Privacy Policy

What we collect

• Account data — name, email, hashed password (scrypt), workspace settings.
• Usage data — API request counts, successful-post counts and per-day aggregates used for billing and the Usage page.
• Content — post text, media URLs and scheduling metadata you submit through the API or dashboard, solely to deliver the Service.

What we never do

• We never sell your data or your users' data.
• We never read or publish your content except to deliver it to the network you targeted.
• Sandbox traffic is never billed and is excluded from analytics.

Security

Passwords are hashed with scrypt and unique salts. Sessions are HTTP-only cookies. Webhook payloads are signed with per-endpoint HMAC-SHA256 secrets. API keys are shown once at creation and stored hashed where possible.

Your rights

Export or delete your workspace data anytime from Settings. Deletion removes posts, channels, keys and webhooks within 24 hours, except where retention is legally required.

Contact

Privacy questions: privacy@buffersass.dev.