SpreadMyPost

Privacy Policy

Effective 2026-08-16

This policy explains what MAXHOLDING SRL ("we", "us") collects when you use SpreadMyPost, why we collect it, who it is shared with, and how you remove it. It covers the website and the application at https://spreadmypost.com.

1. What we collect

DataWhy we need it
Cookies, pixels, local storage and similar technologies that we and our third-party service providers may place, access or recognize on your device or browser when you visit or use SpreadMyPost To authenticate you and maintain your active session; remember your preferences and secure the application against unauthorized access or abuse; analyze technical logs and usage so the service functions correctly
Account details you create with us — name, email address, password hash To sign you in and identify your workspace
Social profile information — display name, username, profile picture, follower count To show you which account is connected and to draw your audience chart
Access tokens issued by each social network To publish on your behalf. Without them nothing can be posted
Post content you create — text, images, video, scheduled times To publish it, and to show you your history afterwards
Publishing results — the identifier of each published post and any error returned To link you to the original and to explain failures
Technical logs — IP address, browser type, timestamps Security, abuse prevention and diagnosing faults

You can control or disable cookies through your browser settings, though disabling them may affect your ability to use certain features of the service, such as staying logged in.

We do not collect your social network password. Connecting an account happens on the network's own authorization screen and returns a token to us. Bluesky has no such screen and instead uses an app password that you generate for this purpose and can revoke on its own.

We do not read your private messages, your contact lists, or content belonging to other people.

2. How we use it

  • To publish and schedule the content you ask us to publish
  • To display your connected accounts, your posts and their results
  • To record follower counts once per day so we can show growth over time
  • To notify you when an account needs reconnecting
  • To keep the service secure and to investigate problems

We do not use your content to train machine learning models, and we do not profile you for advertising.

3. Storage and security

Access tokens are stored encrypted at rest. They are decrypted only at the moment a request is made to the network on your behalf, and they are never displayed in the interface, exported, or sent anywhere other than the network that issued them.

Uploaded media is stored on our own storage and served over HTTPS. Some networks — Instagram, Threads and Google Business — download media from a link rather than accepting an upload, which means the file must be publicly reachable for the moment they fetch it.

4. Who we share with

We do not sell, rent or trade your data. It is shared only where the service cannot function otherwise:

  • The social networks you connect. Your post content and media are sent to the networks you selected, because that is what publishing means. Each network then handles that data under its own policy:
  • Infrastructure providers that host the servers and storage, acting on our instructions.
  • Authorities, where a valid legal obligation requires it.

5. Google API Services — Limited Use

SpreadMyPost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, for YouTube and Google Business Profile:

  • We use Google user data only to provide the publishing and analytics features you asked for
  • We do not transfer that data to others except as needed to provide the service, for security, or to comply with law
  • We do not use it for advertising, and we do not allow humans to read it except with your explicit consent, for security, or where law requires

By using the YouTube features you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

You can revoke our access to your Google account at any time at myaccount.google.com/permissions.

6. How long we keep it

  • Access tokens — until you disconnect the account or the network expires them. Disconnecting deletes them immediately.
  • Posts and media — until you delete them, or until your account is closed.
  • Follower history — while the account stays connected.
  • Technical logs — up to 90 days.
  • Everything else — deleted within 30 days of your account being closed.

7. Your rights

You may ask us to give you a copy of your data, correct it, delete it, or restrict how we use it.

Most of this you can do yourself: disconnect accounts, delete posts and media, or close your account from within the application. For anything else, write to privacy@spreadmypost.com and we will respond within 2 business days. See our Data Deletion page for the exact steps.

8. Children

The service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has provided us with information, contact us and we will remove it.

9. Changes

If this policy changes materially we will update the effective date above and, where the change affects you meaningfully, notify you in the application before it takes effect.

10. Contact

MAXHOLDING SRL
Blvd. PIPERA, Nr. 1/I, Const. C2, Bir. Nr. 10, Comp. 59
077190 Voluntari, Romania
privacy@spreadmypost.com