隐私政策
Last updated: March 26, 2026
1. 我们收集的信息
当您创建账户时，我们会收集您的姓名、电子邮件地址和密码（已哈希）。当您连接社交账户时，我们会存储加密的 OAuth 令牌，以代表您管理您的社交媒体。我们还会收集使用数据，例如创建的帖子、代理配置和分析偏好，以改进服务。
2. 我们如何使用您的信息
我们使用您的信息来：提供和维护 SwarmPost 服务；根据您的指示在连接的社交平台上发布内容并互动；分析帖子表现并生成分析报告；改进我们的 AI 代理和内容生成；发送交易性电子邮件（密码重置、通知）；并遵守法律义务。
3. 数据安全
所有社交媒体令牌在静态时使用 AES-256 加密。密码使用 PBKDF2 进行哈希，迭代 100,000 次。所有数据通过 TLS 传输。我们使用 Neon PostgreSQL 进行静态加密的数据库存储，并使用 Vercel 提供安全的托管基础设施。
4. 第三方服务
We integrate with: social media platforms (Twitter/X, Instagram, Facebook, TikTok, YouTube, Threads, Reddit, LinkedIn, Pinterest) to manage your accounts; Stripe for payment processing; Resend for transactional email; Neon for database hosting; Vercel for application hosting; and xAI (Grok) for AI content generation. SwarmPost uses YouTube API Services to connect authorized YouTube channels and upload user-reviewed videos; use of YouTube API Services is subject to the Google Privacy Policy (https://www.google.com/policies/privacy). For TikTok connections, SwarmPost uses TikTok Login Kit (user.info.basic) to identify your authorized account and the Content Posting API (video.publish) to publish user-reviewed videos under the TikTok Privacy Policy (https://www.tiktok.com/legal/page/row/privacy-policy/en).
5. 数据保留
只要您的账户处于活跃状态，我们就会保留您的数据。当您删除账户时，我们会在 30 天内移除所有个人数据、社交令牌和内容。匿名化的分析数据可能会保留以改进服务。
6. 您的权利
You may: access, update, or delete your personal data at any time through your account settings; disconnect any social media account in SwarmPost to clear our stored encrypted access and refresh tokens and stop SwarmPost from accessing or publishing to that account; export your data; and request complete account deletion by contacting [email protected]. Disconnecting an account inside SwarmPost removes SwarmPost's stored tokens, whereas revoking the underlying OAuth authorization on the provider itself is managed in that provider's security settings—including the Google security settings page at https://security.google.com/settings/security/permissions for YouTube, TikTok account permissions (Settings and privacy > Security and permissions > Apps and services permissions), Meta Business Integrations for Facebook, Instagram, and Threads, and the connected-apps settings of X, LinkedIn, Reddit, and Pinterest.
7. Cookie
We use essential cookies for authentication (session tokens), short-lived (10-minute) encrypted HttpOnly OAuth state and account-confirmation cookies during social account connection flows, and a preference cookie for theme selection. We do not use third-party tracking cookies or advertising cookies.
8. 联系方式
对于隐私相关问题，请联系我们：[email protected] / [email protected].