Privacy Policy

Last updated: 14 June 2026

This Privacy Policy explains how Postpilot ("Postpilot", "we", "us") collects, uses, shares, and protects your information when you create an account and use our service to schedule and automatically publish your own short-form videos to your own connected TikTok, YouTube, and Instagram accounts. Postpilot is operated from France. By using Postpilot, you agree to this Policy.

1. Information we collect

Account information

Your email address and name, when you sign up with email or with Google Sign-In.
A hashed password (if you sign up with email). We never store your password in clear text.

Connected social accounts

When you connect a social account, we receive, via each platform's official API and only with your authorization:

TikTok — a unique account identifier (open ID), display name and avatar (user.info.basic), and access tokens to upload and publish to your account (video.upload, video.publish).
YouTube / Google — your channel identity and an access token to upload videos to your channel (youtube.upload).
Instagram / Meta — your professional account identifier and a token to publish content to your account (instagram_business_content_publish).

Content

The videos and captions you upload and choose to publish, and the schedule you set.

Payment

If you subscribe, payments are processed by Stripe. We receive a customer/subscription identifier and your plan status. We never receive or store your full card details — they are handled directly by Stripe.

Technical

A single session cookie to keep you logged in, and basic logs needed to operate and secure the service.

We do not collect your social passwords, private messages, or browsing activity.

2. How we use your information

To authenticate you and keep your session valid.
To upload and publish your own videos to your own connected accounts, at the times you choose.
To notify you about the status of your posts.
To process your subscription and provide support.

We never post to any account other than the ones you connected, and never publish third-party content on your behalf.

3. How we share information

We do not sell or rent your information. We share it only with the service providers strictly needed to operate Postpilot:

TikTok, YouTube (Google) and Instagram (Meta) — to publish the content you ask us to publish, over their official APIs.
Stripe — to process subscription payments.
Our hosting provider, to run the service.

4. Platform compliance

Our use of information from TikTok APIs follows the TikTok Developer Terms of Service. Our use of information from Meta/Instagram follows the Meta Platform Terms.

Postpilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained from YouTube/Google is used solely to provide and improve the publishing features you explicitly request, and is never used for advertising or sold to third parties.

5. Storage, security & retention

Access tokens and content are stored securely and used only for the purposes above. We keep tokens only while your account stays connected, and content only as long as needed to publish it and show you your history. When you disconnect an account or delete your Postpilot account, the related tokens and content are deleted.

6. Your rights & data deletion

You can, at any time:

Disconnect any social account from your dashboard, which removes its stored tokens.
Revoke Postpilot's access directly from the platform (e.g. TikTok → Security & permissions → Manage app permissions; Google → Account → Security → Third-party access; Instagram → Settings → Apps and websites).
Request deletion of your account and all associated data, or a copy of your data, via our support page. We act on deletion requests promptly.

If you are in the EU/EEA, you have the rights granted by the GDPR (access, rectification, erasure, portability, objection). Our legal basis for processing is the performance of our contract with you and your consent.

7. Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

8. Children

Postpilot is not directed to children. You must be at least 18 years old (or the age of majority where you live) to use it.

9. International transfers

The platforms and providers we use may process data outside your country. We rely on their official APIs and contractual safeguards for any such transfer.

10. Changes

We may update this Policy. Material changes will be reflected by the "Last updated" date above.

11. Contact

For any privacy question or a data deletion request, please contact us.