Privacy Policy
The short version: we collect what's needed to publish your posts and run your account — nothing for advertising, and nothing we sell. ClearCast ("ClearCast", "we", "us") manages social accounts on your behalf, so the rest of this page spells out exactly what we hold, why we hold it, who ever touches it, and how you get it back out. We've written it to be read, not to hide behind. If anything here is unclear, email us and we'll explain it in plain terms.
What we hold — and what we don't
- Account information — your name, email address, and authentication credentials, managed through our authentication provider when you create a ClearCast account.
- Connected social accounts — when you connect a platform (Facebook, Instagram, YouTube, X, Mastodon), we receive and securely store the access/refresh tokens and basic account identifiers (e.g., Page name, account handle, account ID) needed to publish on your behalf and read basic engagement metrics. Access tokens are stored server-side only and are never exposed to your browser or to other customers.
- Content you create — captions, scheduled posts, uploaded images and video, comments/replies, and related metadata you produce in ClearCast.
- Usage data — actions taken in the app (e.g., posts scheduled or published) used to operate, secure, and improve the service.
- Billing information — handled by our payment processor (Stripe). We do not store full card numbers.
Data from the accounts you connect
When you authorize ClearCast to connect a Facebook Page and/or Instagram Business account, we access only what you grant via the permissions you approve — to (a) list the Pages/accounts you manage, (b) publish content you create in ClearCast to those accounts, and (c) read basic engagement information for content published. We use this data solely to provide the features you request. We do not sell Platform Data, and we do not use it for advertising or to build user profiles. Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies; use of Google/YouTube data follows the Google API Services User Data Policy.
What we do with it
- Publish and schedule the content you create to the accounts you connect.
- Show you analytics and delivery status for your posts.
- Run, maintain, secure, and improve ClearCast.
- Reach you about your account and service updates.
That's the whole list. We don't profile you, feed your data to ad networks, or train models on your content.
Who else ever touches it
Only the providers it genuinely takes to run the service:
- Connected platforms you authorize — Meta (Facebook/Instagram), Google (YouTube), X, Mastodon — to publish your content.
- Infrastructure & processors — our hosting/storage provider (Supabase), our deployment platform (Vercel), our payment processor (Stripe), and AI content providers you choose to use for generation. These process data on our behalf under their own terms.
- Legal — where required by law or to protect rights and safety.
We do not sell your personal information.
How long we keep it
As long as your account is active, or as long as we need it to run the service for you. Delete content, disconnect a platform, or ask us to wipe everything whenever you want (see below). The moment you disconnect a platform, we delete the access tokens we stored for it.
Getting your data back out
It's your data. You can remove it three ways:
- Disconnect a platform in Settings → Integrations to immediately remove ClearCast's stored access tokens for that account.
- Delete content (posts, media) directly in the app.
- Request full deletion of your ClearCast account and associated data via our Data Deletion page.
If you connected via Facebook, you can also remove ClearCast from your Facebook settings (Settings → Apps and Websites), which triggers our data-deletion process automatically. Details and our deletion callback are described on the Data Deletion page.
Security
Access tokens and sensitive credentials are stored server-side and are never returned to client browsers. Access to customer data is scoped per workspace so one customer cannot access another's data. We use encrypted transport (HTTPS) for all traffic.
Kids
ClearCast isn't built for children under 13 (or the minimum age where you live), and we don't knowingly collect their data.
When this changes
If we update this policy, the "Last updated" date at the top changes with it. We'll flag anything material rather than slip it past you.
Talk to a human
Any question or request about your privacy or data — support@clear-cast.net. A person reads it.