Facebook & Instagram, TikTok, LinkedIn, X/Twitter, Snapchat), we receive provider identifiers (e.g. Channel ID, Page ID, User ID) and OAuth credentials (access tokens, refresh tokens). All OAuth tokens are encrypted at rest using AES-256-GCM authenticated encryption.
C. Content & Media Assets
Video files, images, titles, captions, hashtags, and scheduling rules you upload are temporarily processed and stored for the sole purpose of transcoding (9:16 vertical padding) and publishing to your destination channels.
3Google API Services & YouTube User Data Policy
PostAutoPro uses Google APIs to enable video and Short publishing to your connected YouTube channel. When you authenticate using Google OAuth, PostAutoPro accesses:
https://www.googleapis.com/auth/youtube.upload: To upload videos and Shorts specified by you to your YouTube channel.https://www.googleapis.com/auth/youtube.readonly: To view your YouTube channel ID, title, and verify upload processing status.openid,userinfo.email,userinfo.profile: To authenticate your session and display your avatar and email in the settings view.
PostAutoPro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertisements, train generalized AI models, or sell information to third parties.
You may review the Google Privacy Policy at https://policies.google.com/privacy and revoke PostAutoPro's access at any time via the Google Security Settings Page.
4Meta (Facebook & Instagram) Platform Data
When connecting Facebook Pages and Instagram Professional accounts via Graph API v21.0, PostAutoPro requests pages_manage_posts, pages_read_engagement, instagram_basic, and instagram_content_publish solely to render media publishing and campaign analytics.
https://www.postautoproapp.com/api/v1/auth/meta/data-deletion.5TikTok, LinkedIn, X (Twitter) & Snapchat Data
Data received from TikTok (Content Posting API), LinkedIn (Share on LinkedIn), X (OAuth 2.0 User Context), and Snapchat (Snap Kit) is strictly used to publish user-initiated content and query post status. We do not harvest follower contact lists or scrape private direct messages.
6Security & AES-256-GCM Token Encryption
We implement industry-standard cryptographic security practices:
- Envelope Encryption: All third-party access and refresh tokens are encrypted using AES-256-GCM with distinct initialization vectors (IVs) and 16-byte authentication tags.
- Key Separation: Master encryption keys are derived outside the database and injected securely via environment secrets.
- Transport Security: All data in transit is encrypted using modern TLS 1.3 encryption with strict HTTPS redirection and HSTS headers.
- Tenant Isolation: Organizations and data records are partitioned with strict PostgreSQL tenant boundaries.
7Your Rights & Data Control
Under GDPR, CCPA, and global privacy standards, you maintain the right to:
- Access, export, and review personal data stored in your PostAutoPro workspace.
- Disconnect social channels at any time, which permanently removes and revokes stored OAuth tokens.
- Request permanent account and workspace deletion via your account settings or by contacting support@postautoproapp.com.
8Contact Information
If you have any questions regarding this Privacy Policy or our data handling practices, please contact: