Privacy Policy

• Account information: When you sign in with Google, we create a OmniPost account and store your email address, your name, your profile picture URL, and a Google account identifier used to recognize you on future sign-ins.
• Google authentication information: We use Google Sign-In to authenticate you. We request only the basic identity scopes (openid, email, and profile). The OAuth tokens issued during Google Sign-In are used to complete the sign-in and are not stored by OmniPost.
• Connected YouTube account information: If you connect YouTube, we store the identity of the channel you authorize (channel ID, channel title, and channel thumbnail) and the OAuth credentials needed to act on your behalf. These credentials are held on our servers only and are never sent to your browser.
• Connected Instagram account information: If you connect Instagram, we store the identity of the professional (Business or Creator) account you authorize (account ID, username, display name, and profile picture) and the access token needed to publish on your behalf. This token is held on our servers only.
• Uploaded videos and media: When you upload a video, we store the video file in a private storage bucket, along with metadata such as the file name, file type, file size, and processing status.
• AI-generated content: We store the results of AI processing, including the transcript and a structured understanding of your video (such as a suggested title, summary, topic, and key points), and the platform content generated from it (for example a YouTube title and description, an Instagram caption, hashtags, and a call to action), including any edits you make before publishing.
• Technical and log information: To operate and secure the service, our servers process standard technical information such as your requests to our API and related error and diagnostic logs. We maintain a server-side session to keep you signed in.

We use the information we collect to:

• Authenticate you and keep you signed in to your OmniPost account.
• Let you connect and manage your YouTube and Instagram accounts.
• Store the videos you upload and make them available to you inside the app.
• Process your uploaded video with AI to produce a transcript, an understanding of the video, and platform-specific content suggestions.
• Publish the content you approve to the social accounts you have connected.
• Operate, maintain, secure, debug, and improve the reliability of the service.

• To provide the features you request: When you publish content, we send that content — and, for Instagram, a temporary link that lets the platform retrieve your video — to the social platform you selected. When you use AI features, we send audio extracted from your video and the resulting transcript to our AI processing provider.
• With service providers: We use third-party infrastructure providers to run OmniPost, such as database, object-storage, background-job, and AI processing providers. They process information only to provide services to us.
• For legal reasons: We may disclose information if required to do so by law, or to protect the rights, safety, and security of our users, the public, or OmniPost.
• In a business transfer: If OmniPost is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

• Google: Used for Google Sign-In (authentication). We receive your basic Google profile identity (email, name, and profile picture) so we can create and recognize your account.
• YouTube (via Google APIs): When you connect YouTube, we use the YouTube Data API to identify your channel and, when you choose to publish, to upload a video to your channel on your behalf.
• Instagram / Meta: When you connect Instagram, we use the Instagram API (with Instagram Login) to identify your professional account and, when you choose to publish, to create and publish a Reel on your behalf.
• AI processing provider: We send audio extracted from your uploaded video and the resulting transcript to our AI provider to transcribe the audio and generate content suggestions. Your raw video file is not sent to the AI language model.
• Cloud infrastructure and storage providers: We use managed cloud services to store your uploaded videos in a private bucket, to host our database, and to run background processing. These providers store and process data on our behalf to operate the service.

What Google data OmniPost accesses and why:

• Basic Google profile: Through Google Sign-In (openid, email, profile scopes), OmniPost receives your email, name, and profile picture. This is used only to create your account, sign you in, and identify you within OmniPost. The OAuth tokens from Google Sign-In are not stored.
• YouTube channel identity: When you connect YouTube, OmniPost reads only the identity of your own channel so it can show which channel is connected.
• YouTube video upload: When you choose to publish, OmniPost uses the YouTube upload permission to upload a video to your channel on your behalf. OmniPost does not read your existing videos, playlists, analytics, or statistics.

How Google user data is handled:

• Google user data is not sold.
• Google user data is not used for advertising.
• Google user data is not transferred to others except as necessary to provide the features you request and as permitted by applicable Google policies, to comply with applicable law, or as part of a business transfer.
• You can revoke OmniPost’s access to your Google data at any time through your Google Account permissions settings, and you can disconnect your connected YouTube account from within OmniPost.

The permissions we request and why:

• Google Sign-In: Basic identity scopes (openid, email, profile) so you can sign in and we can create your OmniPost account.
• YouTube: A read permission used only to identify the channel you connect, and an upload permission used only to publish a video to your channel when you choose to. We do not request analytics or partner scopes.
• Instagram: A basic permission to read your professional account identity, and a content-publishing permission used only to publish a Reel when you choose to. We do not request insights or messaging permissions.

• Account and connection information: Retained while your OmniPost account exists and, for a connected account, until you disconnect it.
• Uploaded videos: The stored video file is automatically removed from our storage after a limited period following upload or publishing. You can also delete an uploaded video at any time from within the app.
• Generated content and analysis: The transcript, analysis, and generated content associated with your videos are retained so you can review and reuse them, until removed as described in the sections below.

• Delete an uploaded video, which removes the stored video file and its record.
• Disconnect a connected YouTube or Instagram account, which removes the stored connection and its credentials.
• Sign out to end your current session.