Skip to content
SchedulSmart
Start free

Privacy Policy

Last updated: 9 October 2026

What we store

  • Account data: your email address, a salted hash of your password (never the password itself), and workspace/team membership.
  • Social account connections: when you connect a social account we store the OAuth access and refresh tokens the platform issues, encrypted at rest, plus basic profile info (name, avatar, account id) so you can tell channels apart. We can only do what those tokens allow — publish the posts you schedule and read basic profile info. We never see your social-account passwords (Bluesky uses an App Password instead; see below).
  • Your content: post text and the files you upload. Deleting a post deletes its text straight away and its files within a few hours. Some files are kept; see "Deleting your data" below.
  • Post approvals: if your workspace turns approvals on, we store who submitted, approved or sent back each post, when, and any note they wrote. Deleting a post deletes this history too.
  • Billing: subscription state from Razorpay. Card and payment details are handled by Razorpay and never touch our servers.
  • X (Twitter) API keys: X charges per post, so each workspace connects X through its own X developer app. We store that app's Client ID and Client Secret, the secret encrypted at rest, and use them only to connect X and publish your posts. You can remove them in Settings at any time.
  • Two-factor authentication: if you turn it on, we store your authenticator secret encrypted at rest, and your recovery codes only as hashes.
  • Brand Kit and Campaigns: if you use them, we store your Brand Kit (business name, description, audience, tone of voice, colours, language, words to avoid, campaign ideas, the website address you gave and who confirmed they may use it), a summary of what we found when we read that website (never the text of its pages), your campaign briefs and the posts written for them, and a record of each AI action: who asked, what kind, the credits it used and its cost, never the text.

What we don't do

  • We don't sell or share your data with advertisers.
  • We don't post anything you didn't schedule.
  • We don't read your social inboxes or private messages — the access we request is limited to publishing and basic profile info.

Connected platforms

SchedulSmart publishes to Instagram, Facebook, X (Twitter), LinkedIn, YouTube, TikTok, Pinterest and Bluesky. For each one we hold only the access you granted (an OAuth token, or for Bluesky an App Password) and the profile fields needed to label the channel. Disconnecting a channel deletes its tokens; you can also revoke our access from the platform's own settings at any time.

Bluesky. Bluesky has no OAuth sign-in for apps like ours, so you connect it with an App Password you create in Bluesky. We store that App Password encrypted and use it only to publish the posts you schedule. Disconnecting the channel deletes it, and you can revoke it in Bluesky at any time (Settings, Privacy and Security, App Passwords).

TikTok. With your authorisation we read your basic profile (open id, display name, avatar) so you can tell the channel apart, and — when you select the TikTok channel in the composer, and again when the post is published — your current posting settings from TikTok's creator-info endpoint (the privacy levels available to you, whether comments, Duet and Stitch are enabled, and your maximum video length) so the composer can offer exactly the choices TikTok allows. A video is sent to TikTok only when you choose to post it: either published directly to your profile with the privacy level you pick, or delivered to your TikTok inbox as a draft for you to finish in the TikTok app. We do not read your TikTok videos, followers, statistics, messages or watch history, and we never post to TikTok without an explicit action from you.

Pinterest. With your authorisation we read your Pinterest username, profile picture and list of boards, so each board shows up as a channel you can pick. We create pins (and upload their videos) only on the boards you choose, for the posts you schedule. We do not read your other pins, followers, messages or statistics.

AI captions, Brand Kit and Campaigns

When you ask for an AI caption, the topic you type, the tone and the length you pick are sent to our AI caption service to write the suggestion. Unless you use Brand Kit, nothing else from your account is sent with it.

If you use Brand Kit or Campaigns, the AI models that serve them are run for us by Cloudflare (Cloudflare Workers AI):

  • When you ask SchedulSmart to read your website, it fetches these public files from the site: its robots.txt, the page you give, up to 2 about pages and up to 2 stylesheets. It sends the site's address and the text of those pages to Cloudflare Workers AI to draft your Brand Kit, and reads colours and fonts from the stylesheets itself. We don't store the text of the pages.
  • When you create a campaign, your brief and your Brand Kit details are sent to Cloudflare Workers AI to write the posts.
  • If your workspace has a confirmed Brand Kit, an AI caption may be written there too, and then your Brand Kit details are sent with the topic, tone and length.

Cookies and analytics

Our own cookies keep the site working: one keeps you logged in (ss_session), one holds a two-factor login step for a few minutes (ss_2fa), one remembers how you like dates and times shown (ss_disp), and one remembers your analytics choice (ss_consent).

We use Google Analytics to count visits, signups and paid upgrades, and to see which pages help people. It sets its own cookies (_ga and _ga_…). It gets the addresses of the pages you open, with any private link codes removed, plus your browser type and rough location. A page opened from a private link, like a signup, password-reset or team-invite link, sends it nothing at all. We turn off Google Signals and advertising features. When you create an account we also tell Google Analytics, using our internal account ID, never your email or name. When you start a paid plan, our server tells it the plan and its list price, with our internal account and workspace IDs, never your email or name.

If you are in the EEA, the UK or Switzerland, we ask first. Until you accept, and if you decline, Google Analytics sets no cookies in your browser and gets only cookieless signals from it. Your signup, and a paid plan you start then, are counted without your account or workspace ID.

Processors we rely on

Cloudflare (hosting, database, media storage, Workers AI, which runs the AI models for Brand Kit and Campaigns, and Turnstile, the check on the signup and password-reset forms that a person is filling them in; it uses technical signals from your browser and your IP address), Razorpay (payments), Resend (transactional email such as signup verification), and Google (Google Analytics, see above). Each processes data only to provide the service.

Deleting your data

Disconnecting a channel deletes its stored tokens. Deleting a post deletes its text straight away, and its uploaded files, with the resized copies we make for some channels, within a few hours. A post that is already live on a channel can't be deleted in SchedulSmart, so its files stay. We also keep a file that another of your posts still uses, a file you uploaded but never posted, and the files of posts deleted before we began removing files in October 2026; email us and we will remove them. Copies a platform made when it published your post stay on that platform until you remove them there. You can also revoke SchedulSmart's access at any time from each social platform's own security settings.

To close your account, email admin@appifycommerce.com from the account's address. We cancel your subscription, then delete your workspace with its posts, channels, files, invites, team memberships, Brand Kit, campaigns and AI credit history. We keep your payment records (amounts, dates and Razorpay IDs), because tax law requires it. If you also belong to another workspace, your login stays for that one.

Contact

Privacy questions: admin@appifycommerce.com.