Skip to content
MassPublish
Sign inGet started

Privacy Policy

The privacy of everyone who uses masspublish.app is one of our main priorities. Here is what we collect and how we use it.

Last updated June 17, 2026

  • We never store your social media passwords
  • Unlink an account and its tokens are deleted
  • Close your account and your data goes with it
  • Logs are deleted or anonymized within 30 days

1. Information we collect

  • Account data. Your email, name, profile image and password. If you sign up with OAuth (for example Google or LinkedIn), we receive your email, name and photo from that provider.
  • Connected accounts. OAuth access and refresh tokens, scopes and expiry times for X, LinkedIn, Meta (Facebook and Instagram), TikTok, Threads, YouTube (Google), Pinterest and Bluesky.
  • Your content. Texts, images, videos, links, hashtags and metadata you draft or submit, processed and stored temporarily.
  • Logs and usage. IP address, browser type, internet provider, date and time, referring and exit pages, number of clicks.

2. How we use it

  • To provide and maintain multi-platform publishing.
  • To sign you in and confirm your identity on the dashboard.
  • To publish through third-party APIs on your behalf.
  • To monitor stability, fix bugs and prevent fraud.
  • To send updates and answer support requests.

3. OAuth credentials and data protection

Accounts are connected through official OAuth 2.0. MassPublish does not store your social media passwords. To protect sensitive data, including Google user data and OAuth tokens, the policy lists:

  • Encryption in transit with TLS 1.2 or 1.3 over HTTPS.
  • Encryption at rest with AES-256 for tokens and credentials.
  • Least-privilege access, with multi-factor authentication and role-based access for administrators.
  • Tokens kept out of client code, public logs and plain text.
  • Security monitoring, session expiry and regular patching.

Tokens are used only to publish at your command, show channel details and refresh access. Unlinking an account deletes its tokens from our servers immediately and permanently.

4. Third-party platforms

Using MassPublish also means each connected network’s own policies apply.

YouTube API Services (Google user data)

By connecting YouTube you agree to the YouTube Terms of Service (opens in a new tab) and the Google Privacy Policy (opens in a new tab). You can revoke access any time in Google security settings (opens in a new tab).

  • We access your channel ID, name, email, profile image and OAuth tokens.
  • We use them only to publish at your request, show channel details and manage the connection.
  • We keep them while your account is active or until you revoke access.
  • We never sell Google user data or share it, except to fulfil your publishing requests or to comply with law.
  • Use follows the Google API Services User Data Policy (opens in a new tab), including Limited Use.

Meta (Facebook and Instagram), X, LinkedIn, TikTok, Pinterest, Threads and Bluesky are subject to their own developer terms and privacy policies.

5. Retention and deletion

We keep personal data and account credentials only while your account is active. When you close your account, personal data, password hashes and connected tokens are deleted from our live databases immediately. Log files are deleted or anonymized within 30 days.

6. GDPR and CCPA rights

Depending on where you live, you can ask us to:

  • See your data
  • Correct it
  • Erase it
  • Restrict or stop processing
  • Move it elsewhere

7. Contact us

Questions?[email protected]

Email us
MassPublish — Privacy Policy