Privacy Policy

This policy explains what MultiPost Studio (“we”, “the app”) collects when you use it to schedule and publish social media content, why we collect it, and how you can get it back or have it deleted. It covers the app at app.multipoststudio.online and every account created on it.

Who we are

MultiPost Studio is a social media management tool. You connect your own social accounts, create and schedule posts, and we publish them on your behalf at the times you choose. We are the data controller for your account data and the processor for the content you publish through us.

What we collect

• Account details. Your name, email address, password hash (or Google sign-in identifier), timezone and profile photo if you set one.
• Content you create. Posts, drafts, captions, media you upload, comments, campaigns, approval decisions and any notes you add.
• Connected social accounts. Access and refresh tokens for the accounts you connect, your handle and profile identifiers on those platforms, and the metrics those platforms report about the posts we published for you.
• Billing information. Your plan, billing contact details and invoices. Card and bank details are handled entirely by our payment provider and never reach our servers.
• Usage and diagnostics. Sign-in times, device and browser information, IP address, and error logs, used to keep the service running and to detect abuse.
• Website analytics and how you found us. On our marketing and sign-up pages, and only with the cookie choices described in our cookie policy, we record the page you landed on, the campaign tags in the link you followed (utm_ parameters), the website you came from, and a random visitor identifier. No IP address or browser fingerprint is stored in these records. If you then create an account, we keep the source and campaign that brought you with your account, so we can tell which campaigns produce real customers. We also use Google Analytics to count visits and see which pages are used.

Google user data

If you sign in with Google or connect a Google service, the app requests only the scopes it needs for the feature you asked for. It requests no Google data beyond these:

• Sign-in (email, profile) — to create and identify your MultiPost Studio account. We store your email address, name and profile photo URL.
• YouTube upload (youtube.upload) — to publish the videos you schedule in MultiPost Studio to the YouTube channel you connected. Used only when a scheduled post reaches its publish time.
• YouTube channel data (youtube.readonly, youtube.force-ssl) — to show your channel, list the posts we published, and read and reply to comments inside the app.
• YouTube Analytics (yt-analytics.readonly) — to show your channel and video performance (views, watch time, subscriber growth, traffic sources, geography and device breakdown) inside the MultiPost Studio YouTube Analytics dashboard. We only ever request your own channel’s data (channel==MINE) — never any other channel’s. Results are cached for up to one hour to avoid unnecessary calls to Google’s API; you can force a fresh pull with the dashboard’s refresh button at any time. Disconnecting your YouTube account deletes the cached analytics rows immediately along with the stored access tokens, and you can revoke access at any time through your Google Security settings. This is non-monetary performance data only — MultiPost Studio does not request or display YouTube Partner Program revenue/ad data.
• Google Drive (drive.file) — to let you select an image or video from your Google Drive using the secure Google Picker to attach to your posts or save to your Media Library. MultiPost Studio accesses and downloads only the specific files you explicitly select within the Google Picker dialog.
• Google Photos (photospicker.mediaitems.readonly) — to let you select a photo or video from your Google Photos library using Google’s own Photos Picker to attach to your posts or save to your Media Library. MultiPost Studio never browses or lists your library — it accesses and downloads only the specific items you explicitly select within the Google-hosted picker session.

MultiPost Studio strictly adheres to the principle of least privilege using Google Picker and the drive.file scope. We never perform background scanning, indexing, or browsing of your general Google Drive. Downloaded files are stored in our encrypted media storage solely to deliver them to your connected social media channels at your scheduled publishing times. You can disconnect your Google Drive integration at any time from your Integrations settings, which deletes stored access tokens immediately, or revoke access at any time through your Google Security settings. We do not use Google user data to train any machine learning model, our own or anyone else’s. We do not sell it and we do not transfer it to third parties for advertising, market research or credit assessment.

Limited Use & YouTube API Services

MultiPost Studio uses YouTube API Services to enable video publishing, comment moderation in the Community Hub, and performance analytics. By using our YouTube integration, you agree to be bound by the YouTube Terms of Service and acknowledge that your information will be handled in accordance with the Google Privacy Policy.

In addition to our normal procedures for deleting stored data, you can revoke MultiPost Studio’s access to your data at any time via the Google security settings page at https://myaccount.google.com/permissions.

MultiPost Studio’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your data

• To operate the service: scheduling, publishing to the accounts you connected, and analytics.
• To show you your own performance data retrieved from the platforms you connected.
• To generate content when you ask for it. AI features send the text of your prompt and your workspace’s brand context to our AI provider to produce a draft. Your connected-account tokens and Google user data are never sent to an AI provider.
• To notify you about approvals, failures and account activity.
• To bill you, to support you, and to detect and prevent abuse.
• To measure which pages and marketing campaigns bring people to MultiPost Studio and which of them lead to sign-ups and paying customers, so we can improve the product and decide where to spend effort. We do not use this for advertising, we do not build advertising profiles, and we do not sell it.

Legal bases (EEA, UK, Switzerland and India)

• Providing the service you signed up for (contract): account, publishing, billing, support.
• Security, fraud and abuse prevention (legitimate interests): sign-in logs, device sessions, rate limiting.
• Analytics and campaign measurement (consent): the analytics cookies and the visit and campaign records described above. We only collect these after you accept, and you can withdraw consent at any time from the “Cookie settings” link in the site footer or the cookie policy; withdrawing does not affect anything collected before.
• Legal obligations: tax and invoice records.

How your data is stored and protected

• Social account tokens are encrypted at rest with AES-256-GCM under a dedicated encryption key, separate from the database.
• Passwords are stored only as salted hashes; we never store them in a readable form.
• All traffic to and from the app is served over HTTPS.
• Your data is isolated per workspace, and every request is checked against your role and workspace membership before any record is returned.
• You can see and revoke your active sessions and devices at any time from Settings → Devices.

Who we share it with

We do not sell personal data. We share it only with the service providers needed to run the product, each acting on our instructions:

• Hosting and database — our application host and managed Postgres provider, who store your account and content data.
• Object storage — for the media files you upload.
• The social platforms you connect — we send them the posts you schedule. Their own privacy policies govern what they do with that content once published.
• AI provider — receives prompt text and brand context when you use an AI feature.
• Payment provider — handles card details directly and returns only the subscription status and invoices.
• Email provider — delivers transactional email such as invitations and alerts.
• Analytics provider — Google Analytics (Google LLC) receives usage data from your browser about visits to our site, only where the cookie choices described in the cookie policy allow it.

We may also disclose data where required by law, or to protect the rights and safety of users.

Retention and deletion

We keep your content while your account is active. When an account or organization is deleted, sign-in access is revoked immediately. We are rolling out automated erasure of the underlying workspace content — posts, media and connected-account tokens — on a fixed schedule after that point; that automation is not yet live, so until it is, removal of that content is handled by our team on request rather than automatically. Disconnecting a social account deletes its stored tokens immediately.

Anonymous visit records from our marketing pages are deleted automatically after 400 days. The source and campaign saved with your account are kept with the account and removed when it is erased.

You can request deletion at any time — see our data deletion instructions.

Your rights

You can access, export, correct or delete your data. Most of this is available directly in the app under Settings; for anything else, email us and we will action it within 30 days. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your local data protection authority. If you're in India, see our Data Processing Notice for an itemised breakdown of what we process under the Digital Personal Data Protection Act, 2023.

Cookies

Essential cookies keep you signed in and remember your workspace; they are always on. Analytics cookies (ours and Google Analytics) are off until you accept where the law requires that (the EEA, the UK, Switzerland and India, or anywhere we cannot tell where you are), and elsewhere are on by default with a notice and an equally easy Decline. If your browser sends a Do Not Track or Global Privacy Control signal, analytics stay off everywhere. The cookie policy lists every cookie, what it does and how long it lasts, and has a link to change your choice at any time.

Children

MultiPost Studio is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change how we use your data we will update this page and change the date at the top. Material changes will also be sent to the email address on your account.

Contact

Questions about this policy, or any request about your data: [email protected].