Privacy Policy

Data we handle

• Account and workspace information, including names, email addresses, memberships, and authentication data.
• Connected social account details and provider credentials or access tokens needed to act on your instructions. Secrets are protected and are not shown back to users.
• Scheduled content and media, publishing settings, delivery status, provider responses, and external post links.
• Operational, audit, security, and diagnostic records used to run, protect, and troubleshoot the service.

How we use data

We use this data to authenticate users, isolate workspaces, connect requested providers, schedule and publish content, display results, prevent abuse, secure the service, and respond to support requests. We do not use a connected provider account to publish unless a user with access to the workspace instructs Publish Relay to do so.

First-party website analytics

We record page visits and limited actions, such as sign-in requests, provider connection steps, composer use, scheduling, and visible error categories, to understand and improve Publish Relay. An anonymous random identifier is kept in your browser's session storage for one tab and rolls over after 30 minutes of inactivity. Analytics uses no cookies and does not record your IP address, browser user-agent, email, post content, provider tokens, or full page or referrer URLs. A tab session is not a unique person. Raw analytics records are deleted in batches after 90 days.

Service providers and social platforms

We use infrastructure providers to host and operate Publish Relay. When you connect or publish to a social platform, relevant account data, content, and media are sent to that platform under its own terms and privacy policy. We disclose data only as needed to provide and secure the service, comply with law, or protect rights and safety.

Retention and deletion

We retain account, workspace, scheduled-content, media, publication-result, and operational records while needed to provide and protect Publish Relay. Retention can also continue where reasonably required for security, fraud prevention, legal obligations, dispute resolution, and backup integrity. You may request deletion using the process on our Data deletion page. Published content may remain on a connected social platform until it is removed there.