Privacy Policy

Effective date: 14 June 2026 · Operated by XOP Labs · contact@xoplabs.fyi

This Privacy Policy explains what data XOP Social Poster (the "Service") handles when you connect a TikTok or Instagram account and schedule posts. We collect as little as possible, and we use it only to publish the content you schedule.

1. Who we are

The Service is operated by XOP Labs. For any privacy request, contact contact@xoplabs.fyi.

2. Data we process

Authorization tokens. When you connect an account, the platform gives us an OAuth access token (and refresh token) that lets the Service publish on your behalf. These are stored privately by the operator.
Basic account identifiers. Such as your TikTok open_id / display name or your Instagram user id, used to confirm which account a post goes to.
Content you provide. The video/photo files and captions you choose to schedule. Media may be hosted on a private URL only long enough for the platform to fetch it, then removed.

We do not collect your password, your contacts, your followers, or your private messages, and we do not track your browsing.

3. How we use it

The data above is used for one purpose: to publish the content you schedule, to the account you authorized, at the time you chose. We do not use it for advertising or profiling.

4. Sharing

We do not sell or rent your data. The only third parties involved are the platforms you publish to:

TikTok — see the TikTok Privacy Policy.
Instagram / Meta — see the Instagram Privacy Policy.

If media hosting is used, files are placed on infrastructure controlled by the operator and removed after publishing.

5. Storage & retention

Tokens and scheduling data are stored only for as long as needed to operate the Service. When you disconnect or delete your data, the stored tokens are removed and can no longer be used.

6. Your choices

You can revoke the Service's access at any time from your TikTok settings (Security & permissions → Manage app permissions) or your Instagram/Meta settings (Apps and websites).
You can request deletion of any stored data by emailing contact@xoplabs.fyi.

7. Children

The Service is not directed at children and is intended for use by the account owner only.

8. Changes

We may update this policy; the effective date above reflects the latest version. Material changes will be posted on this page.