Privacy Policy

We collect the following categories of data when you use OmniPost:

• Account information — your email address, collected at sign-up and used for authentication and transactional emails (e.g. email confirmation).
• Social media credentials — when you connect a YouTube, TikTok, or Instagram account we store your platform username, user ID, and OAuth access and refresh tokens. These are used solely to publish content on your behalf.
• Content and media — video files you upload, post captions, titles, and scheduling data you enter while using the service.
• Usage data — standard server logs (IP address, browser type, referring URL) retained for security and debugging purposes.

We use the information we collect to:

• Authenticate you and maintain your account session.
• Upload and publish your video content to the social media platforms you select.
• Store your drafts, scheduled posts, and publishing history so you can manage them.
• Send transactional emails (email confirmation, password reset) via Supabase.
• Diagnose technical issues and improve the reliability of the service.

We do not use your data for advertising, profiling, or any automated decision-making that produces legal or similarly significant effects.

OmniPost uses Supabase for authentication, database storage, and file storage. All data is stored on infrastructure provided by Supabase (hosted on AWS). Data is encrypted in transit via TLS and encrypted at rest.

OAuth tokens are stored encrypted in our database and are only decrypted server-side at the moment of publishing. We apply the principle of least privilege: tokens are scoped to the minimum permissions required to upload and publish content.

Uploaded video files are stored in a private Supabase Storage bucket and are not publicly accessible. Access is granted via short-lived signed URLs generated at publish time.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

We may share data only in the following limited circumstances:

• Social media platforms — video content, captions, and metadata are transmitted to YouTube, TikTok, and/or Instagram when you initiate a publish action. This transmission is governed by each platform’s own privacy policy.
• Infrastructure providers — Supabase processes data as a data processor on our behalf under their own data processing agreement.
• Legal requirements — we may disclose data if required by law or to protect the rights and safety of OmniPost or its users.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete data.
• Right to erasure — you may request that we delete your personal data. We will action this within 30 days.
• Right to restriction of processing — you may ask us to restrict how we use your data while a complaint is being resolved.
• Right to data portability — you may request your data in a structured, machine-readable format.
• Right to object — you may object to our processing of your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, contact us at tobitokuro@gmail.com.

You can request the deletion of your account and all associated data (including stored OAuth tokens, uploaded videos, and post history) by emailing tobitokuro@gmail.com with the subject line “Delete my account”. We will process your request within 30 days.

OmniPost is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us immediately and we will delete it promptly.

OmniPost connects to third-party platforms (YouTube, TikTok, Instagram). Once content is published to these platforms, it is subject to their own terms of service and privacy policies. We are not responsible for how those platforms handle your data.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of OmniPost after changes constitutes your acceptance of the updated policy. For material changes we will make reasonable efforts to notify you via email.

If you have any questions about this Privacy Policy or how your data is handled, please contact us: