Privacy Policy

Last updated: May 25, 2026

1. What we collect

VidPost collects the email address and password (hashed) you provide at signup, the social media account profile data (username, avatar, user ID) returned by each platform's OAuth flow, and the media files and captions you upload to publish.

2. Tokens & encryption

OAuth access tokens and refresh tokens are encrypted with AES-256-GCM before being stored. We never expose tokens to the browser and never share them with third parties.

3. Media storage

Uploaded videos and images are stored on Cloudflare R2. They are accessible at a public URL solely so the destination platforms can ingest them; the URL is not indexed or shared elsewhere by VidPost.

4. How we use your data

• To authenticate you to your VidPost account.
• To publish content on your behalf to the platforms you've connected.
• To display your post history and account status in the dashboard.

5. Sharing

We do not sell your data. We share content with the social platforms you connect (TikTok, Instagram, YouTube, LinkedIn, Pinterest) only when you publish.

6. Deletion

Disconnecting an account removes its tokens from our database. Deleting your VidPost account removes all associated rows. To request deletion, email support@vidpost.app.

7. Contact

Questions? Email support@vidpost.app.