PicPlanr Privacy Policy

Effective date: 8 July 2026 Last updated: 8 July 2026

This Privacy Policy explains how PicPlanr ("PicPlanr," "we," "us," or "our") collects, uses, shares, and protects information when you use the PicPlanr website and application (the "Service"), including when you connect third-party social media and productivity accounts to schedule and publish content.

PicPlanr is operated by Health Hub Studios (Scotland) Ltd, 54 Washington Street, Glasgow, G3 8AZ, United Kingdom. If you have questions about this policy or how your data is handled, contact us at info@picplanr.com.

1. Who this policy covers

This policy applies to anyone who creates a PicPlanr account, uses the PicPlanr dashboard, or connects a third-party account (such as Instagram, Facebook, LinkedIn, TikTok, YouTube, Google Business Profile, or Google Calendar) through PicPlanr.

2. Information we collect

Account information. When you sign up, we collect your name, email address, password (stored in hashed form), and workspace/business details you provide (such as business name, website, and brand voice information).

Connected account information. When you connect a third-party platform to PicPlanr, we receive and store:

• An access token (and refresh token, where the platform provides one) that lets PicPlanr act on your behalf within the permissions you granted.

• Basic profile information from that platform, such as your display name, handle, avatar, and account ID, so we can show you which account is connected.

• Content and metadata needed to publish and schedule posts, such as captions, media, and post identifiers returned after publishing.

We do not receive or store your third-party account passwords — authentication happens directly with each platform (TikTok, Google, Meta, LinkedIn) through their own login screens, and PicPlanr never sees your credentials.

Content you upload. Photos, videos, captions, and related metadata you upload to PicPlanr to plan, schedule, or publish.

Usage and device information. Log data such as IP address, browser type, pages visited, and actions taken in the app, collected automatically to keep the Service secure and to improve it.

Communications. If you email us or contact support, we keep a record of that correspondence.

3. How we use your information

We use the information described above to:

• Provide the Service — including scheduling, generating caption suggestions, and publishing content to the accounts you connect.

• Maintain your account and workspace, including plan/usage limits.

• Communicate with you about your account, scheduled posts, and connection status (for example, if a social connection expires and needs to be reconnected).

• Secure the Service, prevent abuse, and debug issues.

• Improve PicPlanr's features based on aggregate usage patterns.

We do not sell your personal information, and we do not use your content to train third-party AI models beyond the processing described in Section 5.

4. Third-party platforms you connect

PicPlanr integrates with the following platforms so you can plan and publish content in one place. Each integration only requests the permissions needed for the features below, and you can disconnect any of them at any time from your Connected Accounts settings.

TikTok. We use TikTok's Login Kit and Content Posting API to let you connect your TikTok account and publish videos directly to it. This requires the user.info.basic scope (to display your TikTok profile) and the video.publish scope (to post video content on your behalf). Uploaded videos are sent directly to TikTok using TikTok's Content Posting API; PicPlanr does not use TikTok content for any purpose beyond letting you schedule and publish it.

YouTube (Google). We use the YouTube Data API to let you upload and publish YouTube Shorts. This requires Google's youtube.upload scope, which lets PicPlanr upload video files and set their title, description, and visibility on your behalf. PicPlanr's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Business Profile. We use the Google Business Profile API so you can publish local updates, offers, and event posts to your business profile.

Google Calendar. We use the Google Calendar API, with a calendar-access scope, to sync your scheduled posts to a calendar and send you reminders ahead of publishing — this is read/write access limited to events PicPlanr creates or is given access to.

Instagram and Facebook. We use Meta's Graph API (Instagram Graph API and Facebook Pages API) to let you publish photos and Reels to Instagram and posts to Facebook Pages you manage, and, on eligible plans, to read and reply to comments on your published posts.

LinkedIn. We use LinkedIn's API to let you publish posts to your LinkedIn profile or company page, and to optionally read basic profile information to help generate on-brand captions.

For all of the above, disconnecting an account in PicPlanr revokes PicPlanr's stored access token for that platform. We recommend also removing PicPlanr's access from the platform's own security/app-permissions settings for a complete revocation.

5. AI-assisted features

PicPlanr uses OpenAI's API to generate caption suggestions and to analyze uploaded photos and video frames (for example, to suggest captions or identify a good cover frame). Content sent for this purpose — such as image data and caption text — is processed by OpenAI under their API terms and is not used by OpenAI to train their models. We only send what's needed to generate the specific suggestion you've requested.

6. Where your data is stored

Your account data, workspace data, and uploaded media are stored using Supabase (database and file storage), with the application itself hosted on Vercel. Both providers act as data processors on our behalf and maintain their own security and compliance programs.

7. Data retention

We retain your account and workspace data for as long as your account is active. Uploaded media in your content library is retained for 40 days from upload unless used in a scheduled or published post. Connected-account tokens are retained until you disconnect the account or the token is revoked by the platform (for example, after an extended period of inactivity). If you delete your PicPlanr account, we delete your personal data and disconnect all linked accounts within 40 days, except where we're required to retain records for legal or security reasons.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

• Disconnect any social account at any time from Connected Accounts.

• Update your account and workspace details from your account settings.

• Request a copy of your data or deletion of your account by contacting info@picplanr.com

We will respond to verified requests within the timeframe required by applicable law (for UK/EU users, generally one month).

9. Cookies and similar technologies

PicPlanr uses cookies and similar technologies necessary to keep you signed in and to remember basic preferences. We do not currently use third-party advertising cookies. [Confirm and update this section if you add analytics or marketing tools.]

10. Children's privacy

PicPlanr is not directed to, and is not intended for use by, anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. International data transfers

Because our infrastructure providers (Supabase, Vercel, OpenAI) may process data outside your country of residence, your information may be transferred internationally. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred in this way.

12. Security

We use industry-standard measures — including encrypted connections, hashed passwords, and access controls — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact us

If you have questions about this Privacy Policy or how PicPlanr handles your data, contact us at info@picplanr.com or write to Health Hub Studios (Scotland) Ltd, 54 Washington Street, Glasgow, G3 8AZ, United Kingdom.