PokéPublish collects only what is necessary to provide the service: OAuth access tokens for connected platforms (TikTok, YouTube, Instagram), scheduled post data, and uploaded media files. We also collect your email address for account authentication.
Your data is used solely to schedule and publish content to the platforms you connect. We do not analyze, sell, or share your data with any third parties.
Data is stored securely on Railway infrastructure. OAuth tokens are stored in a database and used only to authenticate API requests on your behalf. Media files are stored temporarily on Railway volumes and are not shared with third parties.
When you connect your TikTok account, we store only the access token required to publish videos. We do not access your TikTok followers, messages, or any data beyond what is needed for video publishing. TikTok data is handled in accordance with the TikTok API Terms of Service.
When you connect your Instagram account via Meta, we request only the instagram_business_basic and instagram_business_content_publish permissions. We use these exclusively to publish scheduled content to your Instagram Business account. We do not access your followers, direct messages, comments, or any other Instagram data. We do not store any Meta user data beyond the access token required to publish on your behalf.
PokéPublish complies with the Meta Platform Terms and Meta Developer Policies.
When you connect your YouTube account, we request only the permissions required to upload videos (youtube.upload) and manage your channel (youtube). We use these exclusively to upload and schedule video content on your behalf. We do not access your subscribers, comments, or any other YouTube data beyond what is necessary for video publishing.
PokéPublish's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect your accounts at any time from the Settings page, which immediately removes all stored OAuth tokens for that platform. To request full deletion of your account and all associated data, contact us at arispokelestcg@gmx.de and we will delete your data within 30 days.
For Instagram users: you can also request data deletion directly via our deletion endpoint. Meta may direct users to this page as part of their data deletion callback requirements.
PokéPublish uses the following third-party services:
Railway – hosting infrastructure (Privacy Policy)
Resend – transactional email for password resets (Privacy Policy)
PokéPublish uses browser localStorage to store your authentication token. No third-party tracking cookies are used.
For privacy questions or data deletion requests: arispokelestcg@gmx.de