Privacy Policy

Introduction

Welcome to TimeToPost. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our social media scheduling service.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name and email address when you create an account
• Profile information and preferences
• Payment information (processed securely through third-party payment processors)
• Social media account credentials (stored securely and encrypted)
• Content you create or upload (posts, images, videos)

Automatically Collected Information

When you use TimeToPost, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Log data and error reports

How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our service
• Processing your transactions and managing subscriptions
• Scheduling and publishing your social media posts
• Sending you updates, notifications, and marketing communications
• Improving and optimizing our service
• Detecting and preventing fraud or abuse
• Complying with legal obligations
• Analyzing usage patterns and service performance

Data Sharing and Disclosure

We may share your information in the following circumstances:

Social Media Platforms

When you connect an account, we send the content you have written and approved to that platform in order to publish it, and only at the time you chose. We never post on your behalf without an explicit action from you. Below is exactly what we receive and store for each platform we support.

TikTok

If you connect a TikTok account through TikTok Login Kit, we receive and store your TikTok open ID, union ID, display name and avatar image URL, together with the access and refresh tokens TikTok issues. We use the display name and avatar only to show you which TikTok account a post will be published to, and the open ID to identify the connection. We request the scopes user.info.basic and video.publish. We do not request any Display API scope, so we cannot read your videos, your followers, or your statistics. When you publish, we send your video file, your caption, and the audience, comment, duet, stitch and commercial content settings you selected, to the TikTok Content Posting API. We keep TikTok tokens only while the account is connected: disconnecting it revokes the token with TikTok and deletes it from our systems. Your use of TikTok through TimeToPost is also governed by the TikTok Privacy Policy.

Meta: Facebook, Instagram and Threads

If you connect a Facebook Page, we receive and store your Page ID, Page name and a Page access token, obtained with the permissions pages_show_list, pages_read_engagement and pages_manage_posts. If you connect an Instagram professional account, we receive and store your Instagram user ID, username and an access token, obtained with instagram_business_basic, instagram_business_content_publish and instagram_business_manage_comments. If you connect Threads, we receive and store your Threads user ID, username and an access token, obtained with threads_basic and threads_content_publish. We use these to list the Pages or accounts you manage, to publish the posts you schedule, and to show you which account a post is going to. We do not use Meta data for advertising, and we do not sell it. Disconnecting an account deletes the stored tokens. Your use of these platforms is also governed by the Meta Privacy Policy.

X, formerly Twitter

If you connect an X account, we receive and store your X user ID, handle, display name, profile image URL and the access and refresh tokens X issues, and we use them to publish the posts you schedule and to show you which account a post is going to.

Deleting platform data

You can disconnect any social account at any time from Settings, Connected Accounts, which revokes the token with the platform where the platform supports revocation, and deletes it from our systems. You can delete your whole TimeToPost account, and every connected account and post with it, from the Profile screen in our mobile app or by contacting us. Full instructions are on our data deletion page.

Service Providers

We work with third-party service providers who perform services on our behalf, such as:

• Payment processors
• Cloud hosting providers
• Analytics services
• Customer support tools

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure storage of social media credentials
• Regular security audits and updates
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your content and data
• Opt-out: Unsubscribe from marketing communications
• Withdraw consent: Revoke permissions for data processing

To exercise these rights, contact us at privacy@timetopost.com

Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. Note that disabling cookies may affect some features of our service.

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it by law.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us:

• Email: privacy@timetopost.com
• Support: hello@timetopost.co