← Fast Creator Studio

Privacy Policy

Last updated: June 19, 2026

1. Introduction

Fast Creator Studio ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our multi-platform video scheduling service ("Service").

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please discontinue use of the Service.

2. Data We Collect

Account Information: Your email address and a securely hashed password when you register an account.

Social Media OAuth Tokens: Access tokens and refresh tokens for each social media platform you connect (TikTok, Facebook, Instagram, YouTube, Threads). These are encrypted at rest using AES-256-GCM before being stored.

Platform Account Identifiers: Public identifiers (display name, username, profile picture URL, account/page ID) for each connected platform account, used to display confirmation in our interface.

Video Content: Videos you upload for scheduling. These are stored on our secure self-hosted storage server and are deleted after successful publication or upon account deletion.

Captions and Scheduling Data: Captions, hashtags, scheduled dates, and platform targets you configure for each post.

Usage Data: Basic service logs (publication status, error logs) for troubleshooting. We do not use third-party analytics services.

3. How We Use Your Information

  • To authenticate you and maintain your account session
  • To publish videos to your connected social media accounts at your scheduled time
  • To display your connected account names and profile pictures in our interface
  • To generate AI-powered captions for your videos (processed locally, not sent to external AI services)
  • To send transactional emails (account confirmation, password reset)
  • To troubleshoot errors and improve the Service

We do not use your data for advertising, profiling, or any purpose beyond operating the Service as described above.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract performance: Processing your account information and publishing content on your behalf
  • Legitimate interest: Maintaining service logs for security and troubleshooting
  • Consent: Connecting and authorizing each social media platform

5. TikTok Data Usage

When you connect your TikTok account, we request the following permissions via the official TikTok Content Posting API:

  • user.info.basic: Your TikTok display name and avatar URL — displayed in our interface to confirm the correct account is connected. We do not store or use this data for any other purpose.
  • video.upload + video.publish: Used exclusively to upload and publish videos you explicitly schedule through our platform.

We do not access your TikTok followers list, private messages, analytics, or any data beyond what is listed above. We do not sell or share your TikTok data with any third parties.

You can revoke our access at any time from TikTok Settings → Security → Connected Apps, or from our platform under Settings → Connected Accounts.

6. Meta (Facebook & Instagram) Data Usage

When you connect Facebook or Instagram, we request the following permissions via the official Meta Graph API:

  • pages_show_list: To list your Facebook Pages so you can select which Page to post to.
  • pages_read_engagement: To read basic page information needed to publish content.
  • pages_manage_posts: To publish video content to your selected Facebook Page on your behalf.
  • instagram_basic + instagram_content_publish: To publish Reels to your connected Instagram Business or Creator Account.
  • business_management (read-only): To resolve the Instagram Business Account ID associated with your Facebook Page.

We store your Facebook Page ID, Page name, and Instagram account username solely to display your connected accounts in our interface and to route publishing correctly.

We do not access your Facebook personal profile data, friends list, messages, advertising accounts, or any data beyond what is required to publish video content on your behalf.

You can revoke our access at any time from Facebook Settings → Security & Login → Apps and Websites, or from our platform under Settings → Connected Accounts. When you revoke access, we delete all stored tokens and identifiers associated with your Meta accounts immediately.

App Deauthorization:

When you remove Fast Creator Studio from your Facebook Apps, we receive an automated notification and immediately delete all data associated with your Facebook and Instagram accounts from our systems.

Data Deletion Requests:

You can submit a data deletion request directly from Facebook (Settings → Your Facebook Information → Apps and Websites). We will process this request and delete all associated data within 30 days. You can track the status of your request at fastcreatorstudio.com/data-deletion.

7. YouTube Data Usage

When you connect your YouTube account, we request the following Google API scopes:

  • youtube.upload: To upload Shorts videos to your YouTube channel on your behalf.
  • userinfo.profile (basic): To display your channel name and avatar in our interface.

We do not access your YouTube subscribers, comments, analytics, or any data beyond what is listed above. Fast Creator Studio's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

8. Threads Data Usage

When you connect your Threads account, we request permission to publish video content to your Threads profile on your behalf. We store your Threads user ID and username solely for account identification purposes.

We do not access your Threads followers, direct messages, or any data beyond what is required to publish content.

9. Data Storage and Security

Your data is stored on secure servers. We implement the following security measures:

  • OAuth tokens encrypted at rest with AES-256-GCM (unique IV per token)
  • All data transmitted over HTTPS / TLS
  • Database access controlled by Row-Level Security (RLS) policies
  • Service credentials never exposed to the client
  • Videos stored on isolated, access-controlled storage

We do not use third-party analytics, advertising networks, or tracking services.

10. Data Sharing

We do not sell, rent, or trade your personal data to any third party. Your data is shared only in the following limited circumstances:

  • With the platforms you connect: Your video content and captions are transmitted to the social media platforms you authorize, solely to publish content on your behalf.
  • With infrastructure providers: We use Supabase for database and authentication. Your data is stored within their infrastructure under our account.
  • Legal requirements: We may disclose data if required to do so by law or in response to valid legal process.

11. Data Retention

We retain your data for as long as your account is active. Specifically:

  • Videos are deleted from our storage after successful publication or when you delete a scheduled post
  • OAuth tokens are retained until you disconnect the platform or delete your account
  • Post history (publication logs) are retained for up to 12 months
  • Account data is deleted within 30 days of account deletion

12. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request that we delete all your personal data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your data
  • Withdraw consent: Disconnect any social media account at any time

To exercise any of these rights, contact us at privacy@fastcreatorstudio.com. We will respond within 30 days.

13. Data Deletion

You can request the deletion of all your personal data at any time:

  • In-app: Go to Settings → Account → Delete Account. All data is permanently removed within 30 days.
  • Via Facebook: If you connected Facebook, you can submit a deletion request through Facebook Settings → Your Facebook Information → Apps and Websites → Remove. You can track the status at fastcreatorstudio.com/data-deletion.
  • By email: Contact us at privacy@fastcreatorstudio.com.

14. Cookies

We use only essential session cookies required for authentication and CSRF protection. We do not use tracking, advertising, or analytics cookies. We do not use any third-party cookie-based services.

15. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly.

16. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this Policy regularly.

17. Contact

For privacy concerns, data access or deletion requests, or any questions about this Policy, contact us: