- We collect what we need to run EarnedPost: your account, the social accounts you connect, and what you create.
- Data from your connected accounts is used only to show you your own analytics and to publish what you ask us to. We never sell it, never use it for advertising and never use it to train AI models.
- Nothing is posted unless you, or a teammate you invited, press post or schedule.
- You can disconnect an account, download your data or delete everything yourself, from Settings, at any time.
01Who we are
EarnedPost (earnedpost.com) is a tool for creators and brands to research what performs, write posts and publish them to YouTube, TikTok, Instagram, Facebook, LinkedIn and X. This policy explains what we collect, why, who receives it and how to delete it.
The data controller is EarnedPost, MMB IT Consulting, Dubai, Dubai 00000, United Arab Emirates. Contact: hello@earnedpost.com.
02What we collect
Your account: name, email address, password (stored only as a salted scrypt hash), time zone, profile photo, and, if you sign in with Google, your Google account ID, name, email and profile photo.
Connected accounts: when you connect a social account we receive what you allow on that platform’s consent screen (listed per platform below), plus access tokens. Tokens are encrypted at rest (AES-256-GCM) and used only for the features you connected the account for.
What you create: brands, prompts, generated titles, scripts, posts, hashtags and images, drafts, schedules, media you upload, brand-voice samples, and face-pack photos.
Billing: your plan and payment history. Card details are handled by Stripe and never reach our servers.
Security and support: the IP address and browser of each sign-in session, short-lived records of attempts used to stop password guessing (kept for a day), help tickets, and messages sent through the contact form.
Chrome extension: if you connect it, it reads the public numbers of posts you are viewing (views, likes, a creator’s recent average) to score them, and on paid plans saves them to your library. It does not read messages, passwords or private data, and does nothing until you connect it.
03Data from each platform
YouTube (Google): your channel’s name, avatar, subscriber and view counts, your uploads and their public statistics, and permission to upload videos and set their thumbnails when you post. Used to show your analytics and reports and to publish your videos.
TikTok: your display name, username, avatar, follower, like and video counts, your videos and their statistics, and permission to post videos you send from EarnedPost. Before each post we read your account’s posting options from TikTok (allowed privacy levels, interaction settings) and you choose them yourself.
Instagram and Facebook (Meta): the Facebook Pages and Instagram professional accounts you choose to connect, their names, pictures and follower counts, their posts and insights, and permission to publish to them. We do not access personal Facebook profiles, friends, messages or groups.
LinkedIn: your name, profile photo and member ID (and the Company Pages you administer, if you connect one), the statistics of your posts where LinkedIn provides them, and permission to post on your behalf.
X: your name, username, avatar, follower count, your recent posts and their public metrics, and permission to post on your behalf.
04How we use it
To run the service: publish and schedule the posts you approve, show your analytics, weekly report and client reports, generate content, and keep your library up to date.
To keep it safe: prevent abuse (rate limits, blocking abusive networks), secure accounts and investigate errors.
To talk to you: account emails (verification, password resets, invitations, publishing results) and the notifications you choose in Settings.
We never sell or rent personal data, never use it for advertising, and never allow third parties to serve ads or other content in EarnedPost.
05Google user data and YouTube
EarnedPost uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service: https://www.youtube.com/t/terms. Google’s Privacy Policy applies to Google’s handling of your data: http://www.google.com/policies/privacy.
EarnedPost’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Google user data is used only to provide the features you see in EarnedPost: your channel’s analytics and reports, and uploading the videos you post. It is not used for advertising, not sold, not used to train AI models, and not read by people except with your consent, for security, or where the law requires.
Video titles from your channel may be sent to our AI provider (below) to group your posts by format in your weekly report. That is the only transfer, and it serves a feature you use.
You can revoke EarnedPost’s access at any time from the Google security settings page: https://security.google.com/settings/security/permissions. When you disconnect YouTube in EarnedPost we revoke our token with Google right away and delete the data we stored from your channel. If you revoke access from Google instead, the account shows as disconnected and its data is deleted within 30 days.
Statistics from your channel are refreshed at least daily while it is connected.
06The Viral Library
The library shows public posts that did unusually well for their creator, so you can study what works. It is built from public data only: public videos, their public titles, thumbnails, view and like counts, and the public name and country of the channel or account, from YouTube API Services, Instagram’s official API for public professional accounts, and public posts seen by paid users of our Chrome extension.
Multipliers, outlier scores, predictions and formats are calculated by EarnedPost. They are not YouTube or other platform metrics.
We do not collect private content, messages or anyone’s personal contact details. If you are a creator and want your channel or account left out of the library, write to hello@earnedpost.com from an address we can link to it and we will remove it and keep it out.
07Who receives data
OpenAI (AI generation and transcription): your prompts, brand-voice samples, media you send to Clips, the post titles described above, and, only when you use “Use my face”, face-pack photos. Under OpenAI’s API terms this data isn’t used to train their models, and may be kept by them for up to 30 days for abuse monitoring.
Stripe (payments): your email, name and billing details, to take payments and issue invoices.
Our email provider: your email address and the content of emails we send you.
The platforms you connect: the posts and media you publish, sent through their official APIs.
Authorities, only when the law requires it.
Nobody else. We host EarnedPost on our own servers.
08Your face and your content
Face-pack photos are stored on our servers and used only to make thumbnails for the brand they belong to. They are sent to our AI provider only at the moment you generate with “Use my face”.
You keep the rights to everything you create. We use it only to provide the service to you.
09Keeping and deleting data
We keep your data while your account is open. Uploaded media is kept with its brand until you delete the brand or your account. Accounts that stay disconnected (access revoked on the platform) are deleted with their data after 30 days.
Disconnect one account: Settings → Connected accounts → Disconnect. We revoke our token where the platform allows it, and delete the tokens and everything we stored from that account immediately.
Delete a brand (Settings → Brand) or your whole account (Settings → Profile → Delete my account): everything in it is deleted immediately and platform tokens are revoked. Deleting your account also cancels your plan.
From Facebook or Instagram: removing EarnedPost in Facebook’s Settings & privacy → Settings → Apps and websites deletes your Page and Instagram connections and their data automatically; you can check the status at https://earnedpost.com/data-deletion with the confirmation code Facebook gives you.
From TikTok, LinkedIn or X: revoking access in that platform’s settings stops our access immediately; the account is deleted from EarnedPost with its data within 30 days, or right away if you disconnect it.
By email: write to hello@earnedpost.com from the address on your account and we will delete your data within 7 days.
Copies in our encrypted backups expire within 14 days. We keep payment records as long as tax law requires.
10Your rights
You can access and download your data (Settings → Profile → Download my data), correct it, delete it, and object to or restrict some uses of it. Depending on where you live (for example under the GDPR or CCPA) you may also complain to your data protection authority. For anything you can’t do yourself, write to hello@earnedpost.com and we’ll answer within 30 days.
11Security
Connections are encrypted (HTTPS), platform tokens are encrypted at rest, passwords are hashed, and access to production data is limited to the people who run EarnedPost. No method is perfect; if a breach affects your data we will tell you without undue delay.
12Cookies
We use only the cookies needed to sign you in, remember the brand you’re working in, and keep security features working. No analytics or advertising cookies, and no third-party trackers.
13Children
EarnedPost is not for children. You must be at least 16 to use it, and we don’t knowingly collect data from anyone younger.
14Changes and contact
If we change this policy in a way that matters, we’ll tell you by email or in the product before it takes effect. Questions or complaints about privacy: hello@earnedpost.com or the contact page.