OnceToAll ("we", "us", or "our") operates the OnceToAll publishing service at oncetoall.com. This Privacy Policy explains what personal data we collect, why we collect it, and how we use it when you use our service.
1. Data We Collect
We collect the following information when you create an account or connect a social media platform: your full name and email address; OAuth access tokens and refresh tokens for connected platforms (Instagram, TikTok, X/Twitter, Facebook, YouTube); social account identifiers (user IDs, page IDs, channel IDs); the content you create, upload, and schedule through our service.
2. How We Use Your Data
We use your data solely to operate OnceToAll: to authenticate you, to publish content to social platforms on your behalf using stored access tokens, to schedule posts at the times you specify, and to display your connected accounts and post history in your dashboard. We do not sell, rent, or share your personal data with third parties for advertising purposes.
3. Third-Party Platforms
OnceToAll integrates with the following platforms via their official APIs: Instagram and Facebook (Meta Platforms, Inc.), TikTok (ByteDance Ltd.), X/Twitter (X Corp.), and YouTube (Google LLC). When you connect a platform account, you authorize us to act on your behalf using the permissions you grant during the OAuth flow. Each platform's own Privacy Policy governs how they handle data on their end.
4. Data Storage and Security
Your data is stored in Supabase, a cloud database service hosted on AWS infrastructure. OAuth access tokens and refresh tokens are stored in encrypted form. We apply row-level security policies so that your data is only accessible by your own account. Media files you upload are stored in Supabase Storage and automatically deleted when you remove the associated post.
5. Data Retention
OAuth tokens for a platform are deleted from our systems when you disconnect that platform account. Your posts and associated media are retained until you delete them. If you delete your OnceToAll account, all associated data including tokens, posts, and media is permanently deleted within 30 days.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can disconnect any platform account from the Accounts page in your dashboard, which immediately revokes our access to that account. To request full account deletion or a copy of your data, contact us at the email below.
7. Contact
For privacy-related questions or requests, please contact us at: privacy@oncetoall.com
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email or by displaying a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.