Last Updated: May 14, 2026
Introduction
Posty (operated by Nuralingua, "we", "us", "our") is a social media scheduling application that connects to your YouTube channels and other social media accounts to schedule and publish content on your behalf. This Privacy Policy explains how we collect, use, store, and protect your data when you use Posty, accessible at posty.nuralingua.com.
By connecting a YouTube channel or other account to Posty, you agree to the practices described in this policy.
Information We Collect
When you connect a YouTube channel to Posty, Google requires us to request the following OAuth scopes:
View your YouTube account (youtube.readonly): to fetch your channel info, video metadata, and analytics.
Manage your YouTube account and videos (youtube, youtube.force-ssl, youtube.upload, youtubepartner): to upload and publish videos you create or schedule through Posty, and to set titles, descriptions, tags, and thumbnails.
View YouTube Analytics reports (yt-analytics.readonly): to display performance metrics in your Posty dashboard.
Basic Google profile information (userinfo.profile, userinfo.email): to identify which Google account is connected and display your account name in Posty.
We also collect: your Posty account email and hashed password, posts, captions, media files, scheduling metadata you create in Posty, and basic usage logs (IP address, browser type, timestamps) for security and debugging.
How We Use Your Data
We use your data only to operate the Posty service: to execute the actions you schedule in Posty (upload videos, set titles, descriptions, tags, thumbnails, publish times), to display analytics inside your Posty dashboard, to send transactional emails about your account and scheduled posts, and to debug issues and improve service reliability.
We do not use your YouTube data or any data we obtain through Google APIs to train AI/ML models, to sell to advertisers, or to share with third parties for advertising. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.
Data Storage and Security
OAuth refresh tokens are encrypted at rest in our database. Media files are stored in encrypted object storage and deleted automatically after publication unless retained at your request. All data is transmitted over HTTPS. Access to production systems is restricted to authorized personnel only.
Data Sharing
We do not sell or rent your data. We share data only with: Google APIs (to publish posts to YouTube on your behalf); hosting and infrastructure providers (DigitalOcean) under standard data processing agreements; and legal authorities when required by valid legal process.
Your Rights
You can disconnect any connected channel at any time from your Posty dashboard, which immediately revokes our access tokens. You can delete your Posty account, which removes all your data within 30 days. You can revoke our access to your Google Account at any time via https://myaccount.google.com/permissions. You can request a copy or deletion of your data by emailing us.
Children's Privacy
Posty is not intended for users under 13. We do not knowingly collect data from children.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above. Continued use of Posty after changes constitutes acceptance.
Contact
For privacy questions or data requests, contact peter@nuralingua.com.