Privacy Policy
Last updated: October 2026
At Scheduliz, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.
1. Who We Are
Scheduliz is operated by Ahmed Faraz, an individual based in Pakistan. Contact: [email protected].
2. Information We Collect
We collect information you provide directly when you create an account, connect social media accounts, or contact us. This includes:
• Account Information: Name, email address, password, and company name.
• Social Media Credentials: OAuth access tokens for connected platforms (Twitter/X, Instagram, LinkedIn, Facebook, YouTube, TikTok, Pinterest, Reddit, Discord, Threads, Mastodon, Bluesky, Telegram, Medium). We never store your social media passwords.
• Content Data: Posts you create, schedule, and publish through our platform, including text, images, and videos.
• Usage Data: Pages visited, features used, posts scheduled, and interactions with the platform.
• Payment Information: Payments are not currently collected during early access. When paid plans launch, billing will be handled by Paddle as Merchant of Record. We do not store card numbers on our servers.
3. Meta Platforms (Facebook, Instagram, Threads)
When you connect a Facebook Page, an Instagram professional account, or a Threads profile, Scheduliz receives the following data through Meta's official APIs. We request only the permissions needed to publish and manage the content you schedule.
• Account and Page IDs (Facebook user and Page IDs, Instagram business account ID, Threads user ID): to identify which account or Page to publish to and link it to your Scheduliz workspace.
• Account and Page names / usernames: to display your connected accounts so you can choose where each post goes.
• Profile pictures (where the platform provides them): to display your connected accounts in your dashboard.
• Access tokens (user and Page access tokens): to publish the posts you schedule on your behalf. Tokens are never shown to other users and are deleted when you disconnect or remove the channel, or delete your account.
• Post IDs: returned by Meta after a post is published, to link each Scheduliz post to the live post and show its publishing status.
• Post insights (only if and when analytics for Meta platforms is added): to show you performance metrics for your own posts.
We never request or store your Facebook, Instagram, or Threads password, and we do not access your private messages or friends list.
Data received from Meta platforms is NEVER sold and NEVER used for advertising or ad targeting. It is not shared with data brokers or advertisers, and is used only to provide the features described above.
To delete this data, see our Data Deletion page: https://scheduliz.com/data-deletion
4. How We Use Your Information
We use the information we collect to:
• Provide, maintain, and improve the Scheduliz platform.
• Schedule and publish content to your connected social media accounts.
• Generate AI-powered content suggestions, hashtag recommendations, and analytics.
• Manage your subscription once paid plans launch.
• Send you important service updates, security alerts, and support messages.
• Analyze platform usage to improve features and user experience.
• Comply with legal obligations.
5. Data Sharing
We do not sell your personal information. We share data only with:
• Social Media Platforms: Your content is published to platforms you connect (e.g., Twitter, Instagram) via their official APIs.
• Payment Provider: No payments are collected during early access. When paid plans launch, Paddle will process billing as Merchant of Record.
• AI Provider: Content you submit for AI generation is processed by Google Gemini. See Google's privacy policy for their data handling practices.
• Infrastructure Providers: We use Vercel for hosting and Supabase for database services.
• Legal Requirements: We may disclose information if required by law, subpoena, or court order.
6. Data Security
We implement industry-standard security measures to protect your information:
• All data in transit is encrypted via TLS/HTTPS.
• OAuth access tokens are stored in our database, which is encrypted at rest by our database provider. Tokens are never exposed to other users.
• Passwords are hashed using bcrypt with a salt factor of 12.
• API keys are stored as SHA-256 hashes — we never store raw API keys.
• We use session-based authentication with secure, HTTP-only cookies.
• Access to production systems is restricted to authorized personnel only.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account:
• Your personal information, connected channels, access tokens, and content are deleted immediately.
• Published content on social media platforms is not affected (it remains on those platforms).
• Anonymized usage analytics may be retained for platform improvement.
• Backup copies are purged within 90 days.
8. Data Deletion
You can delete your data at any time:
• Disconnect a channel: Settings → Connected Accounts → Disconnect deletes that channel's access tokens and stored platform identifiers.
• Delete your account: Settings → Danger Zone → Delete my account permanently deletes your account and all associated data.
• Request deletion by email: Email [email protected] and we will delete all your data within 30 days.
Full instructions, including how to revoke Scheduliz's access from Facebook, Instagram, and Threads, are on our Data Deletion page: https://scheduliz.com/data-deletion
9. Your Rights
Depending on your location, you may have the right to:
• Access your personal data we hold.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent for optional data processing.
To exercise these rights, contact us at [email protected].
10. Cookies
We use essential cookies for authentication (session cookies). We do not use third-party tracking cookies or advertising cookies. Our session cookie ("scheduliz_session") is required for the platform to function and expires after 30 days.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Your continued use of Scheduliz after changes take effect constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions or concerns, contact:
Operator: Ahmed Faraz, Pakistan
Email: [email protected]
Support: https://scheduliz.com/contact