Privacy Policy

1. What Data We Collect

When you create an account and use 1XPost, we collect the following information:

• Account information — your email address, name or company name, and a hashed password (we never store your password in plain text)
• Social media tokens — OAuth access tokens and refresh tokens for the platforms you connect (LinkedIn, Facebook, Instagram, Threads, X/Twitter, TikTok, Pinterest, Reddit, Bluesky, YouTube)
• Content you create — post captions, images, and scheduling preferences you enter into the platform
• AI configuration — your Anthropic API key (if provided), brand voice samples, and caption tone preferences
• Telegram settings — bot tokens and chat IDs if you use the Telegram approval workflow
• Usage data — login timestamps and post history

2. How We Use Your Data

We use the information we collect solely to provide the 1XPost service:

• To authenticate you and keep your account secure
• To post content to your connected social media accounts on your behalf, at the times you schedule
• To generate AI captions using your Anthropic API key and brand voice settings
• To send Telegram approval messages when posts are queued for review
• To display your post history and analytics within the app

We do not sell your data, use it for advertising, or share it with third parties except as required to deliver the service (see Section 4).

3. Data Storage

Your data is stored and processed using the following infrastructure:

• Database — your account data, tokens, and posts are stored in a PostgreSQL database hosted on Supabase, which provides encrypted storage and automatic backups
• Application hosting — the 1XPost application runs on Railway, a cloud infrastructure provider with SOC 2 compliance
• File uploads — images you upload are stored in the application's file system on Railway

All data is transmitted over HTTPS. Social media tokens are stored encrypted at rest. We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed.

4. Third-Party Services

To deliver core functionality, 1XPost integrates with the following third-party services. By using 1XPost, you also agree to their respective terms:

• Meta (Facebook & Instagram) — used to publish posts to Facebook Pages and Instagram Business accounts via the Meta Graph API
• LinkedIn — used to publish posts to your LinkedIn profile or company page via the LinkedIn API
• Anthropic — used to generate AI captions via the Claude API using your own API key; your content is subject to Anthropic's Privacy Policy
• Google — used for optional Google sign-in via OAuth 2.0
• Telegram — used to send post approval notifications to your configured bot and chat

1XPost only requests the minimum permissions required from each platform. You can disconnect any platform at any time from your Connected Accounts settings.

5. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can:

• Update your name and email from your Profile page
• Disconnect social media platforms from Connected Accounts
• Request full account deletion by emailing us at support@1xpost.io

6. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

support@1xpost.io