Privacy Policy

Haplia is operated as a software service for creators, small businesses, and agencies. For privacy requests, contact us at the email listed at the end of this policy.

Depending on how you use Haplia, we may collect:

• Account information — email address, username, authentication identifiers, and related profile metadata from our auth provider.
• Connected social accounts — platform account names/IDs, and OAuth access/refresh tokens needed to act on your behalf (publish posts, read metrics).
• Content you create in Haplia — captions, media references, schedules, and publish status for posts you manage through the service.
• Performance metrics we fetch from connected platforms when you refresh analytics (for example views, likes, comments, shares), stored as snapshots associated with your posts.
• Technical and usage data — approximate device/browser information, IP address, logs, and cookies needed to keep you signed in and operate the service securely.
• Billing-related data if/when you subscribe — customer and subscription identifiers from our payment processor (we do not store full card numbers on Haplia servers).

We use personal data to:

• Provide, maintain, and improve the Haplia service.
• Connect your accounts and publish or schedule content you authorize to platforms such as Facebook, Instagram, TikTok, and YouTube.
• Retrieve and display post analytics you request.
• Authenticate you, secure accounts, prevent abuse, and troubleshoot errors.
• Send service-related notices (for example security or account emails).
• Understand product usage in aggregate so we can improve reliability and design.

When you choose to connect a social platform, you authorize Haplia to access data and perform actions allowed by the permissions (scopes) you grant on that platform’s consent screen.

Facebook (Meta): we may access Facebook Pages you select, and use Page tokens to publish content and read engagement and insights metrics for posts published through Haplia, subject to Meta’s policies and your granted permissions.

Instagram: we connect Instagram professional accounts (Business or Creator) via Instagram Login — no Facebook Page is required. With your permission we may publish content and read engagement and insights metrics (for example likes, comments, views, and reach) for posts published through Haplia, subject to Meta’s and Instagram’s policies and the scopes you approve.

TikTok: we may access basic profile information needed to identify your account, publish content you authorize via TikTok’s Content Posting APIs (when enabled), and retrieve video/list metrics available through TikTok’s APIs for analytics, subject to TikTok’s Developer Terms, TikTok’s Privacy Policy, and the scopes you approve.

YouTube (Google): we may access the YouTube channel you select via Google OAuth, upload videos you authorize, and retrieve channel and video statistics available through the YouTube Data API for analytics, subject to Google’s and YouTube’s terms and the scopes you approve.

Access tokens and refresh tokens are stored encrypted at rest. We use them only to provide the features you request and do not sell them.

Your use of each platform remains subject to that platform’s own terms and privacy policy. You can disconnect accounts in Haplia and/or revoke access in the platform’s security settings.

We use trusted third-party service providers to help run Haplia — for example hosting, authentication, database, and (when enabled) payment processing. These providers process data on our instructions and only as needed to provide their services.

We use cookies and similar storage to keep you signed in, remember language preferences, and protect OAuth flows (for example CSRF state). You can control cookies through your browser settings; disabling essential cookies may prevent login or account connection from working.

We retain account and service data for as long as your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce agreements. You may request deletion of your account data by emailing postivoteam@gmail.com; some records may be retained where legally required or for legitimate security/audit purposes.

If you remove Haplia from Facebook, Instagram, or Threads, or send a Meta data deletion request, Meta notifies us via a secure callback. We then disconnect the matching accounts in Haplia, delete imported history and related analytics snapshots from that platform, and clear access tokens. You can check the status of a deletion request using the confirmation link Meta provides, or email us using the address below.

We apply technical and organizational measures appropriate to the risk, including encrypted storage of platform tokens and access controls. No method of transmission or storage is perfectly secure; please use a strong unique password and protect your connected platform accounts.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to / restrict certain processing. To exercise these rights, contact us using the email below. You may also have the right to lodge a complaint with a supervisory authority.

Haplia is not directed to children under 16 (or the minimum age required in your country to use the connected social platforms). We do not knowingly collect personal data from children.

We may update this Privacy Policy as the product or legal requirements change. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated by email or in-product notice when appropriate.

For privacy questions or requests, email postivoteam@gmail.com.