Privacy Policy
Effective: 2 October 2026
This policy covers Appic Social, the publishing tool at dash.expertguy.dev, and the website expertguy.dev. Both are run by Appic Marketing LLC, 5900 Balcones Dr, Ste 27569, Austin, TX 78731, USA ("we", "us").
1. What Appic Social is
Appic Social is an internal tool. It lets the owner of an account write, approve and schedule posts, then publishes them to that owner's own social accounts and pages. It isn't open to the public. Only people we have invited can sign in, and only the account owner can approve a post before it goes out.
2. What data we access
When you connect an account, you sign in on the platform's own page and grant only the permissions listed below. We never see your password.
| Platform | Permissions we ask for | What we use them for |
|---|---|---|
| YouTube (Google) | youtube.upload, youtube.readonly | Upload videos you approved to your channel, and read your channel's name and ID to show which channel is connected |
| X | tweet.read, tweet.write, users.read, media.write, offline.access | Publish your approved posts and media, and show your handle |
| LinkedIn (personal) | openid, profile, w_member_social | Publish your approved posts, and show your name |
| LinkedIn (company page) | w_organization_social, rw_organization_admin | Publish to pages you administer |
instagram_business_basic, instagram_business_content_publish | Publish your approved posts, and show your handle | |
| Threads | threads_basic, threads_content_publish | Publish your approved posts, and show your handle |
| Facebook Page | pages_show_list, pages_read_engagement, pages_manage_posts | List your pages and publish your approved posts to them |
We don't read your messages, followers, contacts or analytics. We don't post anything you haven't approved.
3. What we store
- Access tokens for each connected account. These are encrypted with AES-256-GCM before they are stored, and are used only to publish your posts.
- Account details: the platform, your handle or page name, the account or page ID, the profile link and the connection status.
- Your posts: the text, the media files you upload, the schedule, and who approved them. After publishing, we also keep the platform's post or video ID.
- A short activity log (for example "connected", "approved", "posted"). The log never contains tokens or post text.
- A sign-in cookie that keeps you signed in. We use no analytics or advertising cookies, on the tool or on expertguy.dev.
4. How we use Google user data
- What we use it for: Appic Social's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to upload the videos you approve, and to show which channel is connected.
- What we never do with it: we don't sell it, use it for advertising, or share it with anyone, except as needed to provide the upload or where the law requires. We also don't use it to train AI models.
- Google's own policy: by using the YouTube features, you are also bound by the Google Privacy Policy.
5. How long we keep data
- Tokens: kept until you disconnect the account, or until you revoke our access on the platform. They are deleted within 7 days of a revoke.
- YouTube data (channel ID, name and video IDs): refreshed or deleted at least every 30 days.
- Uploaded media: deleted 30 days after the post is published or cancelled.
- Activity log: kept for 12 months.
- Everything else: deleted when you ask us to (see §7).
6. Who else processes data
We share data only with the service providers we need to run the tool:
- Cloudflare: hosting, database and file storage.
- The platforms you connect: your posts are sent to them when they are published.
- Our email provider: service alerts, sent only to our own team.
We don't sell personal data.
7. Your choices: revoke, disconnect, delete
- Disconnect in Appic Social: on the Channels screen, choose Disconnect. This deletes the stored tokens straight away and, where the platform supports it, revokes them.
- Revoke from the platform:
- Google / YouTube: Google security settings.
- X: Settings → Security and account access → Apps and sessions.
- LinkedIn: Settings → Data privacy → Permitted services.
- Meta (Instagram, Threads, Facebook): Settings → Apps and websites.
- Meta data deletion: removing the app in your Meta settings and asking for your data to be deleted sends us a deletion request. We delete the data for that account and give you a confirmation code. You can check its status at the link Meta shows you.
- Delete everything: email [email protected] from the address you use to sign in. We delete your data within 30 days and confirm by email.
8. Security
- Tokens and access: tokens are encrypted, keys are kept as server secrets, and sign-in is limited to invited email addresses.
- In transit: all traffic uses HTTPS.
- If something goes wrong: no system is perfectly secure. If a breach affects your data, we will tell you.
9. Children
The tool isn't meant for anyone under 18.
10. Changes
If this policy changes, we'll update the date at the top. If the change is significant, we'll tell signed-in users before it takes effect.
11. Contact
Appic Marketing LLC, 5900 Balcones Dr, Ste 27569, Austin, TX 78731, USA
Email: [email protected]