Privacy Policy

Last updated: 20 May 2026

This Privacy Policy explains how Social AutoPost Pro ("we", "us", the "Service") collects, uses, and protects your information when you use our social media scheduling and publishing platform at social-post.cchk.info.

1. Information we collect

Account information — your name, email address, and password (stored hashed) when you register.
Connected social accounts — OAuth access tokens for the social platforms you connect (Facebook, Instagram, X, LinkedIn, Pinterest, and others), used solely to publish content you create.
Content you create — the posts, captions, media URLs, and schedules you submit through the Service.
Usage data — basic analytics about how you use the Service (posts created, published, scheduled) to power your dashboard and improve the product.

2. How we use your information

To publish and schedule content to the social accounts you have connected.
To display your posting history and analytics back to you.
To authenticate you and secure your account.
To communicate with you about your account, security, and service updates.

3. Social platform tokens

When you connect a social account, the platform issues an access token that authorizes posting on your behalf. That token is held by our self-hosted publishing backend (built on Postiz), not in the main application database — the app stores only a reference to the connected account (its name and an internal connection id). Tokens are used only to perform actions you initiate, and are never sold or shared with third parties. You can disconnect any account at any time from the Connected Accounts page, which revokes that access immediately.

4. Data sharing

We do not sell your personal information. We share data only with the social platforms you explicitly connect (to publish your content) and with infrastructure providers that operate the Service on our behalf, under confidentiality obligations.

5. Data retention

We retain your account data and content for as long as your account is active. When you delete your account, your personal data and connected-account references are removed, except where retention is required by law. You can disconnect any individual social account at any time, which revokes its access at the platform immediately.

6. Security

All traffic is encrypted in transit using TLS. Account passwords are hashed (bcrypt) and never stored in plain text. Multi-factor authentication is supported. Social-platform tokens are held by our self-hosted publishing backend and used only to perform actions you initiate.

7. Your rights

You may access, correct, export, or delete your personal data at any time from your account settings, or by contacting us. Depending on your location, you may have additional rights under GDPR or other privacy laws.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and reflected by the "Last updated" date above.

9. Contact

Questions or requests about this policy can be sent to [email protected].