Privacy Policy
Last updated October 5, 2026
This is a template written to match how the service works. Have it reviewed by a lawyer and fill in your company details before you rely on it.
Who we are
Relaycast ("we", "us") provides an API and dashboard for publishing and scheduling content to social networks. Contact: hello@example.com.
Data we collect
- Account data: your name, email address and a hashed password when you sign up.
- Connected social accounts: when you connect an account through a platform's own sign-in (OAuth), we receive access tokens and basic profile data (account id, handle, display name, avatar). Tokens are encrypted at rest with AES-256-GCM.
- Content you publish: post text, media you upload or link to, platform options and schedules, plus the results each platform returns (post ids, links, errors).
- Engagement data you request: post analytics, comments and messages fetched from platforms when you use those features.
- Usage and logs: API request logs (endpoint, status, duration, time) kept for 30 days, and credit usage.
How we use it
We use this data only to provide the service: to publish and schedule your posts, show results and analytics, send the notifications you configure, secure your account, and bill usage. We don't sell personal data and don't use your content to train models.
Platform data
Data obtained from social platforms is used only to provide features you asked for, in line with each platform's developer terms (for example, the Meta Platform Terms, the YouTube API Services Terms and Google's API Services User Data Policy, including its Limited Use requirements, and TikTok's developer terms). You can revoke our access at any time from the platform's settings or by disconnecting the account in Integrations.
Sharing
We share data only with providers that run the service for us (hosting, database, storage, email delivery), with the social platforms you choose to publish to, and when required by law.
Retention and deletion
We keep your data while your account is active. Request logs are deleted after 30 days. Disconnecting a social account stops all access and removes its stored tokens. To delete your account and data, see Data deletion.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to processing. Email hello@example.com and we'll respond within 30 days.
Security
We use encryption in transit (HTTPS) and at rest for credentials, hashed access keys, scoped access per project, and audit logs of API requests.
Changes
We'll post changes here and update the date above. Material changes will be emailed to account owners.