Postbridge.io
Privacy Policy
Last updated: October 22, 2026
Information we collect
Account identifiers, workspace memberships, connected channel metadata, content, publishing settings, billing events, usage, audit events, and diagnostics required to operate the service.
How we use information
We use information to authenticate users, manage workspaces, connect providers, prepare and publish content, process billing, provide support, secure the service, and enforce usage limits.
Google sign-in and YouTube API Services
Postbridge uses YouTube API Services. Google sign-in provides your Google account identifier, email and display name for your Postbridge account. Connecting a YouTube channel is a separate permission: we receive its identifier and title, OAuth access and refresh tokens, and the identifiers, processing status and visibility of videos uploaded through Postbridge. We do not ask for your Google password or access to Gmail, Drive, contacts or your browsing history.
How YouTube data is used
We use youtube.upload to upload videos that you approve and youtube.readonly to identify your selected channel and check upload results. You control the destination, video, title, description, audience and visibility before approval. Refresh tokens let Postbridge complete scheduled deliveries while you are offline. A video and its approved publishing details are sent to YouTube when you authorize delivery.
TikTok connections and publishing
Connecting TikTok requests user.info.basic to identify the account and video.publish to publish your original videos after approval. We receive the account identifier, display name, encrypted authorization tokens, current creator publishing permissions and the status and identifiers of posts sent through Postbridge. The publishing review displays the creator account and current available visibility choices. You choose visibility, interactions and commercial-content disclosure for each video and confirm your rights and TikTok music usage before delivery. TikTok receives the video URL, caption and the settings you approve. We do not use TikTok API data to train AI models or for advertising or sale.
Third-party providers
Postbridge exchanges content and operational data with publishing, storage, email, payment and AI providers needed for the features you use. Card details are entered on the payment provider's checkout page.
Who receives Google user data
Google and YouTube process the authorization and API requests needed for sign-in, channel connection and approved video delivery. YouTube receives the video and publishing details you approve. Our hosting and database providers process account and channel data, including encrypted credentials, to operate Postbridge. Beget provides source-media storage and operational email delivery using your account or billing email. Lava receives your selected billing email, which may be your Google account email, and purchase details when you pay through its checkout. Authorized workspace members can see channel metadata and publishing results according to their permissions.
Optional AI and connected clients
When you use AI assistance, your request and relevant workspace context may be sent through GitSell (gitsell.ru) to the model provider serving the feature, including OpenAI for the workspace assistant. This context can include connected YouTube channel identifiers, titles and publishing diagnostics. If you authorize an external MCP client, it can receive channel metadata and content within the permissions you grant. Stored Google OAuth credentials are excluded from AI context and external-client responses.
Limited use of Google data
Postbridge's use and transfer of Google user data comply with the Google API Services User Data Policy and its Limited Use requirements. We do not sell Google user data, use it for advertising or use it to train generalized AI models. We disclose data only for the features you request and authorize, security investigations or legal requirements. Staff may access specific Google user data only with your consent, for security investigations or when required by law.
How we protect Google user data
We use HTTPS/TLS for browser communication and requests to Google APIs. Stored Google OAuth access and refresh tokens are encrypted at rest. Access to account and channel data is restricted by authentication and workspace permissions; backend credential operations require service authentication. Encryption keys and OAuth client secrets are kept in server-side configuration, not frontend code.
Retention
We retain data while needed to provide the service, meet legal obligations, resolve disputes, and protect the platform. The specific retention, revocation and deletion controls for YouTube API data are described below.
YouTube access and deletion
You can disconnect a YouTube channel in Postbridge and revoke Postbridge access from your Google account permissions. Disconnecting revokes Google authorization and removes stored channel data and upload receipts. We check authorization and remove stored YouTube API data when revoked access is detected. Cached YouTube API data is refreshed or deleted within 30 calendar days. To request deletion of stored YouTube API data, email support@postbridge.io from your account email and identify the workspace and channel. We process verified requests to delete YouTube API data within seven calendar days. Deleting data from Postbridge does not delete videos already uploaded to YouTube; manage those videos in YouTube Studio. User-supplied source videos and drafts have their own workspace deletion controls.
TikTok access and deletion
TikTok tokens are encrypted server-side and retained while the connection is needed for the features you authorize. Disconnecting revokes TikTok authorization and erases the stored account connection, tokens and provider upload receipts. You can also revoke access in TikTok account settings or request deletion through support@postbridge.io from your account email. Disconnecting Postbridge does not delete posts from TikTok or your own source videos and drafts; manage them through the respective product controls.
Your choices
You can disconnect channels, change workspace settings, cancel subscriptions, and request account or data deletion.
Provider terms and account controls
Google account permissions: revoke Postbridge access