CrossPostBot Privacy Policy

Last updated: August 10, 2026

CrossPostBot ("we", "our", or "the Bot") is a Telegram-based automation service that allows users to publish and schedule content across supported social media platforms, including Instagram, YouTube, and TikTok. This Privacy Policy explains what information we collect, how we use it, and how users can control their information.

1. Information We Collect

When you use CrossPostBot, we may collect and store:

• Telegram account information, such as your Telegram user ID and username, used to identify and manage your account within the Bot.
• Connected platform account information and OAuth access tokens for Instagram, YouTube, and TikTok, where applicable. These credentials allow the Bot to perform actions that the user has authorized. We do not collect or store users' platform passwords.
• Content submitted by users, including videos, images, captions, and other media used for cross-posting.
• Basic usage and technical information, such as post timestamps, delivery status, error logs, and service activity, used to operate, troubleshoot, and improve the service.

2. How We Use Your Information

We use collected information only for purposes related to operating CrossPostBot, including:

• Publishing and scheduling content to connected platforms at the user's request.
• Performing supported social media account and content-management functions that the user has explicitly authorized.
• Processing uploaded media for cross-posting.
• Maintaining, troubleshooting, securing, and improving the service.
• Communicating with users regarding the operation of their connected accounts or requested actions.

We do not sell, rent, or share personal data or platform access tokens with third parties for advertising or marketing purposes.

3. Third-Party Platform APIs

CrossPostBot uses APIs provided by third-party platforms, which may include:

• Meta / Instagram
• YouTube / Google
• TikTok

When a user connects a third-party account, the user authorizes CrossPostBot to access only the information and functionality permitted by the OAuth permissions granted to the application.

CrossPostBot does not collect or store the user's password for these third-party services.

Users may revoke access to CrossPostBot through the relevant third-party platform's account settings or by disconnecting the account through the Bot where supported.

4. Data Storage and Security

Account information, OAuth tokens, metadata, and application data may be stored on infrastructure used to operate CrossPostBot, including AWS EC2, PostgreSQL, and AWS S3 where applicable.

OAuth access tokens are used only for authorized application functionality.

We use reasonable technical and organizational measures to protect stored information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain account information and connected-account data for as long as necessary to provide the service or while an account remains connected.

Uploaded media may be stored temporarily for processing and cross-posting and may be automatically deleted after the applicable processing or retention period, based on your configured auto-delete settings in the Bot.

When a user disconnects an account or requests deletion, associated data will be deleted or anonymized where technically and legally appropriate.

6. Data Deletion

Users can request deletion of their CrossPostBot data by disconnecting their social media accounts using the functionality provided by the Telegram Bot, or by contacting us using the contact information below.

A deletion request may include:

• Removing stored platform access tokens.
• Disconnecting connected social media accounts.
• Deleting stored account information.
• Deleting stored user-submitted content where applicable.

Deletion requests are processed according to the application's technical capabilities and applicable legal requirements.

7. Children's Privacy

CrossPostBot is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Privacy Policy Changes

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated "Last updated" date.

9. Contact

For privacy and data deletion inquiries, contact: alijunaydullayev2004@gmail.com