1. Scope
This Privacy Policy explains how PostGod handles information when you use the PostGod Windows desktop application or visit postgod.savish.app. The website is an informational and legal presence only; it is not the PostGod application and is not required for ordinary desktop operation, except that a hosted authorization callback page may help return a platform authorization result to the desktop application.
2. Local-first operation
PostGod runs on your Windows computer. You select video files from your own storage and configure where and how you want to publish them. PostGod does not upload selected media to a PostGod-operated cloud media library. When you explicitly initiate publishing, the desktop application transmits the selected media and publishing fields directly to the selected third-party platform using that platform’s API or upload service.
3. Information handled by the desktop application
Depending on the platforms you connect and the permissions you grant, PostGod may handle:
- OAuth authorization credentials, access tokens, refresh tokens, token expiration information, and related connection state.
- Limited connected-account information returned by a platform, such as an account or creator label, Facebook Pages you can manage, a linked Instagram professional account, and platform-supported publishing capabilities.
- Media and publishing information you choose, including local filenames, video metadata, captions, hashtags, titles, descriptions, privacy selections, and interaction settings.
- Local publishing history, including platform, local filename, timestamp, success, failure or pending status, remote media identifier, remote URL when available, and a sanitized error or restriction message.
PostGod uses this information to establish the connection you request, display eligible destinations and controls, perform your requested publishing action, show progress and results, refresh authorization when supported, and retain a useful local publishing record.
4. Credential storage and local records
OAuth tokens are stored in separate encrypted credential files in the application’s local user-data directory using Electron safeStorage and the encryption protections available through Windows. OAuth tokens are not stored in browser localStorage, the public website, or publishing history.
Publishing history is stored separately as a local JSON file on your computer and may contain filenames, timestamps, publishing outcomes, platform identifiers, and remote media IDs or URLs. This history is not represented as encrypted credential storage. The current application retains up to 250 history entries.
5. Platform-specific information
YouTube and Google
PostGod requests the YouTube upload permission to upload videos at your direction and manage the authorization needed for that action. PostGod does not request Google profile or email scopes merely to identify the account. Google API information is used only to provide the user-facing publishing functionality described here and is not sold or used for advertising.
Facebook and Instagram
PostGod may receive your connected Meta account name, Pages available to your account, Page authorization information, and a linked Instagram professional-account identifier or username. It uses this information to show eligible publishing destinations and publish the Reel you request.
TikTok
PostGod may receive TikTok authorization credentials, a creator username or nickname, available privacy levels, interaction capabilities, maximum allowed video duration, publishing status, and a remote post or publishing identifier. It uses this information to present account-supported publishing choices and perform the Direct Post you request. Development or unaudited access may be restricted by TikTok, including private-only visibility.
6. Third-party platforms
When you connect or publish to TikTok, Instagram, Facebook, or YouTube, information is transmitted to and processed by that platform under its own terms and privacy policy. PostGod does not control a platform’s processing, retention, moderation, availability, or further use of information after submission. You should review the privacy controls and policies of every platform you connect.
7. Disconnecting and deletion
Using Disconnect in PostGod requests revocation where supported and removes the locally stored PostGod credential record for that connection even if remote revocation cannot be completed. Disconnecting does not delete content already submitted to a platform and does not currently erase local publishing history. You can manage or delete published content using the relevant platform. Local application data can also be removed from the PostGod application-data directory on your Windows device; close PostGod before manually removing application data.
8. Website data
This static website does not provide user accounts, analytics, advertising trackers, or nonessential cookies. Like most hosting services, the hosting provider may process routine request information such as IP address, timestamp, requested URL, browser information, and security logs for delivery, reliability, and abuse prevention. Such hosting records are governed by the hosting provider’s practices and retention settings.
9. Sharing and sale
PostGod does not sell personal information. Information is disclosed to a connected platform when necessary to complete an authorization or publishing action you request, and may be disclosed when required by law or reasonably necessary to protect the security and integrity of the software or service.
10. Security
PostGod uses reasonable technical boundaries, including Electron context isolation, disabled renderer Node integration, sandboxing, encrypted local credential storage, and main-process handling of platform credentials. No system is completely secure. Security also depends on the safety of your Windows account, computer, connected-platform accounts, and platform authorization settings.
11. Children
PostGod is not directed to children and should be used only by people permitted to operate connected social accounts under the applicable platforms’ age and account requirements.
12. Changes
This policy may be updated as PostGod changes or legal and platform requirements evolve. The effective date above will be updated when material revisions are published.
13. Contact and operator
PostGod is operated by Gold Lion Society LLC, 1524 Stinson Lane, Locust Grove, Georgia, USA. For privacy questions, requests, or concerns, contact arthur@goldlionsociety.com.