Privacy Policy

Last updated: September 3, 2026

Spread It is a multi-platform content creation and publishing service. This policy explains how your data is handled when you sign in, connect social accounts and use our AI-assisted publishing features.

1. Covered Platforms

Spread It publishes to the following platforms through their official APIs:

Meta: Facebook and Instagram (Instagram is published through the Facebook Graph API, for business accounts)
TikTok
X (Twitter)
LinkedIn
YouTube

For Facebook, Instagram, LinkedIn, YouTube and TikTok, the connection goes through an OAuth authorization flow granted on the platform; the resulting token is saved in the service configuration and then used for publishing. For X (Twitter), there is no per-user authorization flow: publishing uses API keys configured by the service operator, and content is published to the X account attached to those keys.

2. Data We Collect

Google sign-in: when you sign in with Google, we receive your email address, Google identifier, display name and profile photo (email and profile scopes).
Basic profile data: identifier, public name, avatar (as permitted on each platform).
Account and page data: the list of connected pages or accounts, used to choose the publishing destination.
Submitted content: text, images, videos and metadata provided for publishing.
OAuth tokens: technical credentials required to call the APIs on your behalf.
Contact forms and waitlist: if you fill in an email capture form ("connect gate") or the waitlist, we keep your email address, your name (optional), the form source, the submission date and, for the capture form, technical metadata sent with the form.

3. Cookies

Spread It only uses cookies that are necessary for the service to work. Spread It sets no advertising or third-party tracking cookies.

Name	Purpose	Lifetime
`connect.sid`	Server-side session identifier: keeps you signed in and holds the state of in-progress authorizations.	Browser session (removed when the browser is closed).
`spread_auth`	Signed sign-in token (identifier, email, name) that keeps your session across server instances.	30 days.

These cookies are marked HttpOnly and are not readable by page scripts. You can delete them at any time from your browser settings; doing so signs you out.

4. How We Use Data

Service delivery: publishing content to the selected platforms, only on user action.
AI assistance: generating and optimizing captions and hashtags, content checks and format adaptation.
Security and operations: abuse prevention, minimal technical logs and error diagnostics.
Sign-up follow-up: emails collected through the forms are used to contact you about the service.

We do not sell personal data and do not share it for third-party advertising purposes.

5. Storage and Security

OAuth tokens, preferences and form data are stored securely in our database. Temporary media files used for publishing are deleted after processing, according to the technical constraints of the target platform and of our publishing pipeline.

6. Third-Party Platform Terms

The Meta, TikTok, X/Twitter, LinkedIn and YouTube APIs are governed by their own terms. If a platform suspends an account or restricts permissions, its decision prevails and is outside Spread It's control.

7. Data Deletion

You can request deletion of your data by email, or revoke the app's access in the settings of the connected social network.

Detailed procedure: /en/data-deletion

8. Contact

Legal and privacy support:
om43byONLYMATT
Email: connect@onlymatt.ca
Application: https://spread.onlymatt.ca