Privacy Policy | Veypost

1. Overview & Commitment

Veypost ("we", "our", "us") operates the Veypost SaaS social media publishing and management platform. We take your privacy and the security of your data seriously. This Privacy Policy details the types of information we collect, how it is processed and protected, and your rights concerning your personal data and connected social accounts.

2. Information We Collect

We collect and process the following categories of data solely to provide our publishing and scheduling service:

Account Credentials: Your email address and workspace name. Supabase Auth manages your password and login sessions.
Social Media OAuth Tokens: Short-lived and long-lived OAuth access tokens for Facebook Pages, Instagram Professional accounts, Threads profiles, and TikTok accounts. All provider tokens are encrypted at rest using AES-256-GCM authenticated encryption.
Uploaded Media Assets: Images, videos, captions, and scheduling metadata you choose to publish or draft.
Performance & Delivery Telemetry: Publication timestamps, post identifiers, delivery statuses, and high-level engagement metrics returned by provider APIs.

3. How We Use Your Data

Your information is used strictly to fulfill your direct instructions within the application:

Publishing and scheduling posts to your explicitly authorized social accounts.
Proactively refreshing expiring OAuth access tokens to maintain uninterrupted scheduling.
Generating AI-assisted captions and hooks via Google Gemini only upon your explicit request.
When paid subscriptions are enabled, processing subscription payments and invoices via Stripe (we never store raw credit card numbers).

4. Multi-Tenant Isolation & Zero Data Selling

Veypost enforces strict multi-tenant boundary checks across all databases and file storage buckets. We do NOT sell, rent, or monetize your personal data, connected social tokens, or media assets with third-party advertisers or data brokers under any circumstances.

5. Meta Data Deletion & Account Revocation

In accordance with Meta Platform and GDPR requirements, you have the right to request the permanent deletion of your data at any time:

In-App Channel Disconnect: Disconnecting any account in the Channels view immediately purges all stored access tokens from our database.
Meta App Settings: Automated provider deletion is not available in this build. A callback does not currently confirm that stored data has been erased. Contact us to request deletion; completion must be confirmed after processing.
Manual Data Purge: You may request complete deletion of your workspace, media, and logs by emailing privacy@veypost.com.

6. Contact & Inquiries

For security, privacy, or GDPR inquiries, please contact our privacy contact at privacy@veypost.com.