Privacy Policy

Last updated: 7 October 2026

Who operates SpreadPosts

SpreadPosts is operated by TopGrade Software House. It helps teams prepare, review, schedule and publish content to social accounts they are authorized to manage. This policy covers information handled through SpreadPosts. Social networks apply their own policies to information they receive.

Information we handle

• Account and workspace information: names, email addresses, authentication records, invitations, roles, brands and workspace settings.
• Connected social accounts: provider account and Page identifiers, profile information returned for requested permissions, granted permissions, access and refresh tokens, and token expiry information.
• Content and workflow records: captions, links, uploaded artwork, draft revisions, schedules, approvals, comments, review feedback and publication history.
• Operational information: request and security logs, IP addresses where recorded, errors, connection status and publication receipts needed to operate and troubleshoot the service.
• Optional features: text submitted for caption assistance and business results supplied by your workspace, when those features are enabled.

Information comes from you, authorized workspace members and the social accounts you connect. Only submit information that your workspace is entitled to use.

How information is used

We use information to authenticate users, enforce workspace access, connect authorized accounts, process and review content, publish approved posts, display outcomes, provide exports and notifications, investigate problems and protect the service. Social permissions are used for the supported features you authorize.

Where applicable law requires a legal basis, service delivery relies on performance of our agreement with you; security and troubleshooting rely on our legitimate interests in protecting and operating the service; and processing that requires consent relies on that consent. Without necessary account and connection information, we cannot provide the corresponding service.

Demo requests and subscriptions

If the demo request form is enabled, we record the name, email, optional company and message you provide with your consent so the team can review and respond. Demo requests are removed after 90 days by scheduled cleanup. Public signup records account details and the accepted terms version. When billing is configured, the payment provider handles checkout, payment methods and invoices; SpreadPosts records subscription identifiers, status and access periods, not card details.

Who receives information

Authorized workspace members can access information allowed by their roles. A recipient of a review link can view the content shared through that link. Published content is sent to the selected social network and may become public according to its audience settings and rules.

Hosting, storage, email delivery and operational service providers may process information needed to provide their services. If external AI caption assistance is enabled and requested, submitted text is sent to the configured AI service. Social tokens are not included in caption-assistance prompts. Information may also be disclosed when required by law or to investigate abuse and protect users.

Service providers and social networks may process information in other countries. Contact us for details about applicable providers, locations and transfer arrangements before submitting information subject to location restrictions.

Cookies and security

SpreadPosts uses session and request-security cookies to keep users signed in and protect requests. Blocking these cookies can prevent sign-in and other account features from working.

Access controls restrict workspace information, and stored social-access tokens are encrypted. No storage or transmission method can guarantee complete security. Keep your login and review links private and use two-factor authentication where available.

Retention and deletion

Workspace content and records are retained while needed to provide the workspace and its history. Operational records may be retained to troubleshoot faults, protect the service and meet applicable obligations. Retention depends on these purposes, the type of record, workspace deletion and applicable legal requirements. Backup copies may remain until their normal retention period ends.

Workspace owners can export their workspace and request deletion in workspace settings. The displayed deletion date reflects the configured grace period; an owner can cancel before purge. A deletion request pauses new publishing and revokes local connections. Processing already in flight may still finish. Deletion is processed after the grace period, with failed file cleanup retried.

Disconnecting an account prevents future authorized use through that connection but does not remove posts already published on the network. Remove those posts directly on the network. You can also withdraw authorization in the social network's app settings.

Your choices and rights

You can ask to access, correct, export or delete personal information and, where applicable, restrict processing or object to processing based on legitimate interests. You can withdraw consent where processing relies on it and complain to your applicable data-protection authority. We may need to verify your identity and authority over workspace information. Legal obligations or the rights of others may limit a request.

Contact and changes

For privacy questions or personal-data deletion requests, email seeksbwp@gmail.com. Include enough information to identify your account or workspace; do not send passwords or social-access tokens.

We may update this policy as the service changes. The date above identifies the latest version. Material changes will be communicated through the service where appropriate.