Privacy Policy

Multipost · Effective 11 August 2026

Multipost lets a person publish one video or photo carousel to their own TikTok, Instagram, and YouTube accounts in a single action. This policy explains what the service collects, why, and how long it keeps it.

1. Information we collect

• Account identifiers. When you connect a TikTok, Instagram, or YouTube account, we store the platform's user ID and display name for that account so we can show you which accounts are connected.
• Access and refresh tokens. Issued by the platform when you authorize Multipost. Stored encrypted at rest and used only to publish content you have explicitly submitted.
• Content you submit. The video or images you upload and the caption and title text you enter.
• Publishing records. For each post, which platforms it was sent to, whether each one succeeded, and any error the platform returned.

2. What we do not collect

• We do not read, download, or analyze your existing posts.
• We do not collect analytics, follower data, comments, or messages.
• We do not use your content to train machine learning models.
• We do not place advertising or tracking cookies.

3. How we use it

Solely to perform the publishing action you request, to show you its per-platform status, and to let you retry a platform that failed. We do not use your information for any other purpose, and we do not sell or rent it.

4. Media storage and retention

Instagram and TikTok require media to be fetched from a public URL rather than uploaded directly. To satisfy this, files you submit are temporarily placed in object storage behind a short-lived signed URL, and are deleted once the destination platform confirms it has retrieved the media. A storage lifecycle rule deletes any remaining object within 24 hours as a backstop. We do not retain your media beyond that window.

5. Sharing

Your content and tokens are transmitted only to the platform you chose to publish to, and to the infrastructure providers required to operate the service (a database host and an object storage provider). We do not share your information with anyone else except where required by law.

6. Your choices

• Disconnect an account at any time from within Multipost. Doing so deletes the stored tokens for that account.
• Revoke access directly from the platform: TikTok, Instagram, and Google each provide a connected-apps settings page.
• Delete your data. Contact us and we will delete your account, all connected account records, and all publishing history.

7. Security

Platform tokens are encrypted at the application layer before being written to the database. Credentials are held in environment configuration and are never committed to source control. No system is perfectly secure, and we cannot guarantee absolute security.

8. Children

Multipost is not directed to children under 13, and we do not knowingly collect information from them.

9. Changes

If this policy changes materially, we will update the effective date above and, where the change affects how your information is used, notify you within the application.

10. Contact

Questions or deletion requests: ericjiangyt182+multipost@gmail.com