Privacy Policy

Last updated: March 5, 2026

1. Introduction

Cross-Post ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile application and services.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password (stored securely using encryption).

Social Media Data: When you connect social media platforms (Facebook, Instagram, TikTok, Twitter/X, LinkedIn, YouTube, Reddit), we collect:

• Your public profile information (display name, profile picture).
• Authentication tokens required to post on your behalf.
• Platform-specific user identifiers.

Content Data: Text, images, and videos you upload for publishing through our service.

Device Information: Device type, operating system, and push notification tokens for delivering notifications.

3. How We Use Your Information

• To provide and maintain our cross-posting service.
• To authenticate your identity and manage your account.
• To publish content to your connected social media platforms on your behalf.
• To schedule and manage your posts.
• To send push notifications about post status and account activity.
• To improve and optimize our service.

4. Data Storage and Security

• Your data is stored in secure, encrypted databases.
• Authentication tokens for social media platforms are stored securely and used only to perform authorized actions.
• Media files are stored via Cloudinary, a trusted third-party cloud service.
• We use JWT (JSON Web Tokens) for secure session management.
• We implement industry-standard security measures to protect your data.

5. Third-Party Services

Cross-Post integrates with the following third-party services:

• Social Media Platforms: Facebook, Instagram, TikTok, Twitter/X, LinkedIn, YouTube, Reddit — to publish content on your behalf.
• Cloudinary: For media file storage and optimization.
• Expo Push Notifications: For delivering push notifications to your device.

Each third-party service has its own privacy policy. We encourage you to review their policies.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We only share your data:

• With connected social media platforms to publish your content (as authorized by you).
• With service providers necessary to operate our application (database hosting, media storage).
• When required by law or to protect our legal rights.

7. TikTok Data Usage

When you connect your TikTok account, we use TikTok's Login Kit and Content Posting API to:

• Authenticate your TikTok identity (Login Kit — user.info.basic scope).
• Publish video content to your TikTok account on your behalf (Content Posting API — video.publish scope).

We do not access your TikTok followers, messages, or any data beyond what is listed above.

8. Your Rights

• Access: You can view your account data within the App at any time.
• Disconnect: You can disconnect any social media platform at any time, which revokes our access.
• Delete: You can request deletion of your account and all associated data by contacting us.
• Portability: You can request a copy of your data.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data and revoke all platform tokens within 30 days.

10. Children's Privacy

Cross-Post is not intended for children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@cross-post.app.