Loading…

Capabilities Content Creators Small Business Agencies Pricing

Log in Start free

Privacy policy

Privacy policy

Your data is yours. We explain exactly what we collect, why and how we protect it.

Last updated: May 21, 2026

1. 30-second summary
2. What information we collect
3. How we use your information
4. Artificial intelligence
5. Google user data (YouTube Data API Services)
6. Who we share information with
7. Security
8. Your rights (GDPR / LGPD)
9. Data retention
10. Minors
11. Changes to this policy
12. Contact

1. 30-second summary

We only collect what is necessary for the service to work.
Your social network OAuth tokens are encrypted with AES-256-GCM.
We do not sell your data nor share it with third parties for marketing.
We do not use your content to train AI models.
You can export and delete everything whenever you want.
We comply with GDPR (EU), LGPD (Brazil) and Law 25.326 (Argentina).

2. What information we collect

Account information:

Email, name and password (encrypted with bcrypt) when you register.
Optional profile photo.
Billing information (processed by Stripe — we do not have access to the card number).

Information from your connected networks (incl. Pinterest):

OAuth tokens to publish on networks you connect (Pinterest, Instagram, TikTok, Facebook, YouTube, LinkedIn, X and others), AES-256-GCM encrypted at rest. We never ask for or store your Pinterest password or session cookies: access is only via each network's official OAuth.
Public account metadata: name, ID, photo and, when the API exposes it, follower count. On Pinterest, also the boards needed to choose where a Pin is published.

Smart content platform for e-commerce stores. Distribute across every channel, measure real ROI and learn what is going viral in your niche.

Product

Capabilities
Pricing
Changelog
Roadmap
Integrations

Company

Content creators
Small business
For agencies
About FanpageSocial
Customer stories
Blog
Work with us3 open
Contact

Resources

Documentation
Help center

Content and metrics of posts YOU create or schedule in FanpageSocial (e.g. Pins on Pinterest). We only act on your behalf when you start or schedule a specific post; we do not combine data across users' accounts or sell it to third parties.

Usage information:

Technical logs (IP, user agent, errors) — retained 30 days for debugging.
Product events (which features you use) — anonymized to improve the service.
Stripe information for billing.

3. How we use your information

Provide the service: connect your accounts (e.g. Pinterest via OAuth), publish or schedule the content you choose on each network, show metrics for those posts, and run generative AI only with the input you send.
Process payments via Stripe.
Improve the product (aggregated and anonymized analysis).
Communicate important updates (incidents, changes in terms).
Marketing only if you explicitly subscribed to the newsletter.
Detect abuse and protect the integrity of the platform.

What we do NOT do: we do NOT sell your data, we do NOT share it with advertising networks, we do NOT use it to train third-party AI models.

4. Artificial intelligence

FanpageSocial uses AI providers (Groq, OpenAI, Anthropic) to generate captions, transcribe audio and other tasks. When we send your content to these providers:

We only send what is strictly necessary for the requested task.
We configure providers to NOT retain your data nor use it for training (model improvement opt-out).
Providers process on servers with SOC 2 certification.

5. Google user data (YouTube Data API Services)

FanpageSocial uses the YouTube Data API Services so you can publish to a YouTube channel you own. Connecting a channel is optional: it only happens when you choose YouTube as a destination and complete Google's consent screen.

By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.

What we request and why:

youtube.upload — to upload to your channel the videos you explicitly submit from FanpageSocial, with the title and description you wrote. We never upload anything you have not submitted.
youtube.readonly — to identify the channel you connected (name, handle and avatar, shown back to you in Channels) and to display the metrics of the posts FanpageSocial published on it.

Limited Use: FanpageSocial's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we never do with Google data:

We do not sell it, and we do not transfer it to third parties except as strictly necessary to provide the feature you requested, to comply with the law, or with your explicit consent.
We do not use it for advertising or ad targeting of any kind.
We do not use it to train AI models, neither ours nor third-party ones.
No human reads it, except with your explicit consent, for security purposes such as investigating abuse, to comply with the law, or when the data is aggregated and anonymized for internal operations.

Storage, revocation and deletion:

Access and refresh tokens are encrypted at rest with AES-256-GCM. We never store your Google password.
When you disconnect a channel from Channels, FanpageSocial revokes the token with Google and deletes the stored credentials.
Deleting your FanpageSocial account deletes them as well.
You can revoke FanpageSocial's access at any time from the Google security settings page without going through FanpageSocial.

6. Who we share information with

We share the minimum necessary data with:

Stripe: to process payments.
Supabase: database + auth (hosting in SOC 2 regions).
Vercel: application hosting.
AI providers (Groq, OpenAI, Anthropic) only when you trigger AI functions.
Social networks (Pinterest and others) that you explicitly connect (Pinterest, Instagram, TikTok, etc.). We publish content on your behalf only with your OAuth authorization and when you choose or schedule each post. We do not use Pinterest data for advertising outside Pinterest or share it with third-party ad networks.

All are under data processing agreements (DPA) that require equivalent levels of protection.

7. Security

TLS 1.3 encryption in transit.
AES-256-GCM encryption for OAuth tokens at rest.
Row Level Security (RLS) in PostgreSQL per workspace.
Daily encrypted automatic backups.
Annual security audits.
2FA available (recommended for admins).
Incident notification in less than 72 hours.

8. Your rights (GDPR / LGPD)

You have the right to:

Access all your data from Settings → Account → Export.
Correct inaccurate information.
Delete your account and associated data (90 days grace for reversal).
Request that we limit processing.
Portability: export in standard JSON format.
Object to processing if you have legitimate reasons.
File a complaint with your local data protection authority.

To exercise these rights, contact us at [email protected]. We respond in less than 30 days.

9. Data retention

While you have an active account, we keep your data.
Upon account closure: 90 days soft-delete (recoverable).
After 90 days: permanent deletion.
Technical logs: 30 days.
Billing logs: 7 years (tax requirement).

10. Minors

FanpageSocial is NOT directed to people under 18 years old. If we discover we have collected data from a minor, we delete it immediately.

11. Changes to this policy

If we modify this policy, we will notify you by email 30 days in advance when the changes are material. Minor changes (typos, clarifications) are published directly.

12. Contact

Privacy questions? [email protected]

DPO (Data Protection Officer): [email protected]

© 2026 FanpageSocial · Yanselmask, Inc.Terms Privacy Cookies DPA

All systems operational