Privacy Policy

Account Information
When you register, we collect your email address and any name or profile information you choose to provide.

Social Media Credentials
When you connect a social media account, we store OAuth access tokens issued by the respective platform (YouTube, Instagram, Facebook, TikTok). These tokens are encrypted at rest using AES-256-GCM encryption and are used solely to publish content on your behalf. We never store your social media passwords.

Uploaded Content
Videos you upload are stored in our secure cloud storage. Metadata including file size, duration, aspect ratio, and titles you provide are stored in our database. We do not analyze or sell your content.

Scheduling Data
We store information about posts you schedule, including platform, scheduled time, captions, and publication status, to operate the scheduling service.

Usage Data
We may collect basic usage information such as which features you use, error logs, and performance data to improve the Service. This data is not linked to identifiable individuals beyond your account.

• To provide the Service: We use your account information, social credentials, and scheduling data to operate the scheduling and publishing features.
• To communicate with you: We may send transactional emails related to your account (e.g. publish confirmations, error alerts). We will not send marketing emails without your consent.
• To improve the Service: Aggregated and anonymized usage data helps us understand how the product is used and where to improve it.
• To maintain security: We use account data to detect and prevent fraud, abuse, or unauthorized access.
• To comply with legal obligations: We may retain or disclose data as required by applicable law.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Uploadly integrates with the following third-party services to deliver its core functionality. Each has its own privacy policy which governs how they handle data shared with them.

All data is stored on servers located in the United States and/or Canada operated by our infrastructure providers. We implement the following security measures:

• OAuth access tokens are encrypted at rest using AES-256-GCM before being stored in the database.
• All data in transit is encrypted using TLS 1.2 or higher.
• Database access is restricted using row-level security policies — you can only access your own data.
• Video files are stored in a private storage bucket accessible only through short-lived signed URLs.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account.
• Video files: Retained until you delete them from the Library or delete your account.
• Access tokens: Retained while the connected account is active. Revocable at any time from Connected Accounts.
• Scheduling history: Retained indefinitely for your reference unless you request deletion.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data (see section below).
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.

Residents of the European Economic Area have additional rights under GDPR. Canadian residents have rights under PIPEDA and applicable provincial legislation. To exercise any of these rights, contact us at joeyzanger@gmail.com.

You can disconnect any social media account at any time from the Connected Accounts page, which removes the stored access tokens for that platform.

To request full deletion of your account and all associated data (including uploaded videos, scheduling history, and account information), email us at joeyzanger@gmail.com with the subject line "Delete My Account". We will process deletion requests within 30 days and confirm once complete.

Note that content already published to third-party platforms (YouTube, Instagram, etc.) is not within our control and must be deleted directly on those platforms.

We use cookies and similar storage mechanisms solely for authentication (session management) and security (CSRF protection). We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but this will prevent you from logging in to the Service.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at joeyzanger@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will make reasonable efforts to notify you (e.g. via email or an in-app notice). Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Uploadly
uploadly.ca
joeyzanger@gmail.com