Privacy Policy.

Last updated: 31 October 2026

ClickPost ("ClickPost", "we", "us") is a service for social media agencies. Agencies connect a cloud folder for each of their clients; ClickPost watches those folders, uses AI to write captions for new videos, and publishes or schedules them on the clients' social media accounts. This policy explains what information we handle, why, who we share it with, and the choices you have.

Who this applies to

• Agency users: people who create a ClickPost account or are invited to an agency's workspace.
• Agency clients: businesses and creators whose social media accounts are connected to ClickPost through the agency's connect link.
• Website visitors to clickpost.biz.

For the videos, captions and client accounts an agency manages through ClickPost, the agency decides what is processed and ClickPost processes it on the agency's behalf.

What we collect

• Account details: name, email address, a securely hashed password (or your Google account ID and email if you sign in with Google), agency name, logo and timezone, and your role in the workspace.
• Storage access: when an agency connects OneDrive, Google Drive, Dropbox or another storage, we receive an access token for that storage. We only read and organise the folders the agency picks (listing files, downloading videos, moving them to Posted/Failed folders, writing caption notes).
• Content: the videos and photos placed in those folders, file names, optional notes, and the captions generated for them.
• Social media connections: when a client connects Instagram, Facebook, YouTube, TikTok, LinkedIn, X or Threads, the login happens on that platform's own page. ClickPost never sees the password. The resulting access is held by our posting provider (see below) and used only to publish the content the agency sends.
• Activity and usage: what was posted, when, to which platform, errors, and how much AI processing each workspace used.
• Notification settings: Telegram chats chosen to receive alerts.
• Technical data: IP address, browser type and log records needed to run and secure the service. We do not use advertising cookies; we use one session cookie to keep you logged in.

How we use it

• To run the service: watch folders, write captions, post and schedule content, and show status and reports.
• To send service emails and alerts: confirming your email, password resets, team invites, posting alerts and daily reports.
• To keep accounts secure, prevent abuse and fix problems.
• To bill for the service and meet legal obligations.

We do not sell personal data, and we do not use your content or your clients' content to train AI models.

Google user data

If you sign in with Google, we receive your name, email address and Google account ID, only to create and identify your ClickPost account. If you connect Google Drive, we access only the files and folders needed to fetch videos for posting and to organise them, as described above. ClickPost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security, or as required by law.

Who we share data with

We use trusted service providers, only for the purposes above:

• Google Gemini (Google LLC): a reduced copy of each video is sent to write captions. Files are deleted from Gemini right after the captions are written.
• Upload-Post: publishes content to the connected social media platforms and holds those platform connections.
• The social media platforms you choose to post to (Meta, Google/YouTube, TikTok, LinkedIn, X), which receive the content and captions you publish.
• Your storage provider (Microsoft, Google, Dropbox and others) that you connect.
• Mailgun for sending emails, and Telegram for the alerts you set up.
• Hosting: our servers and database are hosted with Hostinger.
• Authorities, when required by law.

Some providers process data outside India. We choose providers that protect data with appropriate safeguards.

How we protect it

Connections are encrypted with HTTPS. Storage tokens and API keys are encrypted in our database. Passwords are stored only as salted hashes. Each agency's data is kept separate from every other agency's, and access within an agency follows the roles its owner sets.

How long we keep it

Videos are downloaded only temporarily to process them and are deleted from our servers afterwards; the originals stay in your own storage. Account data, captions and posting history are kept while the account is active. When an agency deletes its account, we delete its data within 30 days, except records we must keep by law (such as invoices).

Your choices and rights

• See and update your account details in the app.
• Disconnect storage or social accounts at any time, in ClickPost or from the provider's own security settings.
• Ask us for a copy of your data, or to correct or delete it, by writing to the address below.

We handle personal data in line with India's Digital Personal Data Protection Act, 2023, and respect the rights given by other laws that apply to you.

Children

ClickPost is a business tool and is not meant for anyone under 18.

Changes

If we change this policy in a meaningful way, we will update the date above and let account owners know by email or in the app.

Contact

Questions, requests or complaints about privacy: hello@clickpost.biz.