Privacy Policy

Autopubly ("we", "us") is a social media publishing and scheduling service available at autopost.texnexapro.com. It lets you create posts and publish or schedule them to the Instagram, Facebook, X, YouTube, and LinkedIn accounts you choose to connect. This policy explains what data we collect when you use the Autopubly dashboard and API, why we collect it, and how you can control it.

• Account data: name, email, password (stored as a bcrypt hash, never in plain text), and, if you sign in with Google, your Google profile ID and email.
• Connected social account data: when you connect Instagram, Facebook, X, YouTube, or LinkedIn, we store the account's provider ID, display name/handle, and an OAuth access token (and refresh token, where the platform issues one). Tokens are encrypted at rest with AES-256-GCM and used only to publish the posts you create and to keep the connection alive (refreshing an expiring token). We never see or store your social account password.
• Content you create: post captions, scheduling times, and media you upload or generate, stored so the Service can publish them on your behalf and show you a history.
• Payment data: processed directly by Razorpay. We store the resulting invoice number, plan, amount, and payment status — we do not receive or store your card, UPI, or bank details.
• Usage and device data: IP address, approximate geographic location (derived from IP via GeoIP, not GPS), browser/user-agent, and audit-log events (e.g. login, plan changes) for security and abuse prevention.
• Cookies: httpOnly session cookies (apb_at, apb_rt) used solely to keep you signed in. We do not use third-party advertising or tracking cookies. See our Cookie Policy for the full list.

If you connect a YouTube channel, Autopubly uses Google OAuth and the YouTube API Services. We request only the following scopes, and only with your explicit consent on Google's consent screen:

• https://www.googleapis.com/auth/youtube.upload — to upload the videos you create in Autopubly to your YouTube channel at the time you publish or schedule them (including title, description, and privacy status you choose).
• https://www.googleapis.com/auth/youtube.readonly — to read your channel ID, channel name, and profile picture so we can show which channel is connected and attach uploads to the correct channel.

What we store: your channel ID, channel name, profile image URL, and the OAuth access and refresh tokens, encrypted at rest with AES-256-GCM. We do not read, copy, or store your existing videos, comments, subscribers, analytics, or any other YouTube content.

How we use it: solely to provide the publishing feature you asked for. We do not sell Google user data, use it for advertising, share it with data brokers, or use it to train generalized AI or machine-learning models. Humans at Autopubly do not read your Google user data except with your consent for support, to investigate abuse or security incidents, or where required by law.

Autopubly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

Revoking access and deleting data: you can disconnect YouTube at any time in Autopubly under Settings > Connections, which deletes the stored tokens and channel details. You can also revoke Autopubly's access from your Google Account at myaccount.google.com/permissions. Videos already published to YouTube stay on your channel until you delete them there.

• To operate the Service: authenticate you, publish scheduled posts, and show usage/history;
• To process payments and manage your subscription and credit balance;
• To send transactional email (verification, password reset, receipts) via our SMTP provider;
• To detect fraud, abuse, and security incidents (audit logs, rate limiting);
• To improve the Service, using aggregated, non-identifying usage patterns.

We do not sell your personal data, and we do not use your content to train AI models.

We share data only with the processors needed to run the Service, each acting under their own privacy policy:

• Meta, Google (YouTube), X, and LinkedIn — to publish the posts you schedule to your connected accounts, and nothing else;
• Cloudinary — hosts uploaded/generated media so platform APIs can fetch it over HTTPS;
• Clipdrop — processes text prompts you submit to generate AI images, when you use that feature;
• Razorpay — processes subscription payments;
• Our email provider — delivers transactional email on our behalf.

We disclose data to law enforcement only when legally required to do so.

We retain account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data and revoke stored OAuth tokens within 30 days, except where we must retain records (e.g. payment/invoice records) to meet legal or tax obligations.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for a connected account at any time by disconnecting it in Settings. To exercise these rights, contact us at privacy@autopubly.com. You can also revoke Autopubly's access directly from each platform's own app-permissions page (e.g. Facebook > Settings > Apps, Google Account > Security > Third-party access).

We use industry-standard safeguards: encrypted transport (HTTPS), encrypted-at-rest OAuth tokens (AES-256-GCM), hashed passwords (bcrypt), httpOnly/rotating session cookies, and rate limiting. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted to us.

The Service is not directed at children under 18, and we do not knowingly collect their data.

Our infrastructure and processors may be located outside your country. By using the Service, you consent to your data being processed in those locations and by the processors listed above, wherever they operate.

We may update this policy from time to time. Material changes will be notified via email or an in-app notice before they take effect.

Questions about this policy or your data? Contact privacy@autopubly.com.