Privacy Policy

This Privacy Policy explains how Skedeon collects, uses, shares, stores and deletes information when you visit skedeon.com or use the Skedeon application at app.skedeon.com (together, the “Service”). We wrote it to be read, not just accepted.

1. Who we are

Skedeon is a product of Vertex Digital L.L.C-FZ, a limited liability company registered in the Meydan Free Zone, Dubai, United Arab Emirates, License No. 2648533.01, with its registered address at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates (“Vertex Digital”, “we”, “us”). Vertex Digital is the controller of the personal data described in this policy.

For any privacy question or request, write to privacy@skedeon.com. For general support, write to support@skedeon.com.

2. The short version

We use your data only to provide the Service: to connect your social accounts and publish the content you schedule, when you schedule it.
We never ask for your social media passwords. Accounts are connected through the platforms’ official login screens.
Access tokens are encrypted. Uploaded media files are deleted automatically about 14 days after publishing.
We do not sell your data, we do not use it for advertising, and our website uses no cookies, analytics or trackers.
You can disconnect accounts and request deletion at any time.

3. Data we collect

3.1 Your Skedeon account

When you sign up or sign in we process your name, e-mail address, the basic profile information provided by the login method you choose, your language and time-zone preferences, and your workspace settings.

3.2 Data from platforms you connect

When you connect a social account, the platform shows you exactly which permissions Skedeon requests, and you decide what to grant. Depending on the platform, we receive:

Meta (Facebook and Instagram), via Facebook Login for Business: your Facebook user ID; the IDs, names and profile pictures of the Facebook Pages and Instagram professional accounts you choose to share; and the access tokens needed to publish to them. Permissions we may request: pages_show_list (to list your Pages so you can choose), pages_read_engagement (to read basic Page data and the status of published videos), pages_manage_posts (to publish Reels to your Page), instagram_basic (to show the name and picture of the connected Instagram account), instagram_content_publish (to publish Reels, Stories and feed posts) and business_management (to access Pages and Instagram accounts that belong to a Business Portfolio you manage).
Google / YouTube (when this integration becomes available), via Google Sign-In: your YouTube channel ID, channel title and thumbnail, and OAuth tokens for the youtube.upload scope, used solely to upload the videos you schedule to the channel you choose. We request the minimum scope required.
TikTok (when this integration becomes available), via Login Kit: your TikTok open ID, display name and avatar, the creator settings TikTok requires us to respect before posting (for example, whether comments, Duet and Stitch are allowed), and the access tokens needed to publish the videos you choose through the Content Posting API.

We do not read your private messages, your followers’ or friends’ personal data, your contacts, or content you did not create in Skedeon.

3.3 Content you create in Skedeon

Media files you upload (videos and images), captions, hashtags, the accounts you select, scheduled dates and times, your “Made with AI” label choice, and the results returned by the platforms (for example the ID of the published post, its status or an error message).

3.4 Technical and support data

Our hosting provider processes technical data such as IP address, browser type and request timestamps to deliver pages securely and to protect the Service against abuse. If you contact us, we process the content of your messages.

4. How we use data and our legal bases

Purpose	Legal basis (GDPR)
Creating and running your account; connecting your social accounts; storing, scheduling and publishing the content you choose; showing your calendar and post status	Performance of our contract with you (Art. 6(1)(b))
Accessing your social accounts through the permissions you grant on the platform’s consent screen	Performance of contract and your consent, which you can withdraw at any time by disconnecting (Art. 6(1)(a) and (b))
Keeping the Service secure, preventing fraud, spam and abuse, and fixing errors	Our legitimate interests (Art. 6(1)(f))
Answering support requests and sending essential service messages (for example a failed post or a change to these terms)	Performance of contract and legitimate interests (Art. 6(1)(b) and (f))
Complying with legal obligations, such as tax and accounting rules once paid plans exist, or lawful requests from authorities	Legal obligation (Art. 6(1)(c))

We do not use your data for advertising, we do not build marketing profiles, we do not sell or rent data, and we do not make decisions with legal or similarly significant effects based solely on automated processing.

5. Platform-specific commitments

5.1 Meta

Data received through Meta’s APIs is used only to provide the features you request in Skedeon, in accordance with the Meta Platform Terms and Developer Policies. We do not sell, license or transfer it to data brokers or advertising networks, and we do not use it to build user profiles outside the Service.

5.2 Google and YouTube — Limited Use

Skedeon’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

we use Google user data only to provide and improve the user-facing features you request — uploading your scheduled videos to your chosen YouTube channel and showing which channel is connected;
we do not transfer Google user data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
we do not use or transfer Google user data for serving advertisements, including retargeting or personalized ads;
we do not allow humans to read Google user data unless you give us explicit consent for specific data, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized for internal operations;
we do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.

Skedeon uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google’s handling of your data is governed by the Google Privacy Policy. We do not keep YouTube API data longer than necessary: stored data is refreshed or deleted at least every 30 days, and all of it is deleted when you disconnect your channel. You can revoke Skedeon’s access at any time on the Google security settings page.

5.3 TikTok

Data received from TikTok’s Login Kit and Content Posting API is used only to show which TikTok account is connected and to publish the videos you explicitly choose to post, with the settings you select. Your use of TikTok remains subject to TikTok’s Terms of Service and Privacy Policy.

6. “Made with AI” labels

If you switch on the “Made with AI” option, we store that choice with the post and send the corresponding disclosure to the platform (on Instagram, the official is_ai_generated field). Skedeon does not analyze your media with artificial intelligence and does not use your content to train AI models.

We share data only with service providers that process it on our behalf under written agreements, and with the platforms you instruct us to publish to:

Cloudflare, Inc. — website and application hosting, content delivery, security, and storage of uploaded media files.
Supabase, Inc. — database and authentication infrastructure, hosted in the European Union.
Meta Platforms, Google LLC (YouTube) and TikTok — when you publish, the media, caption and settings of that post are sent to the platform you selected so it can be published. From that moment the platform processes it under its own terms and privacy policy.
E-mail service providers — to receive and answer the messages you send us.

We may also disclose data if required by law or a valid order of a competent authority, to protect the rights, property or safety of our users or the public, or to a successor in a merger or acquisition, in which case we will notify you before your data becomes subject to a different privacy policy.

8. International transfers

Vertex Digital is established in the United Arab Emirates. Our database is hosted in the European Union, and Cloudflare operates a global network. Where personal data is transferred outside the European Economic Area, the United Kingdom or the United Arab Emirates to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and our providers’ data processing agreements. You can ask us for a copy of the relevant safeguards.

9. How long we keep data

Uploaded media files: deleted automatically about 14 days after the post is published, or after a scheduled post is cancelled or fails permanently.
Access tokens: kept, encrypted, until you disconnect the account, the token expires or is revoked, or you delete your Skedeon account.
Connected account details, captions, schedules and post history: kept while your Skedeon account is active, so you can see your history. You can delete individual posts at any time.
Account data: deleted within 30 days after you close your account or ask us to delete it.
Security logs: kept for no longer than 30 days, unless needed to investigate a specific incident.
Support messages: kept for up to 24 months after the conversation ends.
Billing records (once paid plans exist): kept for the period required by tax and accounting law.

10. Security

All traffic is encrypted in transit with TLS. Access tokens are encrypted at rest with AES-256-GCM, using a key stored separately from the database. Access to production systems is limited to the people who need it. Uploaded media is stored at unguessable addresses so that the platforms can retrieve it for publishing. No system is perfectly secure; if a breach affects your personal data we will notify you and the competent authorities as required by law.

11. Your rights

Depending on where you live (for example under the EU and UK GDPR or the UAE Personal Data Protection Law), you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. To exercise these rights, write to privacy@skedeon.com. We answer within 30 days and may ask you to confirm your identity. You also have the right to lodge a complaint with your local data protection authority.

12. How to revoke access

In Skedeon: disconnect any account from your account list at any time. See also our data deletion instructions.
Facebook and Instagram: on Facebook, go to Settings & privacy → Settings → Business integrations, select Skedeon and choose Remove. On Instagram you can also review apps under Settings → Website permissions → Apps and websites.
Google / YouTube: visit myaccount.google.com/permissions, select Skedeon and remove access.
TikTok: in the TikTok app, open Settings and privacy → Security & permissions → Apps and services permissions, select Skedeon and remove access (menu names may vary by app version).

13. Cookies and tracking

The skedeon.com website does not use cookies, analytics, advertising pixels or third-party trackers, and our fonts are served from our own domain. That is why you see no cookie banner. If you dismiss the language suggestion, that choice is saved only in your browser’s local storage and is never sent to us. The Skedeon application uses only strictly necessary cookies to keep you signed in.

14. Children

The Service is intended for professional use and is not directed to anyone under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the Service evolves, for example when new platforms become available. We will change the “Last updated” date and, for material changes, notify account holders by e-mail or in the app before the change takes effect.

16. Contact

Vertex Digital L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. E-mail: privacy@skedeon.com.