Privacy Policy
Last updated: March 3, 2026
This Privacy Policy describes how InfiniteApps LLC ("we", "us", or "our") collects, uses, and protects information when you use SendIt ("the Service"), an MCP server for AI-powered social media publishing.
Information We Collect
When you use SendIt, we collect and process the following information:
- OAuth Tokens: Access tokens and refresh tokens from connected social media platforms (LinkedIn, Instagram, Threads, TikTok, X, Facebook, YouTube, Pinterest). These are encrypted at rest using AES-256-GCM encryption.
- Platform User IDs: Your user identifiers on connected social media platforms, used to publish content on your behalf.
- Content Data: The text, images, and media you submit for publishing or scheduling. This includes scheduled post content until publication.
- Publishing History: Records of successfully published posts, including platform post IDs and URLs.
How We Use Your Information
We use the collected information solely to provide the Service:
- To authenticate with social media platforms on your behalf
- To publish content to your connected accounts
- To schedule and manage future posts
- To retrieve analytics and engagement data from platforms
- To maintain and improve the Service
Data Storage and Security
- Encryption: All OAuth tokens are encrypted at rest using AES-256-GCM encryption with a user-provided encryption key.
- Database: Data is stored in Supabase PostgreSQL databases with row-level security.
- Self-Hosting: SendIt can be self-hosted, giving you complete control over your data.
Third-Party Services
SendIt integrates with the following third-party services:
- LinkedIn: For publishing posts and retrieving analytics. Subject to LinkedIn's Privacy Policy.
- Instagram/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
- Threads/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
- Facebook/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
- X: For publishing posts and retrieving analytics. Subject to X Privacy Policy.
- TikTok: For publishing posts and retrieving analytics. Subject to TikTok Privacy Policy.
- YouTube/Google: For publishing videos and retrieving analytics. Subject to Google Privacy Policy.
- Pinterest: For publishing pins and retrieving analytics. Subject to Pinterest Privacy Policy.
- Cloudinary: For optional media hosting. Subject to Cloudinary's Privacy Policy.
- Supabase: For database hosting. Subject to Supabase's Privacy Policy.
Data Retention
- OAuth Tokens: Retained until you disconnect the account or the token expires (typically 60 days).
- Scheduled Posts: Retained until published or cancelled.
- Published Posts: Post records are retained indefinitely for analytics purposes.
- Media Uploads: Temporary uploads are deleted after 24 hours unless published.
Your Rights
You have the right to:
- Disconnect your social media accounts at any time
- Request deletion of your data (see our Data Deletion page)
- Export your data upon request
- Self-host the Service for complete data control
Children's Privacy
SendIt is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
InfiniteApps LLC
Email: privacy@infiniteappsai.com