What we collect
When you sign in with Google: your email address, your name and your Google account identifier. When you connect a social media account (LinkedIn, YouTube, Instagram, Facebook, TikTok or X): the access tokens that platform issues, and the names, handles and identifiers of the pages and channels you choose to manage. What you create: post text, images and video, schedules and your account's settings. For the posts you publish: the totals each platform reports about them (views, reach, likes, comments, shares, saves, clicks and watch time), never who viewed or reacted. For paid accounts, card details are collected and held by Stripe, our payment processor; we keep only the customer and subscription references Stripe gives us, never card numbers.
Why we use it
To sign you in, to publish what you schedule to the accounts you connected, to show you what was published and how each post did on each channel, and to bill paid accounts. We do not sell personal data, use it for advertising, or use it to train models.
Where it is kept
On servers in the United Arab Emirates. Access tokens and app secrets are encrypted before they are stored. Encrypted backups are kept for a limited time, for recovery only.
AI assistants and API keys
If you connect an AI assistant such as Claude or ChatGPT, or make an API key, it reads and writes in your account only within what you allowed and your role permits. We record which tool each assistant or key used and when, and keep that record for 90 days; every post it writes is marked with its name. We do not keep your conversation with the assistant: your questions and its answers stay with the assistant's provider, under its own terms. Disconnect an assistant or revoke a key at any time under Account, AI & API, and its access ends at once.
How long we keep it
For as long as your account is open, except photos and videos: they are deleted 7 days after their post goes out, 48 hours after it is cancelled, or 7 days after it fails, and a small preview stays. When an account is closed, its access tokens and app secrets are deleted at once and everything else within 30 days; backups age out after that.
Your rights
You may ask to see, correct or delete your personal data, or to stop us processing it, by writing to support@fydioo.com. You can disconnect any social media account from Channels at any time, and revoke our access in that platform's own settings.
Changes
When the service changes what it does with personal data, this page changes first.
Questions about this page
Write to support@fydioo.com
