Privacy Policy

Last updated: January 6, 2026

What We Collect

• Account data: Email, name, and profile picture (from Google OAuth or manual signup)
• YouTube channel data: Channel ID, title, and thumbnail URL
• OAuth tokens: Access and refresh tokens, encrypted with Fernet (AES-128-CBC)
• Upload metadata: Video title, description, privacy setting, upload status
• Video files: Temporarily stored during upload, deleted immediately after publishing

How We Use Your Data

Your data is used exclusively to provide multi-platform video publishing services. We do not sell, share, or provide your data to third parties, advertisers, or analytics providers.

Security

• OAuth tokens encrypted at rest with Fernet (AES-128-CBC + HMAC)
• HTTPS/TLS 1.2+ for all transport
• HttpOnly session cookies
• Users can only access their own data

Data Retention

• Account data: until you delete your account
• Upload history: purged after 90 days
• Video files: deleted immediately after upload to platform
• OAuth tokens: until you disconnect the platform

Your Rights

You can delete your data at any time via the dashboard or by emailing [email protected]. We support GDPR right to access, deletion, and portability.

Google API Services

CrossPost Pro's use and transfer of information received from Google APIs to any other app adheres to Google API Services User Data Policy, including the Limited Use requirements.

Contact

Privacy inquiries: [email protected]

Back to home