Privacy Policy

What Post Once does

You keep posting on your own account as usual. Post Once watches that account for new videos and photos, then reposts each new post to the other accounts you have connected. To do that it needs permission to read your posts on the account you choose as the source, and permission to publish on the accounts you choose as destinations.

Post Once is operated by Tinycom LLC ("we", "us"). This policy explains what we collect, why, who we share it with, and how to get it deleted.

What we collect

• Account details: your email address, and a hashed password if you signed up with one. If you sign in with Google or Apple we store the identifier they give us, your email, and nothing else from those accounts.
• Platform connections: for each account you connect (YouTube, Instagram, TikTok, Threads, Facebook, LinkedIn, Pinterest, X, Snapchat, Google Drive or Dropbox) we store the platform account id, the handle, the permissions you granted, and the access and refresh tokens. Tokens are encrypted with AES-256-GCM before they are written to our database. For Facebook we also store the id and name of the Page you choose, for LinkedIn the profile or Page you choose to post as, for Pinterest the board you choose, for Google Drive the id of the Post Once folder, and for every backup your time zone. For Backblaze B2 and S3 storage you paste in a key instead of signing in: we store the key, encrypted the same way, with your bucket name, its endpoint or region and, for Amazon S3, the storage class you pick, and delete the key when you disconnect.
• Post metadata: the title, caption, duration, thumbnail, publish time and platform id of each post we detect and repost, plus the result of each publish attempt.
• Media files: a temporary copy of each video or photo, needed to move it from one platform to another.
• Operational logs: request and job logs that record errors and timing, used to keep the service running.
• Billing: if you subscribe, our payment processor handles your card details. We never see or store them. We keep your customer identifier and subscription status.
• Launch list: if you leave your email on postonce.com to hear when Post Once launches, we store that email, the page you left it on and the time. We use it only to tell you about the launch, and delete it if you ask.

How we use it

We use your data only to run the service you signed up for: detecting new posts on your source account, reposting them to your destinations, showing you the results, keeping your connections authorised, emailing you when something needs your attention, and billing you if you are on a paid plan.

We do not sell your data. We do not use it for advertising. We do not use your posts or your account data to train machine learning models, and we do not share it with anyone who does.

Data from connected platforms

Data we obtain from the platforms you connect (YouTube, Instagram, TikTok, Threads, Facebook, LinkedIn, Pinterest, X and Snapchat) is used only to perform the cross-posting you asked for. We read the list of recent posts on your source account and, for each new post, its video or photos and its caption. We write new posts to your destination accounts. We do not read your direct messages, comments, followers or analytics.

Instagram, Threads and Facebook (Meta): we read your profile id and username, and the media you post on the account you choose as the source. For Facebook we read the list of Pages you manage so you can pick one, then read and publish only on that Page. We never post to a personal Facebook profile.

LinkedIn: LinkedIn is a destination only. We read your name and member id, and the list of LinkedIn Pages you manage so you can choose where posts go. We then publish only to your profile or to the Page you choose. We never read your feed, connections or messages.

Snapchat: Snapchat is a destination only. We read your Public Profile id, display name and username so we know where to publish, then post your new videos to Spotlight and your Stories to your Public Profile. We never read your Snaps, chats, friends or Memories.

Google Drive: Google Drive is a backup destination only. We ask for the narrowest Drive permission, which lets Post Once see and change only the files and folders it creates. We read your Google account email so you know which Drive is connected, create a Post Once folder, and save a copy of each new post there with its caption. We cannot see any other file in your Drive.

Dropbox: Dropbox is a backup destination only. Post Once has App folder access, so it can only see and change its own folder inside Apps in your Dropbox. We read your Dropbox account id and email so you know which Dropbox is connected, then save a copy of each new post there with its caption.

Backblaze B2: Backblaze B2 is a backup destination only. We use the application key you give us to save a copy of each new post, with its caption, in a Post Once folder in your bucket, and to check which copies are already saved. We do not read or change anything outside that folder.

Amazon S3 and S3-compatible storage: S3 storage is a backup destination only. We use the access key you give us to save a copy of each new post, with its caption, in a Post Once folder in your bucket on Amazon S3 or the S3-compatible service you name, and to check which copies are already saved. We do not read or change anything outside that folder.

Post Once's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Post Once uses the YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy. You can revoke our access to your Google account at any time at myaccount.google.com/permissions.

Who we share it with

We share data only with the service providers that make Post Once work, and only what each one needs:

• Hetzner (Germany): our application servers.
• MongoDB Atlas: our database.
• Cloudflare: content delivery, and R2 object storage for the temporary media copies.
• Amazon Web Services (SES): transactional email, such as password resets and reconnect notices.
• Stripe: subscription payments, for paid plans only.
• YouTube, Instagram, TikTok, Threads, Facebook, LinkedIn, Pinterest, X, Snapchat, Google Drive, Dropbox, Backblaze B2 and S3 storage: only the platforms you choose to connect, to read your posts, publish them and save backups.
• We also disclose data if the law requires it, or to protect the service and its users from abuse.

How long we keep it

• Media files: deleted from our storage roughly 24 hours after the post has been reposted. We do not keep an archive of your videos or photos. Backups you turn on are copies saved in your own Google Drive, Dropbox, Backblaze or S3 storage account, which you control.
• Post metadata and publish history: kept while your account is open, so you can see what was posted where.
• Platform tokens: kept until you disconnect the account or delete your account, whichever comes first.
• Account details: kept while your account is open.
• Operational logs: kept for up to 30 days.

Deleting your data

You can disconnect any platform at any time from the Accounts page in Post Once. Disconnecting revokes our stored tokens for that account and stops all reading and publishing on it. You can also revoke access from the platform itself: Google at myaccount.google.com/permissions, Instagram under Settings, Website Permissions, Apps and Websites, Threads under Settings, Account, Website permissions, Facebook under Settings and privacy, Settings, Business integrations, TikTok under Settings, Security and permissions, Manage app permissions, Snapchat under Settings, Connected Apps, Dropbox under Settings, Connected apps, Backblaze B2 by deleting the application key you made for Post Once, and S3 storage by deleting the access key you made for Post Once.

When you remove Post Once from Instagram, Threads or Facebook, Meta tells us and we stop using that connection. If you ask Meta to delete your data from Post Once, we delete that connection and its tokens, and Meta shows you a confirmation code you can use to check the request with us.

To delete your account and everything we hold about you, email [email protected] from the address you signed up with, with the subject "Delete my account". We delete your account, your platform connections and tokens, your post metadata and publish history within 30 days, and confirm by email when it is done. Any temporary media copies are already deleted on the 24 hour schedule described above.

Backups are rotated out within 30 days, so deleted data disappears from backups within that window. We may keep the minimum records we are legally required to keep, such as invoices for paid subscriptions.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email us and we will respond within 30 days. If you are in the EEA or the UK, the legal basis for our processing is the contract between us, which is the service you signed up for, and our legitimate interest in keeping that service secure and working.

Our servers are in Germany. If you use Post Once from outside the EEA, your data is transferred to and processed there.

Security

Platform tokens are encrypted at rest. Passwords are hashed with bcrypt and are never stored in readable form. Traffic to Post Once is served over HTTPS. Access to production systems is restricted to the people who operate the service.

No service can promise perfect security. If we ever discover a breach affecting your data, we will tell you.

Children

Post Once is not intended for anyone under 13, and we do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.

Changes to this policy

If we change this policy in a way that affects how we handle your data, we will update the date at the top of this page and, for significant changes, email you before the change takes effect.