This Privacy Policy explains what data ScheduleLater (the “Service”) collects, how we use and store it, and the choices you have. By using the Service you agree to this policy.
Information we collect
- Account information — your name, email, and workspace settings.
- Content you create — the posts, captions, media, and schedules you author.
- Connected-platform data — when you connect a social account, we store an encrypted access credential and cached data returned by that platform’s API (for example, your channel or profile name and post analytics) so we can publish on your behalf and show your results.
YouTube API Services
ScheduleLater’s YouTube features use YouTube API Services. By using them you also agree to the YouTube Terms of Service, and your data is handled in accordance with the Google Privacy Policy.
When you connect a YouTube channel, with your authorization ScheduleLater:
- reads your channel’s basic information (name, id, and thumbnail) to identify the connected account;
- uploads and publishes videos to your channel at the times you schedule;
- reads your video and channel analytics to show performance inside the app.
We store an encrypted OAuth token for your channel and a cached copy of the analytics and video status we retrieve. We do not sell this data, use it for advertising, or share it with third parties for their own purposes.
Storage, refresh, and deletion of YouTube data
- Refresh or purge within 30 days. Cached YouTube data (analytics snapshots and rollups) is refreshed or automatically deleted within 30 days.
- Revoke on disconnect. When you disconnect a YouTube channel or delete your account, we immediately revoke the OAuth grant with Google, delete the stored credential, and delete the cached YouTube data we hold for that channel. Content you authored in ScheduleLater is kept as your own record, separate from cached API data.
- Revoke at Google. You can also review and revoke ScheduleLater’s access at any time from your Google Account security settings.
TikTok
ScheduleLater’s TikTok features use the TikTok API. When you connect a TikTok account, with your authorization ScheduleLater:
- reads your profile’s basic information (open id, username, display name, avatar, and follower count) to identify the connected account;
- reads your account’s current posting settings — the privacy levels available to you, whether comments, duets, or stitches are turned off, and your maximum video length — immediately before each post, so the app never offers you an option your account does not allow;
- posts the videos and photos you schedule, with the visibility and disclosures you select.
We store an encrypted authorization for your account. We do not store a copy of your TikTok posting settings — they are read fresh each time and discarded — and TikTok does not make post analytics available to this app, so we hold none. We do not sell your data, use it for advertising, or share it with third parties for their own purposes.
- Revoke on disconnect. When you disconnect a TikTok account or delete it, we immediately revoke the authorization with TikTok and delete the stored credential. Content you authored in ScheduleLater is kept as your own record.
- Reconnecting after a year. TikTok authorizations expire 365 days after you first grant them, and renewing them does not extend that date. We show a reminder on the Accounts page before yours lapses; reconnecting grants a fresh year.
- Revoke at TikTok. You can also review and remove ScheduleLater’s access at any time from the TikTok app, under Settings and privacy → Security and permissions.
How we use your data
We use your data to operate the Service — to publish your scheduled content, show your analytics, secure your account, and support you. We use encrypted credentials only to perform the actions you authorize on the connected platform.
Security
Platform credentials are encrypted at rest with envelope encryption, and we never log tokens or secrets. Access to your workspace’s data is isolated per tenant.
Your choices
- Disconnect any connected account at any time from the Accounts page.
- Delete an account, which removes it, its posts, and its cached platform data from your workspace.
- Contact us to request deletion of your ScheduleLater account.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Contact
Privacy questions can be sent to privacy@schedulelater.com.