Privacy Policy

Spreadlo (“Spreadlo”, “we”, “us”) lets you upload a short video once and publish it to TikTok, Instagram and YouTube accounts that you connect. This policy explains what data we collect, why, how long we keep it and how you can delete it.

1. Data we collect

Account data

• Your email address and a hashed version of your password (we never store the password itself).
• Your language preference and the account groups you create.

Data from connected platforms

When you connect a social account, the platform asks you to approve access and then gives us:

• YouTube (Google): your channel ID, channel name and thumbnail, and OAuth tokens that allow uploading videos to your channel.
• Instagram (Meta): your Instagram professional account ID, username and profile picture, and access tokens that allow publishing Reels.
• TikTok: your TikTok open ID, display name and avatar, creator posting settings, and access tokens that allow posting videos.

We never receive or store your passwords for these platforms.

Content you upload

The video files, titles, captions and publishing settings you submit.

Technical data

Basic server logs (such as IP address, browser type and request time) used for security and troubleshooting.

2. How we use data

• To publish the videos you submit to the accounts and groups you select, at the time you choose.
• To show you the publishing status and links to your published posts.
• To keep your connections working by refreshing access tokens.
• To secure the service, prevent abuse and fix errors.
• To send you service emails, such as early access invitations you signed up for.

We do not sell your data, use it for advertising, or use your content to train machine learning models.

3. Google and YouTube data

Spreadlo uses YouTube API Services to upload videos to your YouTube channel. By connecting a YouTube channel you agree to be bound by theYouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

Spreadlo’s use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide the uploading features you request, and we do not share it with third parties except as needed to provide the service, to comply with law, or with your consent.

You can revoke Spreadlo’s access to your Google account at any time fromGoogle security settings, or by disconnecting the channel in Spreadlo.

4. Sharing

We share data only with:

• The platforms you choose to publish to (TikTok, Instagram/Meta, YouTube/Google), to deliver your posts.
• Cloudflare, which hosts our application, database and file storage.
• Authorities, when required by law.

5. Storage and retention

• Access tokens are stored encrypted and deleted when you disconnect an account or delete your Spreadlo account.
• Uploaded video files are deleted from our storage within 7 days after publishing is finished.
• Post records (titles, captions, status and links) are kept until you delete them or your account.
• Server logs are kept for up to 30 days.

6. Deleting your data

You can delete your data at any time:

• Disconnect an account: open the group in the Spreadlo panel and disconnect the account. Its tokens are deleted immediately.
• Delete everything: email support@spreadlo.com from your account email with the subject “Delete my data”. We delete your account, groups, tokens, posts and files within 30 days and confirm by email.
• From the platform side: remove Spreadlo from Google security settings, Instagram’s “Apps and websites” settings, or TikTok’s “Manage app permissions”. We delete the related tokens when we detect the revocation.

7. Security

All traffic is encrypted with HTTPS. Tokens are encrypted at rest with AES-256-GCM. Passwords are hashed with PBKDF2. Access to production systems is limited.

8. Children

Spreadlo is not intended for people under 16, and we do not knowingly collect data from them.

9. Your rights

Depending on where you live (for example under the GDPR or Turkey’s KVKK), you may have the right to access, correct, export or delete your data, and to object to certain processing. Contact us at support@spreadlo.com to use these rights.

10. Changes

We will post any changes on this page and update the date above. For significant changes we will notify you by email.

11. Contact

Questions about this policy: support@spreadlo.com