Privacy Policy

Last updated: May 11, 2026

This Privacy Policy describes how InfiniteApps LLC ("we", "us", or "our") collects, uses, and protects information when you use SendIt ("the Service"), an MCP server for AI-powered social media publishing.

Information We Collect

When you use SendIt, we collect and process the following information:

• OAuth Tokens: Access tokens and refresh tokens from connected social media platforms (LinkedIn, Instagram, Threads, TikTok, X, Facebook, YouTube, Pinterest). These are encrypted at rest using AES-256-GCM encryption.
• Platform Account Data: Your user identifiers, account handles, display names, profile images, channel or page identifiers, and connection status on connected social media platforms, used to show account status and publish content on your behalf.
• Content and Media Data: The text, images, videos, media URLs, upload sessions, and preview data you submit for publishing, validation, previewing, upload, or scheduling.
• Scheduling Data: Scheduled post content, target platforms, scheduled times, statuses, and cancellation or manual-publish actions.
• Publishing History: Records of successfully published posts, including platform post IDs, URLs, timestamps, and per-platform success or error results.
• Analytics and Engagement Data: Metrics and related post data returned by connected platforms when you request analytics, such as impressions, likes, comments, shares, engagement rates, date ranges, and top-post summaries.

How We Use Your Information

We use the collected information solely to provide the Service:

• To authenticate with social media platforms on your behalf
• To publish content to your connected accounts
• To schedule and manage future posts
• To validate, preview, and manage uploaded media for posts
• To retrieve analytics and engagement data from platforms
• To maintain and improve the Service

Google User Data

If you connect YouTube or Google Business Profile, SendIt may access Google user data that you authorize through Google OAuth. This can include OAuth access tokens and refresh tokens, Google account or profile identifiers used to connect the account, YouTube channel data, Google Business Profile account and location data, post or video metadata, analytics, and comments when you ask SendIt to fetch or act on them.

SendIt uses Google user data only to connect your Google account, publish or manage YouTube and Google Business Profile content, show account and post data, provide analytics and comments features you request, protect the Service, and fix service issues.

Google user data is shared, transferred, or disclosed only in the following cases:

• With Google APIs, when needed to perform YouTube or Google Business Profile actions that you request.
• With infrastructure providers such as Vercel and Supabase, for hosting, database, logging, and secure storage.
• When required by law, legal process, or to protect users or the Service from abuse.

We do not sell Google user data, rent it, use it for advertising, transfer it to data brokers, use it for credit or lending decisions, or use it to train AI models.

Data Storage and Security

• Encryption: All OAuth tokens are encrypted at rest using AES-256-GCM encryption with a user-provided encryption key.
• Database: Data is stored in Supabase PostgreSQL databases with row-level security.
• Self-Hosting: SendIt can be self-hosted, giving you complete control over your data.

Third-Party Services

SendIt integrates with the following third-party services:

• LinkedIn: For publishing posts and retrieving analytics. Subject to LinkedIn's Privacy Policy.
• Instagram/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
• Threads/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
• Facebook/Meta: For publishing posts and retrieving analytics. Subject to Meta's Privacy Policy.
• X: For publishing posts and retrieving analytics. Subject to X Privacy Policy.
• TikTok: For publishing posts and retrieving analytics. Subject to TikTok Privacy Policy.
• YouTube/Google: For publishing videos and retrieving analytics. Subject to Google Privacy Policy.
• Pinterest: For publishing pins and retrieving analytics. Subject to Pinterest Privacy Policy.
• Cloudinary: For optional media hosting. Subject to Cloudinary's Privacy Policy.
• Vercel: For application hosting and logs. Subject to Vercel's Privacy Policy.
• Supabase: For database hosting. Subject to Supabase's Privacy Policy.

Data Retention

• OAuth Tokens: Retained until you disconnect the account or the token expires (typically 60 days).
• Scheduled Posts: Retained until published or cancelled.
• Published Posts: Post records are retained indefinitely for analytics purposes.
• Media Uploads: Temporary uploads are deleted after 24 hours unless published.

Your Rights

You have the right to:

• Disconnect your social media accounts at any time
• Request deletion of your data (see our Data Deletion page)
• Export your data upon request
• Self-host the Service for complete data control

Children's Privacy

SendIt is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

InfiniteApps LLC
Email: privacy@infiniteappsai.com