Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, including your name, email address, and phone number.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, communicate with you, and ensure platform security.

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as required by law.

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Your Rights

You have the right to access, update, or delete your personal information. You may also opt out of certain communications from us.

Third-Party Platform Integrations

Our service lets you connect accounts from third-party platforms — including Meta Platforms, Inc. (Facebook and Instagram) — so that you can schedule and publish content across them from a single place. This section explains the data we receive from those platforms, how we use it, and the controls you have over it.

6.1 Data We Receive from Meta (Facebook and Instagram)

When you authorize our application through Facebook Login or Instagram Business Login, Meta provides us with a limited set of information necessary to operate the features you have requested:

Access tokens: OAuth credentials issued by Meta that authorize our service to act on your behalf within the scope you approved.
Account identifiers: the numeric IDs of the Facebook Pages and Instagram Professional/Creator accounts you choose to connect.
Public profile information: account username, display name, profile picture, account type (Business or Creator) and aggregate public metrics such as follower and media counts. This information is shown inside the dashboard so you can confirm which account you are publishing to.
Permission status: the list of permissions you have granted, used only to verify that the account can perform the publishing actions you request.

We do not request or store private messages, direct messages, comments, audience insights, payment information, or any data unrelated to content publishing.

6.2 How We Use This Data

Data obtained from Meta is used exclusively to provide the features you have explicitly requested:

To display your connected accounts inside the dashboard so that you can identify and manage them.
To publish the posts, reels, stories or carousels that you create and schedule within our service to the Facebook Pages and Instagram accounts you selected.
To keep your connection active by refreshing long-lived access tokens before they expire, so that scheduled posts can still be delivered at their planned time.

We do not use Meta data for advertising, profiling, resale, model training, or any purpose beyond delivering the publishing features of our service.

6.3 Storage, Security and Retention

Access tokens and related credentials are stored on secure infrastructure with encryption at rest and access restricted to the minimum set of components required to execute scheduled publications. Public profile fields (username, display name, profile picture, follower and media counts) are stored only so that the dashboard can display your connected accounts.

We retain this information only for as long as your account remains connected. When you disconnect an account from within our service, delete your user account, or revoke our access from Meta’s own settings (Facebook → Settings → Business Integrations; or the Instagram app), the associated tokens and cached profile data are removed from our active systems.

6.4 Data Sharing

We do not sell, rent, trade or otherwise disclose data obtained from Meta to advertisers, data brokers or any unrelated third parties. The only data sent back to Meta is the content you have created and scheduled — submitted through Meta’s official Graph API for the purpose of publishing it to your connected accounts.

6.5 Your Control

You remain in full control of the data Meta shares with our service:

You may disconnect any connected account at any time from the settings area of our dashboard.
You may revoke our application’s access directly from Meta, which will immediately invalidate the access token we hold.
You may request deletion of all data associated with your account by using the account deletion option in the dashboard or by contacting us at the address listed below.

Our use of information received from Meta adheres to Meta’s Platform Terms and Developer Policies. For details on how Meta itself handles your information, please review Meta’s Privacy Policy.

Google API Services (YouTube)

Our service lets you connect your YouTube channel so that you can upload and manage video content directly from our platform. This section explains the data we receive from Google, how we use it, and the controls you have over it.

7.1 OAuth Scopes Requested

Our application requests only the minimum Google OAuth scopes required to deliver the publishing features:

https://www.googleapis.com/auth/youtube.upload — used exclusively to upload videos that you create and schedule within our service to your own YouTube channel.
https://www.googleapis.com/auth/youtube.readonly — used exclusively to read your channel name and thumbnail so that the dashboard can display which account is connected.

7.2 Data We Receive from Google (YouTube)

When you authorize our application through Google OAuth, Google provides us with a limited set of information necessary to operate the features you have requested:

Access tokens and refresh tokens: OAuth credentials issued by Google that authorize our service to act on your behalf within the scope you approved.
Channel information: your YouTube channel name and profile thumbnail, used to display your connected account in our dashboard.

We do not request or store private messages, analytics data, subscriber lists, revenue information, or any data unrelated to video publishing.

7.3 How We Use This Data

Data obtained from Google is used exclusively to provide the features you have explicitly requested:

To display your connected YouTube channel inside the dashboard so that you can identify and manage it.
To upload videos that you create and schedule within our service to your YouTube channel with the title, description, and visibility settings you specify.
To keep your connection active by refreshing access tokens before they expire, so that scheduled uploads can still be delivered at their planned time.

We do not use Google data for advertising, profiling, resale, model training, or any purpose beyond delivering the publishing features of our service.

7.4 Storage, Security and Retention

Access tokens, refresh tokens, and related credentials are stored on secure infrastructure with encryption at rest and access restricted to the minimum set of components required to execute scheduled uploads. Channel profile fields (name, thumbnail) are stored only so that the dashboard can display your connected account.

We retain this information only for as long as your account remains connected. When you disconnect your YouTube account from within our service or delete your user account, the associated tokens and cached profile data are removed from our active systems.

7.5 Data Sharing

We do not sell, rent, trade or otherwise disclose data obtained from Google to advertisers, data brokers or any unrelated third parties. The only data sent to Google is the video content you have created and scheduled — submitted through Google's official YouTube Data API for the purpose of uploading it to your channel.

7.6 Your Control

You remain in full control of the data Google shares with our service:

You may disconnect your YouTube account at any time from the settings area of our dashboard.
You may revoke our application's access directly from your Google Account settings (myaccount.google.com → Security → Third-party apps), which will immediately invalidate the tokens we hold.
You may request deletion of all data associated with your account by using the account deletion option in the dashboard or by contacting us at the address listed below.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. For details on how Google itself handles your information, please review Google's Privacy Policy.

Browser Extension (Multpost Connector)

To connect supported creator platforms — currently Privacy (privacy.com.br) — we offer an optional browser extension called Multpost Connector. The extension lets you link your account without ever typing your platform password into our service. This section explains what the extension accesses, how the data is used, and the controls you have over it.

8.1 Data the Extension Accesses

After you install the extension and log in to the platform in your own browser, the extension reads — only on that platform's pages — the information needed to link your account:

Session token: the authorization token (Bearer JWT) that the platform itself sends with your logged-in requests, read from the request headers.
Session cookies: the cookies the platform set for your logged-in session, including HTTP-only cookies.

The extension does not ask for or store your password, and does not read your browsing history, messages, content, or any data on sites other than the platform you are connecting and our own website.

8.2 How We Use This Data

The session token and cookies are used exclusively to act on your behalf for the publishing features you requested:

To identify your connected account and display it in the dashboard.
To publish and schedule the content you create within our service to your connected account.
To refresh your session before it expires so that scheduled posts can still be delivered at their planned time.

We do not use this data for advertising, profiling, resale, model training, or any purpose beyond delivering the publishing features of our service.

8.3 Storage, Security and Retention

The session token and cookies are transmitted only to your authenticated Multpost account over a secure connection and are stored encrypted at rest, with access restricted to the minimum set of components required to execute scheduled publications. We retain them only for as long as your account remains connected.

8.4 Data Sharing

We do not sell, rent, trade or otherwise disclose this data to advertisers, data brokers or any unrelated third parties. The only data sent to the connected platform is the content you have created and scheduled, submitted for the purpose of publishing it to your account.

8.5 Your Control

You may disconnect a connected account at any time from the settings area of our dashboard, which removes the stored session data.
You may uninstall the extension at any time from your browser's extensions page.
You may request deletion of all data associated with your account by using the account deletion option in the dashboard or by contacting us at the address listed below.

Google Drive (auto-import source)

You can optionally use a Google Drive folder as a source for scheduled auto-posts. You grant access by sharing a specific folder with our application's service-account email as a Viewer — there is no Google login or account-wide access. We only read the folder(s) you explicitly share.

What we read: the image and video files in the shared folder, each file's modification time (to pick the most recent ones) and its "description" field (used as the post caption).
How we use it: to download the files you scheduled and publish them to the social accounts you selected, at the times you configured.
Your control: stop access at any time by un-sharing the folder in Google Drive, or by removing the Drive source from your dashboard. We do not modify or delete anything in your Drive.

We do not sell or share this data with third parties, and we do not access any files outside the folder you shared.

Contact Information

If you have any questions about this Privacy Policy, or if you would like to exercise any of your rights (including deletion of your data), please contact us at:

Primary: support@multpost.app
Alternate: multpostapp@gmail.com

Last updated: June 4, 2026