Skip to content

Legal

Schedule My Socials privacy policy

Last updated: 30 September 2026

Schedule My Socials helps people connect social accounts, prepare content, and schedule posts for publication.

Information we process

We process account identifiers, OAuth tokens, media, captions, and scheduling information needed to connect accounts and publish content at the account owner’s request.

When you accept our Terms of Service, we record your internal account identifier, the Terms version and a server timestamp so we can establish which agreement you accepted. This is separate from your optional analytics choice and from permission to publish individual posts.

How we use it

We use this information only to authenticate connected accounts, store scheduled content, and deliver publishing requests, and display publication status and available post statistics. We do not sell personal information.

TikTok information

If you sign in with TikTok, we receive your TikTok account identifier, display name and available profile image. TikTok does not provide your email address through this sign-in flow. You can separately provide and verify a contact email. We do not ask for your TikTok password.

If you connect TikTok for publishing, we store the account identifiers and authorized access and refresh tokens. We read creator settings, including available audiences, interaction permissions and posting limits, to validate your post. We send TikTok the media, caption and publishing settings you approve, and store delivery identifiers, status and errors so you can track the result. Direct Post and inbox delivery are different actions; inbox delivery still requires you to finish publishing in TikTok. TikTok sign-in alone does not authorize either.

You can disable the account in Schedule My Socials, revoke access through TikTok’s connected-app settings, and request deletion using our data deletion instructions. Disabling pauses use; it does not delete stored information. Deleting our records does not remove content already delivered to TikTok. TikTok’s own privacy policy governs information once it is held by TikTok.

Google and YouTube information

Schedule My Socials uses YouTube API Services. When you connect YouTube, we request your permission to identify your channel, upload videos you approve, and read information about videos published through our app. We store the channel identifier, display name and profile image, access and refresh tokens, video identifiers, publication and processing status, and available views, likes and comments. We do not ask for your Google password.

We send YouTube the video, title, description and publishing settings you approve. We use the resulting identifiers and statistics to show your publishing history and performance. Connecting YouTube is separate from using Google to sign in, which provides your account identifier and available name, email address and profile image.

Google's handling of information is described in the Google Privacy Policy. Our use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements.

Who receives Google user data

We share, transfer or disclose Google user data only as needed to provide the features you request, as described below. Google user data includes the sign-in profile, YouTube channel information, authorization tokens, video information and statistics described above.

We do not sell Google user data or share it with advertisers or data brokers. Connecting another social platform does not by itself transfer your Google authorization tokens or YouTube statistics to that platform. Other platforms receive the content you separately choose to publish to them.

How we protect Google user data

These safeguards reduce the risk of unauthorized access or disclosure. No system can guarantee absolute security.

Service providers and storage

Cloudflare runs the application and stores uploaded media and temporary caches. Convex stores account, connection, scheduling and publication records in our US database. Provider access and refresh tokens are encrypted before storage. These service providers process information needed to operate the service. The social platforms you select receive the content and settings needed to publish your posts.

Apps you connect

You can connect an AI assistant or other app, such as ChatGPT, to your workspace. You sign in and choose what it may do. Depending on your choice, it can receive your workspace and client names, connected account names and status, scheduled and published posts with their captions, links, status and collected results, and your media library details. If you allow it, it can also schedule, retry or cancel posts and add media you attach. We send it only what it asks for to answer your request, and never your social platform tokens.

The app keeps its access until you revoke it in Settings (API keys) or it is unused for 30 days. What the app does with the information it receives is governed by that app's own privacy policy, for example OpenAI's for ChatGPT.

Cookies and browser storage

We use cookies and browser storage to keep you signed in and remember settings, including your analytics choice. Optional browser analytics are described below.

Product analytics

With your consent, we use our self-hosted OpenPanel service to measure browser page views, interface actions, forms, and browser-based agent tools. We also record operational events when an authenticated API key calls a remote MCP tool. We associate this activity with internal user, API-key, and workspace identifiers. We do not send post text, media, form values, tool inputs or outputs, credentials, or social access tokens to OpenPanel.

You can change this choice at any time by selecting in the footer.

Storage and deletion

Stored YouTube video identifiers, API metadata and statistics expire 27 days after publication. Data for unsuccessful or cancelled deliveries expires once the post is 27 days old. This removes the stored YouTube details and performance figures, not your captions, future schedules or videos on YouTube. We check channel authorization and refresh channel details weekly, including for paused connections; checking access does not re-enable publishing. Temporary failures are retried. If we cannot verify authorization for 27 days, we start deleting the associated YouTube API data.

YouTube statistics refresh when you request an analytics refresh. Stored YouTube analytics snapshots expire with the associated video's API data and are not archived to long-term JSON storage. Our scheduled cleanup checks run every 30 minutes; failed cleanup is retried.

In Accounts, choose “Disconnect YouTube” to stop future YouTube work, request revocation of our Google access, and start deletion of associated YouTube account data and analytics. This does not delete your original uploads here or videos already on YouTube. Temporary provider failures are retried automatically. We delete stored YouTube information as soon as possible and within seven calendar days of a deletion request, including a request made by email.

You can disable connected social accounts in the application and revoke access from the relevant social platform. To request deletion of your Schedule My Socials data, follow the instructions on our data deletion page.

You can revoke our Google and YouTube access in your Google Account permissions. Disabling an account in Schedule My Socials is not the same as deleting stored records. Use the deletion request process to request removal of stored channel information, tokens, video records and statistics. Removing our stored records does not delete videos already published on YouTube; manage those videos in YouTube Studio.

Uploaded media becomes eligible for automatic cleanup seven days after its last associated delivery is published, provided no draft or unfinished delivery still needs it. This media cleanup is separate from deletion of your account and connected-platform records.

Contact

For privacy questions, email info@schedulemysocials.com.