Privacy Policy

Service scope and data processed

The service processes account information such as your name, email address and protected sign-in information, workspace memberships and roles, and subscription status and plan limits. It also processes information about social accounts you connect, including names, platforms, identifiers, permissions and authorized access credentials.

Content data includes images, videos, thumbnails, captions, hashtags, drafts, destinations, publication times, approvals and delivery results. Session information, IP addresses, browser information, activity records and error logs may be processed to operate and protect the service.

Why we use data

We use data to create accounts and verify access, separate customer workspaces and manage team permissions, store content, check subscription entitlements, execute publishing and scheduling you approve, provide support, prevent abuse and diagnose failures.

Connecting to ChatGPT does not activate a paid subscription or expand your workspace role. We do not ask for your Facebook or Instagram password in a conversation; social account connections use the platform authorization flow.

Data exchanged with ChatGPT

After you authorize the plugin, the service may return your profile, including name and email address, permitted workspaces, social account names, subscription status, content and requested tool results to ChatGPT. Plugin tools do not return passwords or social platform access tokens.

When you ask to attach an available ChatGPT image, the image you grant access to is transferred to the service private storage and attached to the requested draft. Selecting the file in the ChatGPT library may be necessary, especially in Work. Generating or attaching an image is not approval to publish it.

Your conversations and files uploaded to OpenAI are governed by its policies and your account settings there. This service does not control copies retained by OpenAI or your ChatGPT conversation history.

Service providers and social publishing

The service uses Hostinger for hosting and may use email and AI providers when you use the relevant features. Providers receive data needed to deliver the requested function. Once you approve publishing, content and necessary information are sent to Facebook, Instagram or the relevant social platform.

Files are not permanent public links by default. For a particular preview or publication, the service may generate a signed, time-limited download link. Anyone possessing that link can download the file during its validity period. Do not share it with unauthorized people.

Processing may take place outside your country depending on the locations of infrastructure, social platform and AI providers. Those providers have their own policies. Data may also be disclosed when needed to meet a legal obligation or protect rights and service security.

Retention, security and administration

We use authentication, roles and workspace access controls. Social connection credentials are protected and conversation tools limit the information they return. Authorized administrators may access information needed for administration, support and security. No storage or communication method eliminates every risk.

Account data, content, approvals and records are retained while needed to provide the service, administer subscriptions, fulfill your requests, protect the service and meet applicable obligations. Do not rely on the media library as a permanent archive; keep your own originals. Originals no longer needed after publication may be removed under the applicable retention settings, while thumbnails or records may remain.

Disabling an account or revoking one connection does not immediately delete every record. Copies may remain in backups or security records until the relevant retention cycle replaces them or the legitimate need to retain them ends.

Your choices and deletion requests

You can edit your profile and disconnect social accounts on the website where your role permits, and revoke the application at the social platform. You can revoke the ChatGPT connection in ChatGPT settings or on the website connection page.

Revoking ChatGPT access prevents new requests through that connection. It does not cancel posts you previously approved and scheduled. Review and cancel unwanted scheduled posts on the website.

To request access, correction, a copy, account deletion or workspace deletion, email info@webxup.com from your account email with the subject “Social Publisher Pro data request”. Identify the workspace and scope of your request. We verify ownership and authority before acting. Never send passwords or OAuth tokens. Requests are reviewed under applicable rights and obligations.

Deleting service data does not automatically remove content already published to Facebook or Instagram, or conversations stored in ChatGPT. Use the relevant platform controls to manage those copies.

Cookies, children and policy updates

Essential cookies and session technologies support sign-in, session continuity and protection against forged requests. Protected features may not work if you disable them. Cookies on other providers websites are subject to their settings and policies.

The service is intended for business and content management and is not directed to children under 13. Do not submit their personal data to the service or plugin. Contact the privacy email above if you believe we have received a child personal data.

Updates are published on this page with a revised effective date. The Arabic and English versions describe the same practices; contact us about any discrepancy or question.