Privacy Policy

1. Who we are

MultPoster is operated by multposter.ocenexvr.com. This policy applies to the MultPoster website, dashboard, social-account connections and publishing features.

Privacy contact: support@multposter.ocenexvr.com.

2. Information we collect

Depending on how you use the service, we may process:

• Account information such as your name, email address and WordPress account identifier.
• Connected social account information such as provider name, account/channel identifier, username/display name, authorization scopes and encrypted access credentials or tokens supplied through an official OAuth, bot or webhook flow.
• Content and publishing information such as captions, titles, media URLs, schedules, selected destinations, publication status, remote post identifiers and platform responses.
• Technical and security information reasonably necessary to operate, protect and troubleshoot the service, including server and application logs generated by the hosting environment or WordPress.
• Communications you send to us for support, privacy or account requests.

3. How we use information

We use information to provide and secure the service, authenticate users, connect authorized social accounts, schedule and publish content at your direction, maintain publication history, troubleshoot failures, prevent abuse, respond to support requests, comply with law, and improve service reliability.

4. Social platforms and third parties

When you connect or publish to a third-party service, information is sent to that service at your direction and is also subject to that platform's own terms and privacy policy. MultPoster currently supports or may integrate with Instagram, Facebook, Threads, YouTube, LinkedIn, X, Pinterest, Bluesky, Mastodon, Tumblr, LINE, Telegram, Discord, Canva, Adobe Express, Google Drive and Dropbox. We do not control how a third party processes information after it receives information from MultPoster.

We may also use hosting, infrastructure, security, email or analytics providers where configured by the site operator. They should receive only the information reasonably necessary to provide their service.

5. Platform-specific data use

Depending on the platforms you choose to connect, MultPoster may process the following categories solely to provide the connection and publishing features you request:

• Meta services (Instagram, Facebook and Threads): authorized account or Page identifiers, usernames/display names, Page or professional-account information, OAuth access tokens, granted permissions and published-content identifiers. MultPoster uses these data to show the account you connected and to publish content you select.
• Google / YouTube: authorized YouTube channel identifiers and channel metadata, OAuth access and refresh tokens, upload authorization, and YouTube video identifiers/status returned after publishing. These data are used to identify the connected channel and upload or schedule user-selected videos/Shorts. MultPoster does not use Google data for advertising, profiling or unrelated purposes. MultPoster's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Google Drive: Google account identifiers/display information, OAuth access and refresh tokens, the drive.file authorization, and metadata/file identifiers for Drive files the user explicitly selects through Google Picker or uploads through the MultPoster workflow. The original files remain in the user's Drive. When a social API requires a publicly fetchable URL, MultPoster may create a short-lived temporary relay copy in WordPress uploads solely for that publishing attempt and schedule that relay copy for deletion.
• Dropbox: Dropbox account identifier/display information, OAuth access and refresh tokens, selected file/folder metadata and file paths/IDs. Original files remain in the user's Dropbox. MultPoster uses Dropbox temporary links for publishing where supported and can upload directly from the user's browser into a /MultPoster folder in their Dropbox when the user requests it.
• LinkedIn and X: authorized member/account identifiers, profile labels needed to show the connected destination, OAuth tokens, granted scopes, and remote post/media identifiers returned by the platform.
• Pinterest: the authorized Pinterest account identifier/profile, boards available to the user, OAuth access/refresh tokens, and Pin identifiers/status. Each selected board may be stored as a separate publishing destination so the user can choose where to create Pins.
• Bluesky / AT Protocol: handle, decentralized identifier (DID), PDS/service URL, OAuth access/refresh tokens, granted OAuth scopes, and per-session DPoP cryptographic key material needed to prove possession of the authorized session. MultPoster uses AT Protocol OAuth with PKCE, PAR and DPoP and does not request or store the user's Bluesky password or App Password.
• Mastodon: the user-selected Mastodon instance, account identifier/handle, OAuth access token, and status/media identifiers returned by that instance. Because Mastodon is decentralized, information is also processed by the particular instance the user chooses.
• Tumblr: authorized Tumblr account and blog identifiers, blog names/URLs, OAuth access and refresh tokens, granted scopes and post identifiers returned after publishing. Each writable Tumblr blog may be stored as a separate destination.
• LINE: LINE Official Account identifiers, Channel ID, encrypted Channel secret and Channel access token supplied by the account administrator, webhook delivery data, and group/room identifiers discovered from signed LINE webhook events. MultPoster uses these only to send user-requested messages/broadcasts and identify groups the Official Account has joined.
• Canva: Canva user/team identifiers, display name, OAuth access and refresh tokens, granted scopes, design identifiers and metadata, temporary edit/view URLs, thumbnails, export job identifiers and exported design files selected by the user. MultPoster uses these data only to let the user create, edit, choose and export Canva designs into the MultPoster composer. MultPoster does not collect the user's Canva password.
• Adobe Express: Adobe Express is embedded in the MultPoster composer through Adobe's Embed SDK. Adobe handles Adobe-account sign-in inside its editor. MultPoster may receive the Adobe Express project/document identifier and the image or video the user explicitly exports through the Use in MultPoster action. That exported media is copied into the user's MultPoster/WordPress media storage so it can be attached to a post. MultPoster does not receive or store the user's Adobe password.
• Telegram and Discord: Telegram channel/chat identifiers and bot-delivery information, or Discord webhook/channel configuration supplied by the user, together with remote delivery responses necessary to send the requested post.

6. Access credentials and security

Where a platform provides OAuth or another official authorization mechanism, MultPoster uses it rather than collecting the user's primary social-network password. OAuth access tokens, refresh tokens, Google Drive/Dropbox storage authorization and file references, Canva design/export authorization data, Adobe Express project/export data, AT Protocol DPoP key material, LINE channel credentials, bot connection information and webhook credentials stored by the plugin are encrypted at rest using keys derived from the WordPress security configuration. MultPoster does not request Bluesky passwords or App Passwords for new Bluesky connections. No internet service can guarantee absolute security, so you should also protect your WordPress account and connected platform accounts.

7. Retention

We retain account, connection, content and publication records for as long as reasonably necessary to provide the service, maintain security and history, comply with legal obligations, or resolve disputes. Connected-platform tokens are retained only while needed to keep the connection usable, subject to the platform's expiration/revocation rules. You may disconnect individual social accounts at any time. You may also use the MultPoster Data Deletion page to remove MultPoster-specific connection credentials, content records and publication history associated with your signed-in account.

8. Revoking third-party access

Disconnecting an account inside MultPoster removes the MultPoster connection record. You may also revoke MultPoster directly from the relevant platform's security, connected-app or authorization settings. Revocation by a platform can immediately prevent future publishing even if a scheduled publication remains in MultPoster.

9. Your choices and rights

Subject to applicable law, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information. You can disconnect social accounts from the Connections page and request deletion through the Data Deletion page or by contacting the privacy email shown below.

10. Cookies

The service may use cookies or similar browser storage that are necessary for WordPress authentication, security and preferences. Additional analytics or third-party cookies may apply only if separately configured. See the Cookie Policy for more information.

11. Children

MultPoster is intended for people who are legally able to enter into the applicable service agreement and is not directed to children. Do not use the service if you are below the minimum age required by applicable law or by the social platforms you connect.

12. International processing

Social platforms, decentralized instances, hosting providers and other processors may operate in multiple countries. Where applicable, information may therefore be processed outside your country of residence subject to applicable legal safeguards.

13. Changes to this policy

We may update this Privacy Policy when the service, integrations or legal requirements change. The current version will be posted on this page with an updated effective date.

14. Contact

For privacy questions or requests, contact support@multposter.ocenexvr.com.