Privacy Policy
Effective Date: January 2, 2025 (Last Updated)
1. Introduction
Post Farming is a social media management platform that helps businesses, content creators, and marketing agencies schedule and publish content to Instagram, Facebook, TikTok, and YouTube while tracking performance through unified analytics.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use Post Farming. By using our service, you agree to the collection and use of information in accordance with this policy.
Post Farming's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. Information We Collect
2.1 Account Information
When you create a Post Farming account, we collect:
- Email address
- Name (if provided)
- Password (encrypted)
- Account preferences and settings
2.2 Social Media Platform Data
Post Farming integrates with Instagram, Facebook, and TikTok through their respective Platform APIs. When you connect your accounts, we access and process the following data:
Instagram Permissions:
- instagram_business_basic - Your Instagram username, user ID, account type, and profile picture
- instagram_business_content_publish - Ability to create and publish posts to your Instagram account
- instagram_business_manage_insights - Post engagement metrics (likes, comments, saves, shares), account metrics (follower count, reach, impressions)
Facebook Permissions:
- pages_show_list - List of Facebook Pages you manage
- pages_manage_posts - Ability to publish posts to your Facebook Pages
- pages_read_engagement - Read engagement data on your posts
- pages_read_user_content - Read posts and content on your Facebook Pages
- read_insights - Access Facebook Page analytics and performance metrics
TikTok Permissions:
- user.info.basic - Your TikTok username, display name, avatar URL, and profile information. This allows us to identify your account and display your profile information in Post Farming.
- video.upload - Ability to upload video files to TikTok's servers. This permission allows us to transfer your video content to TikTok for publishing.
- video.publish - Ability to create and publish video posts to your TikTok account. This allows us to schedule and post videos on your behalf with your chosen captions, privacy settings, and other post configurations.
YouTube/Google Permissions:
- youtube.upload - Ability to upload videos to your YouTube channel. This permission allows us to publish video content to YouTube on your behalf when you create or schedule posts.
- youtube.readonly - Read-only access to your YouTube account information, including your channel name, channel ID, profile picture, and channel description. This allows us to identify your channel and display your channel information in Post Farming.
- yt-analytics.readonly - Read-only access to your YouTube Analytics data. This allows us to display video performance metrics such as views, watch time, and engagement statistics in your Post Farming dashboard.
2.3 Usage Data
We automatically collect information about how you use Post Farming, including:
- Pages visited and features used
- Time spent on the platform
- Browser type and version
- Device information
- IP address (for security purposes)
3. How We Use Your Information
We use your information to:
- Provide Our Service: Publish content to your connected social media accounts and display analytics
- Account Management: Create and maintain your Post Farming account
- Improve Our Platform: Analyze usage patterns to enhance features and user experience
- Communication: Send important service updates, security alerts, and support messages
- Security: Detect and prevent fraud, abuse, and security incidents
- Compliance: Meet legal obligations and enforce our Terms of Service
4. How We Store and Protect Your Data
We take data security seriously and implement industry-standard measures to protect your information:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Secure Storage: Your data is stored on secure servers provided by Supabase with encryption at rest
- Access Tokens: Social media access tokens are encrypted in our database
- Limited Access: Only authorized personnel have access to user data, and only when necessary for support or security purposes
5. Data Sharing and Third Parties
We do not sell your personal information to third parties. We only share your data in the following circumstances:
5.1 Service Providers
We use trusted third-party services to operate our platform:
- Supabase - Database and authentication services
- Vercel - Application hosting and infrastructure
- PostHog - Aggregated, anonymized analytics for product improvement
These providers are contractually obligated to protect your data and use it only to provide services to Post Farming.
5.2 Meta Platforms
When you connect Instagram or Facebook accounts, we interact with Meta's APIs to publish content and retrieve analytics on your behalf. This interaction is governed by Meta's Platform Terms and policies.
5.3 TikTok
When you connect your TikTok account, we interact with TikTok's APIs to publish video content on your behalf. This interaction is governed by TikTok's Terms of Service, Developer Terms, and Privacy Policy. We only access your TikTok data with your explicit permission and only use it to provide Post Farming's services.
What we do with TikTok data:
- Store your TikTok username, display name, and avatar to display in your Post Farming account
- Use your access token to upload and publish videos to your TikTok account when you create posts
- We do NOT store your TikTok videos on our servers - videos are uploaded directly to TikTok
- We do NOT access your TikTok analytics, followers, or private information beyond what's necessary for publishing
5.4 YouTube/Google
Post Farming uses YouTube API Services to enable you to upload and publish videos to your YouTube channel. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and Google Privacy Policy.
What we do with YouTube/Google data:
- Store your YouTube channel ID, channel name, channel description, and channel thumbnail to display in your Post Farming account
- Use your OAuth access token to upload and publish videos to your YouTube channel when you create posts
- Access your YouTube Analytics data to display video performance metrics (views, watch time, engagement) in your dashboard
- We do NOT store your YouTube videos on our servers long-term - videos are uploaded directly to YouTube
- We do NOT access your private YouTube data, subscriptions, or playlists beyond what's necessary for publishing and analytics
- We do NOT share your YouTube data with third parties except as necessary to provide Post Farming's services
Revoking YouTube Access:
In addition to Post Farming's normal procedure for deleting stored data (see Section 6.4 below), you can revoke Post Farming's access to your YouTube data at any time by visiting the Google security settings page. You can also use the alternative URL: https://myaccount.google.com/connections.
To revoke access:
When you revoke access, Post Farming will delete all stored YouTube data related to your account within 7 calendar days.
Post Farming's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5.5 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
6. Your Rights and Choices
6.1 Access and Update
You can access and update your account information at any time through your Post Farming account settings.
6.2 Disconnect Social Media Accounts
You can disconnect your Instagram, Facebook, or TikTok accounts at any time from the Connections page. This will immediately revoke Post Farming's access to your social media data and delete your access tokens from our servers.
6.3 Data Portability
You can request a copy of your data by contacting us at mierdluffy@gmail.com.
6.4 Data Deletion
How to Request Deletion of Your Data:
- Delete Individual Connections:
- Log into Post Farming at app.postfarming.com
- Go to "Connections" in the sidebar
- Click "Disconnect" on any Instagram or Facebook account
- This immediately revokes Post Farming's access and queues your social media data for deletion
- Delete Your Entire Account:
- Contact us at mierdluffy@gmail.com with the subject "Account Deletion Request"
- Include your account email address
- We will delete your account and all associated data within 30 days
- Revoke Access via Meta:
- You can also revoke Post Farming's access through your Facebook or Instagram account settings
- Facebook: Settings → Apps and Websites → Remove Post Farming
- Instagram: Settings → Website permissions → Remove Post Farming
- Revoke Access via Google:
- Visit the Google security settings page or Google Account connections
- Find Post Farming in the list of connected apps
- Click "Remove Access" to revoke Post Farming's access to your YouTube data
- Post Farming will delete all stored YouTube data within 7 calendar days of revocation
What Happens After Deletion:
- Social media access tokens are immediately invalidated
- Your social media data (posts, analytics, profile information) is deleted within 90 days
- Account information is permanently deleted within 30 days
- Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)
7. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. Specifically:
- Account Data: Retained while your account is active
- Social Media Data: Retained while accounts are connected; deleted within 90 days after disconnection
- Usage Analytics: Aggregated, anonymized data may be retained indefinitely for product improvement
- Legal Requirements: Some data may be retained longer if required by applicable law
8. International Data Transfers
Post Farming is operated by TriSof Ltd in the United Kingdom. Your data may be transferred to and processed in countries outside your country of residence, including the United States where our service providers (Supabase, Vercel) operate. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.
9. Children's Privacy
Post Farming is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. Cookies and Tracking
Post Farming uses cookies and similar technologies to:
- Keep you logged in to your account
- Remember your preferences
- Analyze usage patterns (through PostHog analytics)
- Ensure security and prevent fraud
You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Effective Date"
- Sending an email notification to your registered email address
- Displaying a notice in the Post Farming application
Your continued use of Post Farming after changes become effective constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
13. Compliance
Post Farming complies with applicable data protection regulations, including:
