Privacy Policy

We collect information you provide directly when you create an account, subscribe to a plan, or contact us. This includes: • Account Information: Name, email address, password, and company name. • Social Media Credentials: OAuth tokens for connected platforms (Twitter/X, Instagram, LinkedIn, Facebook, YouTube, TikTok, Pinterest, Reddit, Discord, Threads, Mastodon, Bluesky, Telegram, Medium). We store access tokens securely and never store your social media passwords. • Content Data: Posts you create, schedule, and publish through our platform, including text, images, and videos. • Usage Data: Pages visited, features used, posts scheduled, and interactions with the platform. • Payment Information: Billing details are processed securely by Lemon Squeezy. We do not store credit card numbers on our servers.

We use the information we collect to: • Provide, maintain, and improve the Scheduliz platform. • Schedule and publish content to your connected social media accounts. • Generate AI-powered content suggestions, hashtag recommendations, and analytics. • Process payments and manage your subscription. • Send you important service updates, security alerts, and support messages. • Analyze platform usage to improve features and user experience. • Comply with legal obligations.

We do not sell your personal information. We share data only with: • Social Media Platforms: Your content is published to platforms you connect (e.g., Twitter, Instagram) via their official APIs. • Payment Processor: Lemon Squeezy processes your billing information securely. • AI Provider: Content you submit for AI generation is processed by OpenAI. See OpenAI's privacy policy for their data handling practices. • Infrastructure Providers: We use Vercel for hosting and Supabase for database services. • Legal Requirements: We may disclose information if required by law, subpoena, or court order.

We implement industry-standard security measures to protect your information: • All data in transit is encrypted via TLS/HTTPS. • OAuth tokens are stored encrypted in our database. • Passwords are hashed using bcrypt with a salt factor of 12. • API keys are stored as SHA-256 hashes — we never store raw API keys. • We use session-based authentication with secure, HTTP-only cookies. • Access to production systems is restricted to authorized personnel only.

We retain your data for as long as your account is active. When you delete your account: • Personal information is deleted within 30 days. • Published content on social media platforms is not affected (it remains on those platforms). • Anonymized usage analytics may be retained for platform improvement. • Backup copies are purged within 90 days.

Depending on your location, you may have the right to: • Access your personal data we hold. • Correct inaccurate or incomplete information. • Delete your account and associated data. • Export your data in a portable format. • Object to or restrict certain processing. • Withdraw consent for optional data processing. To exercise these rights, contact us at privacy@scheduliz.com.

We use essential cookies for authentication (session cookies). We do not use third-party tracking cookies or advertising cookies. Our session cookie ("scheduliz_session") is required for the platform to function and expires after 30 days.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Your continued use of Scheduliz after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions or concerns, contact us at: Email: privacy@scheduliz.com Support: https://scheduliz.com/contact