Account, privacy and security
What data does PostEverywhere store, and how are my social accounts protected?
We store your profile, posts, media and analytics. Social account tokens are encrypted at rest. We never see your platform passwords for OAuth platforms.
PostEverywhere stores what it needs to publish for you: your profile, your posts and media, your connected accounts' access tokens, and the analytics the platforms return. Access tokens are encrypted before they are stored. For most platforms you sign in on the platform's own site, so PostEverywhere never sees your password.
What we store
- Your profile: name, email address, time zone, and sign-in details. Passwords are stored as a one-way hash.
- Your content: posts, drafts, captions, media files you upload or create in AI Studio, and campaigns.
- Connected accounts: the account name, avatar and the access token the platform gives us so we can publish. Tokens are encrypted with AES-256-GCM before they are saved.
- Results: post status, links to published posts, and the analytics the platforms return.
- Billing: your plan and invoices. Card details are held by our payment provider, not by us.
How connecting works
- Most platforms (for example Instagram, Facebook, LinkedIn, X, YouTube, TikTok, Threads, Pinterest, Google Business Profile): you sign in on the platform's own page and allow PostEverywhere. We receive a token, never your password.
- Bluesky: you give an app password made in Bluesky, not your main password.
- WordPress: you give an Application Password made in WordPress, or connect through the WordPress sign-in.
- Telegram and Discord: you set up a bot (Telegram) or a channel webhook (Discord) in the platform and give us its token or webhook address.
These credentials are stored encrypted too.
Remove our access
- Disconnect an account on the Accounts page. The stored token is deleted.
- Also remove PostEverywhere in the platform's own connected apps or business integrations settings.
- Delete your whole account in Settings > Advanced. See How to delete your account.
Client review links
Review link passwords are stored as a salted hash. A review link never gives anyone access to your account, only to the posts you put in the link.
Policies
Privacy policy: /privacy. Terms of service: /terms. Security questions: support@posteverywhere.ai.
Related articles
Still stuck? Email support@posteverywhere.ai and we will help.