LEGAL

Privacy Policy

Effective September 21, 2026

Omnipost (“we,” “us,” or “our”) provides tools that help users analyze, prepare, schedule and publish content to connected social-media accounts. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

  • Account information: your email address, name and authentication identifiers when you sign in.
  • Uploaded content: images, videos, filenames, captions, descriptions, schedules and AI-generated analysis.
  • Connected-platform data: OAuth access and refresh tokens, token expiry information, channel or Page identifiers and names, Instagram professional-account information, and publishing results.
  • Service records: connection events, publishing status, failures and security/audit information needed to operate and protect the service.

Google and YouTube data

When you connect Google or YouTube, Omnipost may access your basic Google identity, identify the YouTube channel you authorize, upload videos you approve, and read the result of those uploads. Omnipost uses Google user data only to provide and improve the user-facing features you request. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Meta data

When you connect Facebook or Instagram, Omnipost may access the Pages you authorize, linked Instagram professional-account details, and permissions required to publish the content you approve. We use this data only to provide connection and publishing functionality.

How we use information

We use information to authenticate users; store and analyze uploaded media; generate draft copy; connect authorized social accounts; publish or schedule approved content; show publishing history; maintain security; troubleshoot failures; and comply with law.

Sharing

We do not sell your personal information. We share information only with service providers needed to operate Omnipost—such as Supabase, Vercel, Google Gemini, Google/YouTube and Meta—or when required by law. These providers process information under their own terms and privacy practices.

Storage, security and retention

OAuth tokens are encrypted server-side. Uploaded media is stored in private storage and disclosed through temporary signed links or server-side uploads when needed to perform an approved action. We retain account and service data while your account is active and as reasonably necessary for operation, security and legal obligations. Deletion requests are handled as described on our Data Deletion page.

Your choices

You may disconnect social accounts, revoke access through Google or Meta settings, and request access, correction or deletion of your Omnipost data. Revoking a provider stops future access but does not by itself remove information already stored in Omnipost; use the deletion process for that.

Children

Omnipost is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy as the product changes. The effective date above will be updated when material revisions are made.

Contact

Questions or privacy requests can be sent to sumith03327@gmail.com.