Privacy Policy

Welcome to Postmint Social Studio ("Postmint", "we", "us", or "our"). We are dedicated to safeguarding your privacy and ensuring transparency regarding how we access, utilize, store, and protect your information when connecting your verified social media accounts (YouTube Channels, Facebook Business Pages, and Instagram Professional accounts).

1. Connected Social Media Platforms

Postmint enables creators and businesses to publish content automatically to connected platforms:

2. Information We Collect and Access

We access and store only the minimal technical data strictly necessary to authenticate your channels and publish your media:

• Account Identifiers: Public channel/page IDs (e.g., YouTube Channel ID, Facebook Page ID, Instagram Business ID).
• Channel Metadata: Public profile names and avatar URLs so you can identify your connected accounts in the Postmint dashboard.
• Encrypted OAuth Tokens: Short-lived access tokens and offline refresh tokens returned by Google and Meta during the OAuth authorization handshake. These are strictly stored encrypted at rest using AES-256-GCM.
• Publishing Data: Video files, images, titles, descriptions, and scheduling metadata that you explicitly create and submit for publication.

Information We Never Access: We do not access or store your private messages (DMs), friend lists, personal Facebook profile feeds, browser history, passwords, or credit card billing details.

3. How We Use OAuth Access Tokens

Your OAuth tokens are utilized exclusively for the explicit automated actions requested by you:

• Uploading video content, titles, descriptions, and tags to your chosen platform when you trigger "Publish" or a scheduled release.
• Proactively refreshing expired Google access tokens using offline refresh tokens so that scheduled uploads execute seamlessly.

4. Disconnecting Accounts & Data Deletion Instructions

You maintain 100% control over your connected accounts and stored data:

1. Navigate to the Connected Accounts tab in the Postmint dashboard.
2. Click the Disconnect button next to the YouTube or Meta account you wish to remove.
3. All associated access tokens, refresh tokens, and channel metadata are immediately and permanently purged from our database.

You may also revoke Postmint's access externally at any time via your provider settings:

• Google Account Permissions: https://myaccount.google.com/permissions
• Facebook Business Integrations: https://www.facebook.com/settings?tab=business_tools

5. Compliance with Third-Party Platform Policies

By connecting your accounts through Postmint, you acknowledge and agree to comply with the terms of our supported platforms:

• YouTube Terms of Service
• Google Privacy Policy
• Meta Terms of Service
• Meta Privacy Policy

6. Contact Us & Data Deletion Inquiries

For any privacy inquiries, data deletion requests, or technical support, please contact:

Postmint Social Studio Support
Email: explorewithharizz@gmail.com
Response Time: Within 24–48 business hours