Privacy Policy

Effective date: July 22, 2026 · Last updated: July 28, 2026

iHatePosting (“iHatePosting,” “we,” “us,” or “our”) is a social media scheduling and management platform that helps you connect your social accounts, plan content, and publish posts automatically. This Privacy Policy explains what information we collect when you use iHatePosting, why we collect it, how we use and protect it, and the rights you have over it. We have written it in plain English on purpose — privacy policies only work if people can actually understand them.

This policy applies to the iHatePosting website at ihateposting.com (the “Website”), the iHatePosting web application, and any related services we provide (together, the “Service”). By using the Service, you acknowledge the practices described here.

1. Who we are

iHatePosting is a social media management platform that lets individuals and brands connect their social accounts, schedule content, publish posts automatically, and review analytics — all from a single dashboard.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws, iHatePosting acts as the data controller for the personal information described in this policy, except where we process content on your behalf as part of delivering the Service (for example, media files you upload for publishing), in which case we act on your instructions.

If you have any questions about this policy or how we handle your data, you can reach us at support@ihateposting.com.

2. Scope of this policy

This policy covers personal information we collect:

• When you visit our Website
• When you create and use an iHatePosting account
• When you connect social media accounts to iHatePosting
• When you purchase a subscription
• When you contact our support team
• Through cookies and similar technologies

This policy does not cover:

• The privacy practices of the social media platforms you connect to iHatePosting (such as Facebook, Instagram, LinkedIn, X, TikTok, or YouTube). Each platform has its own privacy policy that governs how it handles your data.
• Third-party websites we link to (see Section 16).
• Information you publish publicly through the Service. Once a post is published to a social platform, it is governed by that platform's terms and visible to that platform's audience.

3. Information we collect

We collect information in three ways: information you give us directly, information collected automatically when you use the Service, and information we receive from third parties (such as the social platforms you connect).

3.1 Personal information you provide

When you sign up for or use iHatePosting, you may provide:

• Name — so we know what to call you and can personalize your account
• Email address — used for login, account notifications, and communication
• Profile photo — optional, displayed on your profile
• Company or brand name — optional, used to organize your account
• Billing address and country — required for invoicing and tax purposes
• Timezone — used to schedule and publish your posts at the correct local time

3.2 Account information

To keep your account secure and working properly, we process:

• Login credentials — your email address
• Password — stored only in hashed (irreversibly scrambled) form. We cannot see or retrieve your actual password.
• Authentication provider— if you sign in using a third-party provider (for example, “Sign in with Google”), we record which provider you used
• User preferences — settings such as notification choices, default posting times, language, and display options

3.3 Social media data

When you connect a social media account to iHatePosting, we collect and store only what is needed to schedule and publish content on your behalf:

• Connected account identifiers — the ID and username/handle of the pages, profiles, or channels you connect
• OAuth access tokens — secure tokens issued by each platform that authorize iHatePosting to publish on your behalf
• Page and profile information — such as profile name, avatar, and page metadata returned by the platform
• Scheduled posts — the content, captions, hashtags, links, and scheduling details of posts you create
• Published posts — records of what was published, where, and when
• Media uploads — images and videos you upload to your media library
• Content calendar data — how your posts are organized across dates
• Analytics data — engagement and performance metrics (such as impressions, likes, and clicks) that the connected platforms make available through their official APIs

Important:We never collect, see, or store the passwords of your social media accounts. Connections are established through each platform's official OAuth authentication flow, where you log in directly on the platform's own website or app. iHatePosting receives only limited access tokens and the specific permissions required to publish and retrieve analytics. You can revoke these tokens at any time from iHatePosting or from the platform's own security settings. See Section 6 for details.

3.4 Technical information

When you use the Service, we automatically collect certain technical data:

• IP address
• Browser type and version
• Device information (such as device type and screen size)
• Operating system
• Cookies and similar identifiers (see Section 8)
• Log files — records of requests made to our servers, including timestamps and pages visited
• Session identifiers — tokens that keep you logged in during a session
• Crash and error reports — diagnostic information generated when something goes wrong, which helps us fix bugs

3.5 Payment information

Payments for iHatePosting subscriptions are processed by Stripe, a third-party payment processor. When you purchase a plan:

• Your card details are entered directly into Stripe's secure payment systems.
• We never store full credit card numbers.
• We receive and store only limited payment metadata, such as the last four digits of your card, card brand, billing address, transaction amounts, subscription status, and invoices.

Stripe processes your payment information under its own privacy policy, available at stripe.com/privacy.

3.6 Support and communication data

If you contact customer support or reply to our emails, we collect the contents of those messages, your contact details, and any attachments you send, so we can respond and keep a record of the issue.

4. How we use your information

We use the information described above to:

• Create and manage your account — including authentication and preferences
• Provide the core Service — scheduling, storing, and automatically publishing your posts to connected platforms at the times you choose
• Manage subscriptions and billing — processing payments through Stripe, sending invoices, and handling plan changes
• Power AI features — generating captions, hashtags, and post ideas you request (see Section 7)
• Provide customer support — responding to your questions and troubleshooting issues
• Send communications — service notifications (such as publishing confirmations or failed-post alerts), account emails, and, where permitted, product updates. You can opt out of marketing emails at any time.
• Prevent fraud and abuse — detecting suspicious activity, protecting accounts, and enforcing our Terms of Service
• Maintain security — monitoring for unauthorized access and keeping the Service safe
• Improve the product — understanding how features are used, fixing bugs, and developing new functionality
• Analytics — measuring Website and Service usage in aggregate
• Comply with legal obligations — such as tax, accounting, and lawful requests from authorities

We do not sell your personal information, and we do not use the content of your posts or media to build advertising profiles about you.

5. Legal bases for processing (GDPR & UK GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we only process your personal information when we have a valid legal basis to do so:

5.1 Contract

Most of our processing is necessary to provide the Service you signed up for — creating your account, storing your posts, publishing to your connected platforms, and managing your subscription.

5.2 Consent

We rely on your consent for certain activities, such as sending marketing emails and connecting each social media account (which you authorize explicitly through OAuth). You can withdraw consent at any time without affecting the lawfulness of processing that happened before withdrawal.

5.3 Legitimate interests

We process some data based on our legitimate interests, where those interests are not overridden by your rights. These include securing the Service, preventing fraud, analyzing usage to improve the product, and communicating with you about service issues. You can object to processing based on legitimate interests (see Section 13).

5.4 Legal obligation

We process certain data because the law requires it — for example, keeping billing records for tax and accounting purposes, or responding to valid legal requests.

6. Social media account connections

iHatePosting connects to social media platforms — currently Instagram, LinkedIn, X (Twitter), Facebook, TikTok, YouTube, Bluesky, Threads, Mastodon, Telegram, Discord, Tumblr, and Slack, with Pinterest, Google Business Profile, and Snapchat coming soon — using each platform's official OAuth authentication where available.

Here is how it works:

• When you connect an account, you are redirected to the platform's own login page. You authenticate directly with the platform — never through iHatePosting.
• The platform issues iHatePosting a limited access token with only the permissions you approve (typically: publishing content, reading basic profile information, and retrieving post analytics).
• We store these tokens securely in encrypted form and use them solely to perform the actions you request, such as publishing your scheduled posts.
• We never receive, see, or store your social media passwords.

You stay in control:

• You can disconnect any account from within iHatePosting at any time. We delete our copy of that account's access and refresh tokens immediately, along with the cached profile details and the engagement statistics we collected for it. Where the platform provides a revocation endpoint — which includes Google and YouTube — we also revoke the grant with the platform itself at that moment, so iHatePosting disappears from your connected apps there. Reconnecting afterwards requires signing in to that platform again.
• You can also revoke iHatePosting's access from the platform's own security or connected-apps settings, independently of us and at any time.
• If a token expires or is revoked, iHatePosting can no longer publish to that account until you reconnect it.

6.1 Google & YouTube API data

iHatePosting uses YouTube API Services. By using iHatePosting you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can review and revoke iHatePosting's access to your Google data at any time at Google security settings.

If you connect YouTube, iHatePosting requests only the two scopes it needs — youtube.upload, to publish the videos and Shorts you create to your own channel with the title, description, tags, category and privacy setting you choose, and to set the cover image you pick as that video's thumbnail; and youtube.readonly, to read your channel's name and picture when you connect it, and to read the public view, like and comment counts of the videos we published for you so we can show them next to your other platforms. We never edit or delete videos we did not upload for you. We do not request the YouTube Analytics scopes, monetization scopes, full channel management (youtube), youtube.force-ssl or youtubepartner. Google Sign-In, if you use it, shares only your name, email, and profile picture to create your account.

We use Google and YouTube data solely to publish on your instruction, show your connected channel, show you the view, like and comment counts for the videos we published for you, and keep you signed in. We do not sell it, use it for advertising, use it to train artificial-intelligence or machine-learning models, or share it with other users. iHatePosting's use and transfer of information received from Google APIs — including for YouTube and Google Business Profile connections — adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access at any time by disconnecting the account in iHatePosting, or from your Google Account permissions page.

7. AI features

iHatePosting offers AI-assisted features such as generated captions, hashtags, and post ideas.

• When you use an AI feature, the prompt or content you provide (for example, a topic or a draft caption) may be transmitted securely to third-party AI providers solely for the purpose of generating the output you requested.
• These transmissions are limited to what is needed to fulfill your request.
• We do not send your prompts or content to AI providers for model training unless we explicitly say so and, where required, obtain your consent.
• AI-generated content is provided as a suggestion. You decide whether to use, edit, or publish it, and you are responsible for the content you publish.

8. Cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (such as local storage) to make the Service work and to understand how it is used.

8.1 Types of cookies we use

• Essential cookies — required for the Website and app to function at all, such as routing and load balancing. The Service cannot work without them.
• Authentication cookies— keep you logged in as you move between pages, so you don't have to re-enter your credentials constantly.
• Security cookies — help us detect suspicious login activity and protect your account against attacks such as cross-site request forgery.
• Preference cookies — remember your settings, such as language, timezone, and display preferences.

iHatePosting does not use advertising or third-party analytics cookies, so there is no cookie consent banner to click through. Because the cookies we do use are strictly necessary to provide the Service you asked for, they don't require consent.

8.2 Managing cookies

You can control cookies through your browser settings, which allow you to block or delete cookies. Please note: if you disable or delete cookies, some features of the Service may stop working — in particular, you may not be able to stay logged in or save your preferences.

9. How we share information (third-party services)

We do not sell your personal information. We share it only in the limited situations described below, and only with parties that are contractually required to protect it.

9.1 Service providers (processors)

We work with trusted third-party providers who process data on our behalf so we can run the Service. Categories include:

• Payment processing — Stripe, to process subscription payments securely
• Cloud hosting and infrastructure — providers that host our application, databases, and your media files
• Content delivery networks (CDNs) — to deliver the Website and your media quickly and reliably around the world
• Email providers — to send account notifications, publishing alerts, and (with your consent) product updates
• AI providers — to generate captions, hashtags, and post ideas you request (see Section 7)
• Error monitoring services — to capture crash reports and diagnose technical problems

Each provider receives only the information necessary to perform its specific function, and is bound by data protection agreements.

9.2 Social media platforms

When you schedule a post, we transmit your content (captions, media, links, and scheduling instructions) to the platforms you have connected, using their official APIs, in order to publish it as you directed. Once published, that content is handled under the relevant platform's own terms and privacy policy.

9.3 Legal and safety reasons

We may disclose information if we reasonably believe it is necessary to:

• Comply with applicable law, regulation, legal process, or a valid governmental request
• Enforce our Terms of Service
• Detect, prevent, or address fraud, abuse, or security issues
• Protect the rights, property, or safety of iHatePosting, our users, or the public

9.4 Business transfers

If iHatePosting is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy.

10. Data retention

We keep personal information only as long as we need it for the purposes described in this policy, and then delete or anonymize it. Typical retention periods:

If you delete individual posts or media, they are removed from your account immediately.

11. International data transfers

iHatePosting serves users around the world, and the service providers we work with may be located in countries other than your own — including countries outside the EEA and the UK that may not provide the same level of data protection as your home jurisdiction.

Whenever we transfer personal information internationally, we protect it using legally recognized safeguards, which may include:

• Adequacy decisions — transfers to countries the European Commission or the UK Government has recognized as providing adequate protection
• Standard Contractual Clauses (SCCs)— the European Commission's approved contract terms, and the UK International Data Transfer Addendum where applicable, signed with our service providers
• Additional technical measures — such as encryption in transit and at rest

You can request more information about the safeguards applied to your data by contacting us at support@ihateposting.com.

12. How we protect your information

We take security seriously and apply industry best practices to protect your data, including:

• Encryption in transit — all traffic between your device and our servers is encrypted using TLS (HTTPS)
• Encryption at rest — stored data, including OAuth tokens and media, is encrypted on our infrastructure
• Secure authentication — passwords are hashed using modern algorithms; we never store them in plain text
• Access controls — access to production systems and personal data is restricted to authorized personnel on a need-to-know basis
• Monitoring and logging — we monitor our systems for suspicious activity and maintain audit logs
• Regular updates — we keep our software and dependencies patched against known vulnerabilities

That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You can help protect your account by using a strong, unique password and keeping your login credentials confidential. If we become aware of a data breach affecting your personal information, we will notify you, the relevant authorities as required by law, and the social platforms whose data is affected.

Found a security vulnerability? Report it to support@ihateposting.com and we will look into it promptly. Our machine-readable contact is published at /.well-known/security.txt.

13. Your privacy rights

Depending on where you live, you have some or all of the following rights over your personal information. If you are in the EEA or the UK, all of the rights below apply under the GDPR / UK GDPR.

• Right of access — request a copy of the personal information we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete information
• Right to erasure (“right to be forgotten”) — ask us to delete your personal information, subject to legal retention requirements
• Right to restriction — ask us to limit how we process your information in certain circumstances
• Right to object — object to processing based on our legitimate interests, and to any direct marketing at any time
• Right to data portability — receive the information you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another provider where technically feasible
• Right to withdraw consent — withdraw any consent you have given at any time, without affecting processing that occurred before withdrawal
• Right to lodge a complaint — complain to your local data protection authority. In the EEA, you can find your authority at edpb.europa.eu; in the UK, this is the Information Commissioner's Office (ico.org.uk).

13.1 How to exercise your rights

You can exercise most rights directly from your account settings — for example, updating your profile, disconnecting social accounts, or deleting your account. For anything else, email us at support@ihateposting.com. We will respond within 30 days (or sooner where the law requires). We may need to verify your identity before acting on a request, to make sure we don't hand your data to someone else. Exercising your rights is free of charge, except where requests are manifestly unfounded or excessive.

14. California and other US state privacy rights (CCPA/CPRA)

If you are a resident of California or another US state with a comprehensive privacy law, you have additional rights under laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

14.1 Categories of personal information we collect

In the last 12 months, we have collected the following categories of personal information (as defined by the CCPA): identifiers (name, email, IP address); customer records (billing details); commercial information (subscription and transaction history); internet activity (usage and log data); geolocation at the country/timezone level; audio/visual content you upload (media files); and inferences limited to product usage (such as feature preferences). The sources, purposes, and sharing practices for each category are described in Sections 3, 4, and 9 above.

14.2 Your rights

Subject to certain exceptions, you have the right to:

• Know what personal information we collect, use, and disclose about you
• Access the specific pieces of personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Opt out of the “sale” or “sharing” of personal information — we do not sell your personal information, and we do not share it for cross-context behavioral advertising
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes requiring a limitation right
• Non-discrimination — we will never treat you differently for exercising your privacy rights

14.3 Exercising your CCPA/CPRA rights

You (or an authorized agent acting on your behalf) can submit requests by emailing support@ihateposting.com. We will verify your identity — typically by confirming control of the email address on your account — and respond within the timeframes required by law (generally 45 days, extendable once by a further 45 days with notice).

15. Children's privacy

iHatePosting is not intended for, or directed at, children. You must be at least 13 years old (or the higher minimum age required in your country — for example, 16 in parts of the EEA) to use the Service. In addition, the social media platforms you connect impose their own minimum age requirements.

We do not knowingly collect personal information from children below these ages. If you believe a child has provided us with personal information, please contact us at support@ihateposting.com and we will delete it promptly.

16. Third-party links

The Website and Service may contain links to external websites and services that we do not operate — for example, the social platforms you connect, our payment processor, or resources we reference. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policy of every website you visit, as we are not responsible for their content or privacy practices.

17. Do Not Track and opt-out preference signals

Some browsers can send “Do Not Track” (DNT) signals. Because there is no common industry standard for DNT, our Service does not currently respond to DNT signals. However, where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) as a valid request to opt out of the sale or sharing of personal information for the browser you are using.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time as the Service, technology, or the law changes. When we do:

• We will post the updated policy on this page and change the “Last updated” date at the top.
• For material changes, we will give you clearer notice — such as an email to your registered address or a prominent notice inside the app — before the changes take effect.
• Where the law requires it, we will ask for your consent to the changes.

We encourage you to review this page periodically. Your continued use of the Service after an update takes effect means the updated policy applies to you.

19. How to contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at support@ihateposting.com.