This policy explains what ShareTo collects when you use our website and service, why we collect it, how long we keep it and the choices you have. It applies to shareto.social and to every account you connect to ShareTo.
1. Who we are
ShareTo (“ShareTo”, “we”, “us”) is a service for planning, scheduling and publishing social media posts, available at shareto.social. ShareTo is operated by Mosbius Design, Istanbul, Türkiye, which is the data controller for the personal data described in this policy. You can reach us at hello@shareto.social.
2. Information we collect
Account information
Your name, email address and password (stored only as a salted hash), or the basic profile returned by a sign-in provider you choose, plus your workspace name and settings.
Connected social accounts
When you connect an account, the platform shares the data you authorize on its consent screen. Depending on the platform this includes the account, page or channel ID, display name, username, profile picture, and the access and refresh tokens that let ShareTo publish for you. For Facebook and LinkedIn we also receive the list of Pages or organizations you manage, so you can choose which ones to connect.
Content you create
Captions, titles, hashtags, images, videos and documents you upload, the times you schedule, and the settings you choose for each platform.
Publishing data
Post IDs, links to published posts, publishing status, error messages returned by the platforms and, where a platform provides them, basic post metrics such as views, likes, comments and shares.
Technical data
IP address, browser and device information, and logs we need to keep the service secure and working. We use only essential cookies, to keep you signed in and remember your preferences. We do not use advertising cookies.
Messages
What you send us by email or through the service, for example support requests.
3. How we use information
- To provide the service: connect your accounts, store your content and publish it at the times you choose.
- To keep connections working by refreshing tokens, and to tell you when a post fails or an account needs attention.
- To secure the service, prevent abuse and fix problems.
- To answer your requests and send you messages about your account and important changes to the service.
- To meet legal obligations.
We do not sell personal data. We do not use data received from social platforms for advertising or to build profiles about you, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.
4. Legal bases
Where the EU General Data Protection Regulation (GDPR) or the Turkish Personal Data Protection Law No. 6698 (KVKK) applies, we process personal data because it is necessary to provide the service you asked for, because we have a legitimate interest in keeping the service secure and working, because you gave consent where consent is required, or because the law requires it.
5. Google and YouTube
ShareTo uses YouTube API Services to upload videos and set their details on YouTube channels you connect. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
You can revoke ShareTo's access at any time from your Google security settings. When you disconnect a channel or revoke access, we delete the data we received from YouTube for that channel within 7 days.
ShareTo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. TikTok, Meta, LinkedIn and X
Information we receive from these platforms is used only as described in section 3 and in line with each platform's developer terms. Each platform's own privacy policy applies to its services: TikTok, Meta (Facebook and Instagram), LinkedIn and X.
7. When we share information
- With the platforms you choose. Your content and settings are sent to a platform only when you publish or schedule a post to it.
- With service providers that host our website, servers and databases, store media, and deliver email. They process data only on our instructions and under contracts that require them to protect it.
- When the law requires it, or to protect the rights, safety and property of our users or others.
- In a business transfer, if ShareTo is sold or merged. We will tell you before your data becomes subject to a different privacy policy.
8. International transfers
Our providers may process data in the European Union, Türkiye and other countries, including the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
9. How long we keep information
- Account information: while your account is open.
- Platform tokens and account identifiers: until you disconnect the account, revoke access or close your account.
- Content and publishing records: until you delete them or close your account.
- After you close your account or ask us to delete your data, we delete it within 30 days, unless the law requires us to keep a specific record for longer (for example invoices).
- Security logs: up to 90 days.
10. Security
Data travels over encrypted HTTPS connections. Platform tokens are encrypted at rest and never sent to your browser. Access to production systems is limited to the people who need it to run the service. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you and the relevant authorities as the law requires.
11. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time. Under KVKK Article 11 you also have the right to learn whether your data is processed and to request information about it.
Email hello@shareto.social and we will reply within 30 days. You can also complain to your local data protection authority or, in Türkiye, to the Personal Data Protection Authority (KVKK). Step-by-step instructions for removing your data are on the Data Deletion page.
12. Children
ShareTo is a business tool and is not directed at children. You must be at least 18 to create an account, and we do not knowingly collect personal data from children.
13. Changes to this policy
We will post any change on this page and update the effective date. If a change is significant, we will also tell you by email or in the service before it takes effect.
14. Contact
Mosbius Design, Istanbul, Türkiye. Email: hello@shareto.social.