Privacy Policy

Last updated: October 15, 2026

This policy explains how Sagiware ("we", "us") collects, uses and protects information when you use Social Relay at https://social.sagiware.com (the "Service"). The Service lets you connect your own TikTok, Instagram and YouTube accounts to publish content, schedule posts and view engagement data.

Information we collect

  • Account information: your email address and a hashed password.
  • TikTok data (only after you connect TikTok and approve the requested permissions): your open ID, display name, username and avatar (user.info.basic, user.info.profile); follower, following, like and video counts (user.info.stats); the list of your public videos with their view, like, comment and share counts (video.list); and the ability to publish content you choose (video.publish). We also read your current posting settings (privacy options and whether comments, Duet and Stitch are allowed) each time you prepare a post.
  • Instagram data (only after you connect an Instagram professional account): your account ID, username, name, profile picture, account type and follower, following and media counts (instagram_business_basic); the ability to publish content you choose (instagram_business_content_publish); insights about your account and media, such as reach, views, interactions and follower demographics in aggregate (instagram_business_manage_insights); and comments on your media, so you can read, reply to, hide or delete them (instagram_business_manage_comments).
  • YouTube data (only after you connect a YouTube channel with Google sign-in): your channel ID, title, handle, thumbnail and subscriber, view and video counts; the titles, statistics and status of your videos; aggregated YouTube Analytics for your channel (views, watch time, subscribers gained, likes, comments, shares and top countries); and comments on your videos, so you can read, reply to, hide or remove them. We use the scopes youtube.force-ssl (upload videos and manage comments on your channel) and yt-analytics.readonly (read your channel analytics).
  • Content you upload: videos, images, captions and the settings you choose for each post.
  • API keys you create. We store only a one-way hash of each key.
  • Technical data: IP address for security (login rate limiting) and standard server logs.

How we use information

  • To publish and schedule the content you submit, to the accounts you select, with the settings you choose.
  • To show you the status of your posts and analytics about your own accounts and content.
  • To let you manage comments on your own Instagram media and YouTube videos.
  • To keep the Service secure and to troubleshoot problems.

We never post anything without your action: TikTok posts are sent only after you review and confirm them in the dashboard, and Instagram and YouTube posts are only made from content you or your own API keys submit. We do not add watermarks or promotional content to your posts. We do not sell your data, use it for advertising, or share it with third parties, except TikTok, Instagram (Meta) and YouTube (Google) to perform the actions you request, and the infrastructure providers that host the Service.

YouTube API Services and Google user data

  • Social Relay uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's use of your data is governed by the Google Privacy Policy.
  • Social Relay's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you see in the Service; we do not use it for advertising, do not sell it, and do not let humans read it except with your permission, for security, or to comply with law.
  • YouTube statistics and analytics we store are refreshed or deleted within 30 days.
  • You can revoke the Service's access to your Google account at any time at Google security settings, or by disconnecting the channel on the Accounts page.

Storage, security and retention

  • Access and refresh tokens are encrypted at rest (AES-256-GCM). Passwords and API keys are stored only as hashes. All traffic uses HTTPS.
  • Uploaded media is kept only until the platform has received it and is deleted automatically within 7 days after it is no longer needed.
  • Post history and metrics are kept while the related account stays connected, and are deleted when you disconnect it.
  • Your data is stored on servers operated by Sagiware.

Your choices and rights

  • Disconnect a TikTok, Instagram or YouTube account at any time on the Accounts page. We revoke our access where the platform allows it and delete that account's data immediately.
  • Delete your account in Settings. This removes all of your data, connected accounts, posts, metrics, media and API keys.
  • You can also remove the app from your TikTok settings or your Instagram settings (Apps and websites). See Data deletion.
  • You can ask us for a copy of your data, or for correction or deletion, at contact@sagiware.com. We answer within 30 days.

Children

The Service is not intended for anyone under 18.

Changes

We will post any changes on this page and update the date above. Significant changes will be announced by email.

Contact

Sagiware · contact@sagiware.com