Privacy Policy

1. Information we collect

Account information. Your name, email address, password (stored only as a one-way hash), company name if you provide it, language and notification preferences. If you sign in with a third-party login, we receive your name, email address and profile picture from that provider.

Information from social media accounts you connect. When you connect a channel, you authorize Qastix on the platform's own consent screen. Depending on the platform we receive:

• an access token and, where offered, a refresh token that let Qastix act on the account within the permissions you granted;
• basic profile information - account or channel ID, display name, username and profile picture;
• content and statistics needed for the features you use, such as the list of your published videos or posts, and view, like, comment and follower counts shown in Qastix analytics.

Content you create. Posts, captions, comments, images, videos, thumbnails, schedules and settings you enter or upload.

OAuth credentials you provide. If you choose to connect a channel through your own developer application (for example your own Google Cloud OAuth client), we store the client ID and client secret you enter and use them only to connect and operate that channel.

Technical information. IP address, browser type and device information, and log data needed to operate and secure the Service. We use cookies and similar local storage to keep you signed in and remember your preferences.

Payment information. If you purchase a paid plan, payments are processed by our payment provider. We do not receive or store your full card number.

2. How we use information

• to create and operate your account and workspace;
• to publish the content you schedule, at the time you choose, to the accounts you connected;
• to show you which accounts are connected and to display analytics about your accounts and posts;
• to send service emails such as account activation, password reset and publishing success or failure notifications;
• to provide support, prevent abuse and keep the Service secure;
• to comply with legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not use data received from connected platforms for any purpose other than providing the features you use. Qastix never publishes content that you did not create or schedule.

3. Google and YouTube data

Qastix uses YouTube API Services. When you connect a YouTube channel, Qastix requests access to your Google account basic profile (name, email address and picture), your YouTube channel, the ability to upload and manage videos on it, and YouTube Analytics reports. This access is used only to:

• identify and display the YouTube channel you connected;
• upload the videos you schedule, with the title, description, tags, privacy status, thumbnail and other settings you choose;
• show channel and video statistics in Qastix analytics.

Qastix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized AI or machine learning models, we do not transfer it to third parties except as necessary to provide the Service or as required by law, and we do not allow humans to read it unless you give us permission, it is needed for security purposes or to comply with law.

By using the YouTube features of Qastix you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke Qastix's access to your Google account at any time from the Google security settings page.

4. TikTok data

When you connect a TikTok account, Qastix receives your basic profile information (open ID, display name, username and avatar), profile statistics (such as follower and video counts) and the list of your videos, and the permission to upload and publish content on your behalf. We use this information only to show which account is connected, to publish the videos and photos you schedule with the settings you choose before posting, and to display statistics in Qastix analytics. You can revoke access at any time in the TikTok app under Settings and privacy > Security > Manage app permissions.

5. Facebook, Instagram and Threads data

When you connect a Facebook Page, an Instagram professional account or a Threads profile, Qastix receives the list of Pages and accounts you choose to share, their names, IDs and profile pictures, the permission to publish content and manage comments on them, and their insights. We use this information only to publish the posts you schedule, to post the comments you add to your own posts, and to show analytics. You can remove Qastix at any time in Facebook under Settings & privacy > Settings > Business integrations (or Apps and websites). See the Data Deletion page for how to delete your data.

6. How we share information

We share information only in these cases:

• With the platforms you connect - the content you schedule is sent to the platform you chose, at the time you chose.
• With service providers that host and operate the Service on our behalf, such as hosting and file storage, email delivery, payment processing, error monitoring and, only when you use AI writing or media features, the AI provider that generates the result. They may use the data only to provide their service to us.
• With your team - members of a workspace you belong to can see the channels and posts of that workspace.
• For legal reasons - when required by law, or to protect the rights, safety and security of our users and the Service.

7. Storage, security and retention

Your data is stored on servers operated by us or our hosting providers. Access tokens are used only by our servers and are never shown to other users. We use HTTPS for all traffic and restrict access to production systems. No method of transmission or storage is completely secure, but we work to protect your information.

We keep your information for as long as your account is active. When you disconnect a channel, Qastix immediately stops using it and it no longer appears in your workspace. When you delete your account, or ask us to delete your data, we erase or irreversibly anonymize your personal information, the access tokens of all your channels and your scheduled posts within 30 days, except where we must keep limited records to meet legal obligations.

8. Your rights and choices

• Access and update your profile information in the settings of the application.
• Disconnect any channel at any time from the channel menu in the application, and revoke access in the platform's own settings.
• Delete your account from Settings in the application, or request deletion by email - see the Data Deletion page.
• Request a copy of your data, correction, or restriction of processing, and object to processing, where the law gives you these rights, by contacting us.

9. Children

The Service is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

10. International transfers

We and our service providers may process your information in countries other than the one you live in. Where required, we rely on appropriate safeguards for these transfers.

11. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, notify you by email or in the application.

12. Contact

For any question about this policy or your data, contact us at support@qastix.app.