Back to Home
Posgage
Legal Documentation

Privacy Policy

Last Updated: October 5, 2026 · Effective Date: October 5, 2026

1. Introduction

Posgage ("we", "us", "our", operated by Olystique LTD) provides a social media scheduling, automated publishing, and content analytics management platform.

We are committed to maintaining the privacy, confidentiality, and security of all personal and account data entrusted to us by our users. This Privacy Policy details how Posgage collects, accesses, uses, stores, protects, shares, and deletes user information, with specific comprehensive disclosures regarding Google and YouTube user data.

Posgage uses YouTube API Services. By connecting a YouTube channel to Posgage, you agree to be bound by the YouTube Terms of Service, and your YouTube data is also subject to the Google Privacy Policy.

2. General Information We Collect

When you create an account and interact with our Service, we collect:

  • User Account Information: Your name, email address, password hash, and company name when registering.
  • Content & Media Uploads: Video files, images, titles, captions, descriptions, and scheduling times that you upload or input for publication.
  • Technical & Device Data: IP addresses, browser types, and usage timestamps collected via standard web logs to secure our platform.

3. Google API Services & YouTube User Data Disclosures

This section provides mandatory disclosures regarding Posgage's compliance with the Google API Services User Data Policy, including the Limited Use requirements.

3.1 What Google User Data Is Accessed by Posgage

When you authenticate your Google Account to connect a YouTube channel to Posgage, our application requests permission to access the following specific Google user data through official Google APIs:

  • YouTube Channel Profile Information: We access your YouTube channel ID, channel title, description, and avatar thumbnail via the https://www.googleapis.com/auth/youtube.readonly scope.
  • Your Videos and Their Statistics: Via the https://www.googleapis.com/auth/youtube.readonly and https://www.googleapis.com/auth/yt-analytics.readonly scopes, we read the list of videos on your channel (title, description, thumbnail, publish date, and link) and their statistics, such as views, likes, comments, and shares.
  • Video Publishing Capabilities: We request permission via the https://www.googleapis.com/auth/youtube.upload scope to upload videos, set video metadata (title, description, tags, privacy status), and publish video assets on your authorized YouTube channel.
  • OAuth Authentication Credentials: We receive temporary OAuth 2.0 access tokens and refresh tokens granted by Google upon your authorization.

Posgage does not request or access private emails, contacts, search history, Google Drive files, or any Google data outside of the explicit YouTube scopes listed above.

3.2 How Posgage Uses Google User Data

We use the accessed Google user data strictly and solely to provide user-facing features within Posgage:

  • Channel Connection & Identification: Channel ID, name, and avatar are used to display your YouTube channel within the Posgage dashboard so you can select it as a publishing destination.
  • Executing Scheduled Video Uploads: When you schedule a post, our background publisher uses your stored authorization token to upload the video file, title, and description directly to your YouTube channel at your specified date and time.
  • Showing Your Performance: Your videos and their statistics are shown to you on your Posgage dashboard, and used to recommend when to post based on how your own videos have performed. They are shown only to you.

Prohibited Uses: Posgage will NEVER use Google user data to serve advertisements, sell to third parties, track users across external websites, or train machine learning/AI models.

3.3 Sharing, Transfer, and Disclosure of Google User Data

We do NOT share, transfer, disclose, or sell Google user data to any third party.

Google user data is only transferred in the following limited, necessary operational scenarios:

  • Back to Google/YouTube:Video files and metadata provided by the user are transmitted directly to YouTube's upload servers via the YouTube Data API to fulfill your scheduling request.
  • Secure Cloud Infrastructure: Encrypted tokens and temporary video files are processed on our secure cloud hosting infrastructure (AWS S3 and PostgreSQL) solely to stage and execute scheduled publication. These service providers act strictly as data processors and are bound by confidentiality obligations.
  • Legal Requirements: We will only disclose information if required by law or valid legal subpoena.

Under no circumstances do we sell, rent, monetize, or trade Google user data or YouTube data to data brokers, advertising networks, or analytics aggregators.

3.4 Data Protection Mechanisms for Sensitive Google User Data

We implement robust technical and organizational measures to safeguard sensitive Google user data:

  • Encryption at Rest: All Google OAuth access tokens and refresh tokens are encrypted at rest using industry-standard AES-256-GCM (Authenticated Encryption) before being written to our database. Decryption keys are stored separately in restricted environment variables.
  • Encryption in Transit: All data transmitted between your browser, our servers, and Google APIs is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
  • Access Controls: Access to our database and servers is limited to the Posgage team and requires credentials that are stored outside our code. Access tokens are never exposed to your browser or to client-side code.

3.5 Retention and Deletion of Google User Data

We retain Google user data only for as long as necessary to fulfill the services you have requested:

  • Authentication Tokens: OAuth tokens are retained only while your YouTube channel remains actively connected to your Posgage account.
  • Videos and Statistics: While your channel is connected, the YouTube data we store (your videos and their statistics) is refreshed from YouTube about every 6 hours, so what you see always reflects YouTube. We keep it only while your channel stays connected.
  • Channel Details:Your channel's title, handle, profile picture, and description are refreshed from YouTube on every sync, not only when you connect.
  • 30-Day Limit: Any YouTube video or channel details that have not been refreshed for 30 days are deleted automatically. This covers older videos beyond the most recent uploads each sync reads, videos you have deleted on YouTube, and all YouTube data while syncing is paused, for example when a subscription has lapsed. Your channel stays connected, and its data is refreshed again on the next successful sync.
  • Temporary Media Files: Video files you upload to our cloud staging storage (S3) for scheduled publishing are automatically and permanently deleted 24 hours after they are published, and within 24 hours if they are never scheduled.

How to Request or Trigger Deletion of Your Google User Data:

  • Disconnect Channel: You can disconnect your YouTube channel at any time in the Accounts section of Posgage. Disconnecting immediately and permanently deletes your Google OAuth tokens and channel metadata from our database.
  • Delete Posgage Account: Deleting your account in your Settings page immediately and permanently deletes your account records, connected credentials, synced YouTube data, and history.
  • Direct Email Request: You can email us at info@olystique.com with the subject "Data Deletion Request", and our team will erase all associated data as soon as possible and within 7 days.
  • Revoke via Google: You can revoke Posgage's access to your Google Account at any time through the Google Security Settings Permissions Page. In addition to the deletion options above, revoking access this way also removes your data from Posgage: the next time we try to refresh your channel (within hours), we detect the revocation and permanently delete your stored YouTube videos, statistics, tokens, and channel profile.

Deleting data in Posgage does not delete anything on YouTube. Videos you published stay on your channel until you remove them in YouTube itself.

By using YouTube features in Posgage, you agree to be bound by the YouTube Terms of Service and acknowledge that your data is processed according to the Google Privacy Policy.

Cookies and Information Stored on Your Device

Posgage stores a small amount of information in your browser. We use it only to keep you signed in and to keep your work while you use the Service. We do not use advertising or tracking cookies, we do not allow third parties to place cookies or collect information from your device through Posgage, and we do not use third-party analytics.

  • Sign-in cookies: posgage_at and posgage_rt keep you signed in, and posgage_otp holds a pending sign-in verification step for a few minutes. All three are strictly necessary, secure, and inaccessible to page scripts (httpOnly).
  • Post drafts:The post you are composing, including the video you chose, is kept in your browser's local storage and IndexedDB so it survives a page reload. It stays on your device and is removed when you schedule the post or discard the draft.
  • Preferences: Your light or dark theme choice (local storage), and whether you dismissed a security reminder in the current tab (session storage).

You can clear this information at any time in your browser settings. Clearing the sign-in cookies signs you out.

4. Other Connected Platforms (Meta, TikTok, Snapchat, LinkedIn, X)

For other connected services such as Instagram, Facebook, TikTok, Snapchat, LinkedIn, and X, Posgage adheres strictly to their respective platform terms and developer policies. Access tokens are stored with the same AES-256-GCM encryption standards and are permanently erased upon account disconnection.

Snapchat

Posgage connects to Snapchat Public Profiles (creator and business profiles) through Snap’s official Public Profile API. Personal Snapchat accounts cannot be connected.

  • What we access: When you connect Snapchat, you sign in with Snap and approve the snapchat-profile-api and snapchat-marketing-api permissions. We read the Public Profiles you manage: the profile ID, the organization it belongs to, its display name, username, profile image, and description.
  • What we publish: Only the videos you schedule, to the Public Profile you choose, as a Story, Saved Story, or Spotlight, whichever you select for each post, at the time you choose. A Spotlight carries your caption as its description, and a Saved Story carries the title you give it. Nothing is posted to Snapchat unless you schedule it.
  • Analytics: For your Saved Stories and Spotlights, we read their title or caption, creation date, thumbnail, and the lifetime statistics Snapchat reports, such as views, unique viewers, favorites, shares, and Spotlight replies, so you can see how your content performs. While your profile is connected, this is refreshed about every 6 hours.
  • Storage and security: Your Snapchat access and refresh tokens are encrypted with AES-256-GCM. Videos are sent to Snapchat through its API only when a post you scheduled is published.
  • No sale or advertising use: We never sell Snapchat data or use it for advertising. It is used only to provide the publishing and analytics features described here.
  • Retention and deletion: We keep Snapchat data only while the profile stays connected. Disconnecting it in the Accounts section, or deleting your Posgage account, immediately and permanently deletes its tokens, profile details, synced posts, and statistics. If you remove Posgage's access from Snapchat instead, we stop publishing and syncing and mark the connection as expired; data already stored stays until you disconnect the profile or delete your account. Deleting data in Posgage does not delete anything on Snapchat.

Your use of Snapchat is also subject to the Snap Terms of Service, Community Guidelines, and Snap Privacy Policy.

LinkedIn

Posgage connects to your personal LinkedIn profile, for publishing only, through LinkedIn's official Sign In with LinkedIn and Share on LinkedIn products. LinkedIn Company Pages cannot be connected.

  • What we access: When you connect LinkedIn, you sign in with LinkedIn and approve the openid, profile, and w_member_social permissions. We store your LinkedIn member ID, name, and profile picture. We do not request your email address from LinkedIn.
  • What we publish: Only the text, image, and video posts you schedule, to your own profile, publicly, at the time you choose. Nothing is posted to LinkedIn unless you schedule it.
  • Analytics: None. LinkedIn does not share post analytics for personal profiles, so we never read your posts, feed, connections, or statistics.
  • Storage and security: Your LinkedIn access token is encrypted with AES-256-GCM. LinkedIn tokens expire after 60 days and cannot be renewed automatically, so we email you shortly before yours expires and you reconnect to keep publishing. Images and videos are sent to LinkedIn through its API only when a post you scheduled is published.
  • No sale or advertising use: We never sell LinkedIn data or use it for advertising. It is used only to provide the publishing features described here.
  • Retention and deletion: We keep LinkedIn data only while your profile stays connected. Disconnecting it in the Accounts section, or deleting your Posgage account, immediately and permanently deletes its token and profile details. If you remove Posgage's access from LinkedIn instead, or the token expires, we stop publishing and mark the connection as expired; the details already stored stay until you disconnect the profile or delete your account. Deleting data in Posgage does not delete anything on LinkedIn.

Your use of LinkedIn is also subject to the LinkedIn User Agreement and LinkedIn Privacy Policy.

X

Posgage connects to your X account, for publishing only, through X's official OAuth 2.0 sign-in and its API.

  • What we access: When you connect X, you sign in with X and approve the tweet.read, tweet.write, users.read, media.write, and offline.access permissions. We store your X user ID, display name, username, and profile picture.
  • What we publish: Only the text, image, and video posts you schedule, to your own account, at the time you choose. Nothing is posted to X unless you schedule it.
  • Analytics: None. We never read your timeline, posts, followers, messages, or statistics on X.
  • Storage and security: Your X access and refresh tokens are encrypted with AES-256-GCM. X access tokens last two hours, and we use the refresh token to renew them only when a post you scheduled is about to publish. Images and videos are sent to X through its API only at that time.
  • No sale or advertising use: We never sell X data or use it for advertising. It is used only to provide the publishing features described here.
  • Retention and deletion: We keep X data only while your account stays connected. Disconnecting it in the Accounts section, or deleting your Posgage account, revokes Posgage's access at X and immediately and permanently deletes its tokens and profile details. If you remove Posgage's access from X instead, we stop publishing and mark the connection as expired; the details already stored stay until you disconnect the account or delete your Posgage account. Deleting data in Posgage does not delete anything on X.

Your use of X is also subject to the X Terms of Service and X Privacy Policy.

5. User Privacy Rights (GDPR, CCPA)

Regardless of your jurisdiction, you have the right to access, rectify, port, or request the deletion of any personal data stored by Posgage. To exercise any of these rights, contact us at info@olystique.com.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. We will notify registered users of material changes via email or an in-app notice prior to the change becoming effective.

7. Contact Us

If you have questions, comments, or data deletion requests regarding this policy, please contact our Data Protection team:

Olystique LTD

Operating Posgage

Email: info@olystique.com

Website: https://posgage.olystique.com

Privacy Policy Link: https://posgage.olystique.com/privacy