Privacy Policy

Last updated: September 25, 2026

What we collect

Account information — name and email, managed through our authentication provider (Clerk).
Social account authorizations — OAuth access tokens for the social accounts you connect. Tokens are stored encrypted (AES-256-GCM) and used only to publish content you direct and to read performance metrics for your own posts.
Content — the photos, videos, captions, and brand information you add to your workspace.
Usage data — basic operational logs needed to run and secure the service.

How we use it

Only to provide the service: creating and publishing your content, generating AI-assisted media and copy from your inputs, showing you performance metrics, and operating your approval workflows. We do not sell personal information, and we do not use your content to train AI models.

YouTube API Services

Socials Station uses YouTube API Services to upload videos to and read statistics from YouTube channels you connect. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy. You can revoke Socials Station’s access at any time via the Google security settings page or by disconnecting the channel inside Socials Station.

Sharing of Google user data

We do not sell Google user data, and we do not share, transfer, or disclose it to any third party, with these narrow exceptions: (1) our infrastructure providers that host the service and its database, which process the data on our behalf solely to operate Socials Station and are bound by confidentiality obligations; (2) YouTube itself, when you direct us to publish a video to your connected channel; and (3) where disclosure is required by law. Google user data is never used for advertising, never sold to data brokers, and never used to train AI models. Socials Station’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect sensitive data

All data, including Google user data, is transmitted exclusively over encrypted connections (TLS/HTTPS). OAuth access and refresh tokens are encrypted at rest with AES-256-GCM and are never exposed to the browser; all API calls to Google are made server-side. Access to stored data is restricted to your own workspace through authenticated, per-workspace authorization checks, and secrets are held in our hosting provider’s protected environment configuration rather than in code. Disconnecting a channel or revoking access in your Google security settings deletes the stored tokens; statistics we retain are limited to your own videos’ performance metrics displayed back to you. YouTube statistics are refreshed from the YouTube API at least every 30 days for as long as the video’s post exists in your workspace, and are deleted immediately when you disconnect the channel inside Socials Station and within 30 days when you revoke access in your Google security settings.

Retention and deletion

Content and connections are kept while your workspace is active. Disconnecting a social account deletes its stored tokens. You can request deletion of your workspace and its data at any time by contacting us; we delete it within 30 days, except where retention is legally required. Step-by-step instructions are on our Data Deletion Instructions page.

Cookies

We use only the cookies required for sign-in sessions (via Clerk). We do not use advertising or cross-site tracking cookies.

Changes

Material changes to this policy will be communicated through the service.

Questions? Contact MindBotics at support@mindbotics.ai · mindbotics.ai