Privacy Policy
Last updated: June 17, 2026
PostLoopr ("we", "us", or "our") is operated by Dot Nexus in the Netherlands. We provide https://postloopr.com, a web application that helps creators upload content once and manage publishing, lifecycle automation, and AI-powered optimization across social platforms through official platform APIs.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you have. It applies to all users of PostLoopr, including integrations with TikTok, Instagram, Facebook, YouTube, and LinkedIn.
1. Information We Collect
Account and authentication data
- Email address (passwordless login via one-time codes)
- Session tokens stored in httpOnly cookies
- Optional display name
- Waitlist email address if you join before launch
Content library and AI analysis data
- Videos and media you upload to your workspace library
- Derived analysis assets such as first-seconds screenshot collages
- AI-generated labels, scores, and recommendations about your content
- Scheduling, lifecycle, and publishing history inside PostLoopr
Social platform connection data
When you connect a social account, we collect only the data required to authenticate you and perform actions you request. This varies by platform:
TikTok
- TikTok open_id and account identifiers
- OAuth access and refresh tokens (encrypted at rest)
- Authorized API scopes
- Public profile information (display name, avatar)
- Content and metadata you submit for publishing (captions, privacy, interaction settings)
- Publishing status and post identifiers returned by TikTok
Purpose: Authenticate your TikTok account, display your profile in PostLoopr, and publish videos you approve through the Content Posting API.
Instagram
- Instagram professional/creator account identifiers
- OAuth access tokens (encrypted at rest)
- Authorized API scopes
- Profile and page metadata needed to publish on your behalf
- Content metadata you submit for publishing
- Publishing status and media identifiers returned by Meta
Purpose: Connect your Instagram account and publish content you approve through Meta's official APIs.
Instagram integration may be in development. We only collect this data after you explicitly connect that platform.
Facebook
- Facebook Page and user identifiers
- OAuth access tokens (encrypted at rest)
- Authorized API scopes
- Page metadata required for publishing
- Content metadata you submit for publishing
- Publishing status and post identifiers returned by Meta
Purpose: Connect Facebook Pages you manage and publish content you approve through Meta's official APIs.
Facebook integration may be in development. We only collect this data after you explicitly connect that platform.
YouTube
- Google account and YouTube channel identifiers
- OAuth access and refresh tokens (encrypted at rest)
- Authorized API scopes
- Channel metadata needed to upload or schedule content
- Video metadata you submit for publishing
- Upload and publishing status returned by YouTube
Purpose: Connect your YouTube channel and upload or manage videos you approve through Google's YouTube Data API.
YouTube integration may be in development. We only collect this data after you explicitly connect that platform.
LinkedIn
- LinkedIn member or organization identifiers
- OAuth access tokens (encrypted at rest)
- Authorized API scopes
- Profile or organization metadata needed to publish
- Content metadata you submit for publishing
- Publishing status returned by LinkedIn
Purpose: Connect your LinkedIn profile or organization and publish content you approve through LinkedIn's official APIs.
LinkedIn integration may be in development. We only collect this data after you explicitly connect that platform.
Technical and security data
- IP address, browser type, device information, and request logs
- Error, audit, and abuse-prevention records
- Billing and subscription metadata if you purchase a paid plan
2. How We Use Your Information
We use personal data to:
- Authenticate you and maintain your account
- Store and process your content library
- Analyze full video content and generate AI insights you request
- Connect and maintain authorized social platform accounts
- Publish, schedule, pause, and repost content only when you direct us to
- Improve timing, captions, and lifecycle recommendations
- Provide support, security monitoring, and legal compliance
- Process payments and manage subscriptions
We do not sell your personal data. We do not use platform data for unrelated advertising profiles.
3. Legal Bases (EEA/UK users)
- Contract: to provide the service you signed up for
- Consent: when you connect a social platform or enable optional features
- Legitimate interests: security, fraud prevention, and product improvement where balanced against your rights
- Legal obligation: where required by law
4. How We Share Information
- Social platforms: when you connect an account or publish content, data is shared with that platform under its policies
- Service providers: hosting, email delivery, databases, storage, analytics, payment processing, and AI analysis providers that process data on our instructions
- Legal requests: when required by law or to protect rights, safety, and security
Google API Services (YouTube)
PostLoopr's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Platform policies
Your use of connected platforms is also subject to each platform's own terms:
5. Data Retention
- Account data: retained while your account is active
- Social tokens: retained while a platform remains connected; deleted on disconnect
- OTP codes: deleted after use or expiry
- Session tokens: expire after inactivity according to our security settings
- Content library: retained until you delete items or your account
- AI analysis records: retained for your workspace unless deleted
- Deleted account data: removed within 30 days unless law requires longer retention
6. Security
We use HTTPS, encrypted token storage, httpOnly cookies, access controls, and least-privilege API scopes. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures.
7. International Transfers
We may process data in the Netherlands and other countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Withdraw consent for platform connections
- Data portability
- Lodge a complaint with a supervisory authority
Contact dev@dotnexus.nl or follow our Data Deletion Instructions.
9. California Privacy Rights
California residents may request access to or deletion of personal information and may opt out of any sale of personal information. We do not sell personal information.
10. Children's Privacy
PostLoopr is not intended for children under 16. We do not knowingly collect personal data from children. Platform integrations may have additional minimum age requirements.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised last updated date.
12. Contact Us
Privacy questions: dev@dotnexus.nl
General contact: dev@dotnexus.nl
Privacy Policy URL: https://postloopr.com/privacy
Data Deletion URL: https://postloopr.com/data-deletion