Privacy Policy

• Account data: your email address and a securely hashed password, managed by our authentication provider.
• Content you create: videos and images you upload, captions, titles, selected platforms, and schedule times.
• Connected social accounts: when you connect YouTube or Instagram, we store the account's ID, display name or username, profile picture URL, the permissions you granted, and an access or refresh token. Tokens are encrypted at rest (AES-256-GCM) and are never shown in your browser.
• Publishing records: the status of each publish, the resulting post or video ID and link, and error messages.
• Billing data: your plan, subscription status, and Stripe customer and subscription IDs. Card details are handled by Stripe; we never receive or store full card numbers.
• Technical data: standard server logs (such as IP address, browser type, and request times) used for security and troubleshooting.
• Usage analytics: aggregated, cookieless page-view statistics (such as pages visited, referrer, country, and device type) collected through Vercel Web Analytics. These do not use cookies or identify you across sites.

• To provide the service: store your media, and publish it to the accounts and at the times you choose.
• To show your publishing history, calendar, and account status.
• To process subscriptions and enforce plan limits.
• To send account emails such as sign-up confirmation.
• To keep the service secure and fix problems.

WSPRS only publishes content when you choose to publish or schedule it. Connecting an account never posts anything by itself. We do not sell your data, and we do not use your content or connected-account data for advertising.

WSPRS uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

We request permission to upload videos to your channel and to read basic channel information (channel ID, name, and picture) so you can see which channel is connected. We use this access only to upload the videos you choose.

WSPRS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect YouTube at any time on the Accounts page in WSPRS, which deletes the stored token. You can also revoke WSPRS's access in your Google security settings.

When you connect an Instagram Professional (Creator or Business) account through Meta, we receive an access token and your Instagram account ID, username, and profile picture. We use this access only to publish the Reels you choose and to show which account is connected. Your use of Instagram remains subject to Meta's terms and policies.

To publish, Meta downloads your video from a private, time-limited link that expires within hours. See Data deletion for how to remove Instagram data from WSPRS.

We share data only with providers that help us run WSPRS:

• Supabase: authentication and database.
• Cloudflare R2: private storage of your uploaded media.
• Vercel: website and application hosting, and usage analytics.
• Stripe: subscription payments.
• Resend: account emails.
• Google (YouTube) and Meta (Instagram): receive the content you publish to them.

We may also disclose data when required by law or to protect the rights and safety of our users and the service.

• Connected-account tokens are deleted immediately when you disconnect the account.
• Uploaded media and drafts are kept until you delete them or your WSPRS account is deleted.
• When you delete your WSPRS account, we delete your content, connected accounts, and publishing records within 30 days, except billing records we must keep for legal and tax purposes.
• Content already published to YouTube or Instagram stays there until you remove it on that platform.

Media is stored in a private bucket and accessed through short-lived signed links. OAuth tokens are encrypted at rest. Database access is restricted per user. No system is perfectly secure, but we work to protect your data and will notify you of breaches as required by law.

You can access, correct, export, or delete your data. Many changes can be made directly in WSPRS; for anything else, contact us at kdevsam@gmail.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

WSPRS is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

We will post changes to this policy on this page and update the effective date. Questions or requests: kdevsam@gmail.com.