Privacy Policy
Post Scheduler ("the app") is a private publishing tool operated by Josef Samsel, based in Sweden ("I", "me"). It publishes my own videos to my own YouTube, Instagram and TikTok accounts and reads their performance statistics. This policy explains what data the app handles and what happens to it.
Who this applies to
The app is not open to the public. The only accounts connected to it are mine. It does not collect data about viewers, followers or other users of YouTube, Instagram or TikTok beyond the aggregate statistics those platforms report for my own posts.
Data the app handles
- Account authorization: OAuth access and refresh tokens and basic account identifiers (account ID, username, channel ID) for the accounts I connect.
- Content: the video files, titles, captions and scheduling details I upload for publishing.
- Publishing records: the text sent with each post and the platform's responses to publish requests, kept so every post can be traced. Tokens are removed from these records.
- Performance statistics: aggregate metrics the platforms report for my posts, such as views, reach, watch time, likes, comments, shares and saves.
The app does not collect payment information, does not use cookies or trackers on this website, and does not sell or share data for advertising.
How the data is used
- To publish my videos at the times I choose.
- To keep a record of what was published and why.
- To show me how my posts perform so I can improve future videos.
Use of YouTube API Services
The app uses YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy. You can revoke the app's access to your Google account at any time from Google security settings.
Instagram and TikTok
Instagram data is accessed through the Instagram Platform API under Meta's Privacy Policy. TikTok data is accessed through the TikTok Content Posting API under TikTok's Privacy Policy. Access can be removed in each app's settings (Instagram: Settings → Website permissions → Apps and websites; TikTok: Settings → Security → Manage app permissions).
Where data is stored and who processes it
Data is stored in a database on a server I control. Video files are stored with Cloudflare R2 and Dropbox. Tokens are stored encrypted and never written to logs. Scripts and performance statistics may be sent to Anthropic's Claude API to draft captions and summarize performance. Data is shared with the platforms themselves only as needed to publish posts and read statistics. Nothing is shared with anyone else.
How long data is kept
- Tokens are kept while an account stays connected and are deleted when it is disconnected or access is revoked.
- Data obtained from YouTube is deleted within 30 days after authorization is revoked. Every 30 days the app checks that authorization is still valid and that each stored video still exists.
- Publishing records and statistics are kept for as long as they are useful for running the channels, and deleted on request.
Deleting your data
To delete data the app holds about a connected account, email josefsamsel@gmail.com with the subject "Data deletion" and the account name. Deletion is completed within 7 days, and you will get a confirmation. Revoking access in Google, Instagram or TikTok settings also stops all further access immediately.
Your rights
Under the GDPR you can ask to access, correct, delete or export your personal data, or object to its processing. You can also complain to the Swedish Authority for Privacy Protection (IMY).
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Josef Samsel · josefsamsel@gmail.com