Afilipost ← Back to the front page

Privacy policy

How Afilipost handles the data you entrust to it, and what it refuses to do with it.

Last updated: 24 August 2026

What this service is

Afilipost is a publishing service. People connect their own social media accounts, schedule posts to them, and set up comment-to-DM automations. The service is open to third parties who register for it.

What we collect

Only what the service needs to do its job:

  • Access tokens returned by the platforms' own OAuth flows. Your social media password is never requested, never shown to us, and never stored.
  • The content you publish: images, video, captions, scheduled times.
  • Interaction data on posts where you set up an automation: the comments that trigger a rule, and the direct messages exchanged with the person who triggered it.
  • Your account details: email address and, when billing begins, the information required to invoice you.
  • Operational records: which post went to which destination, when, and whether it failed.

What we use it for

Publishing your posts, running the automations you configured, and showing you what happened. Nothing else.

Your data is not sold, not used for advertising, not used to train models, and not shared with third parties. Platform APIs are accessed only as needed to perform the actions you asked for, in line with each platform's developer terms.

How it is stored

Access tokens are encrypted with AES-256-GCM. Each record is sealed with its own data key, and that key is wrapped with a master key held outside the database — a copy of the database on its own does not yield a single usable token.

Media files live in object storage and are deleted within seven days of a post being published to all of its destinations. The platform keeps its own copy; we do not need ours.

How long we keep it

Disconnect an account and its tokens, posts, contacts, messages and automation rules are deleted immediately.

Ask to close your account and everything is removed within 30 days.

Operational log entries are pruned after 30 days.

Your rights

You may access, correct, export or delete your data at any time. See the data deletion page for how, or write to us.

Contact: 1burakbabacan@gmail.com