Privacy Policy
Last updated: October 14, 2026
1. Information We Collect
When you create an account, we collect your name, email address, and password (hashed). When you connect social accounts, we store encrypted OAuth tokens to manage your social media on your behalf. We also collect usage data such as posts created, agent configurations, and analytics preferences to improve the service.
2. How We Use Your Information
We use your information to: provide and maintain the SwarmPost service; publish content and engage on your connected social platforms as directed by you; analyze post performance and generate analytics; improve our AI agents and content generation; send transactional emails (password resets, notifications); and comply with legal obligations.
3. Data Security
All social media tokens are encrypted at rest using AES-256 encryption. Passwords are hashed using PBKDF2 with 100,000 iterations. All data is transmitted over TLS. We use Neon PostgreSQL with encryption at rest for database storage and Vercel for secure hosting infrastructure.
4. Third-Party Services
We integrate with: social media platforms (Twitter/X, Instagram, Facebook, TikTok, YouTube, Threads, Reddit, LinkedIn, Pinterest) to manage your accounts; Stripe for payment processing; Resend for transactional email; Neon for database hosting; Vercel for application hosting; and xAI (Grok) for AI content generation. SwarmPost uses YouTube API Services to connect authorized YouTube channels and upload user-reviewed videos; use of YouTube API Services is subject to the Google Privacy Policy (https://www.google.com/policies/privacy). For TikTok connections, SwarmPost uses TikTok Login Kit (user.info.basic) to identify your authorized account and the Content Posting API (video.publish) to publish user-reviewed videos under the TikTok Privacy Policy (https://www.tiktok.com/legal/page/row/privacy-policy/en).
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove all personal data, social tokens, and content within 30 days. Anonymized analytics data may be retained for service improvement.
6. Your Rights
You may: access, update, or delete your personal data at any time through your account settings; disconnect any social media account in SwarmPost to clear our stored encrypted access and refresh tokens and stop SwarmPost from accessing or publishing to that account; export your data; and request complete account deletion by contacting [email protected]. Disconnecting an account inside SwarmPost removes SwarmPost's stored tokens, whereas revoking the underlying OAuth authorization on the provider itself is managed in that provider's security settings—including the Google security settings page at https://security.google.com/settings/security/permissions for YouTube, TikTok account permissions (Settings and privacy > Security and permissions > Apps and services permissions), Meta Business Integrations for Facebook, Instagram, and Threads, and the connected-apps settings of X, LinkedIn, Reddit, and Pinterest.
7. Cookies
We use essential cookies for authentication (session tokens), short-lived (10-minute) encrypted HttpOnly OAuth state and account-confirmation cookies during social account connection flows, and a preference cookie for theme selection. We do not use third-party tracking cookies or advertising cookies.
8. Contact
For privacy-related questions, contact us at [email protected] / [email protected].