Privacy Policy
YappHub ("YappHub", "we", "us") is a social media management service at app.yapphub.com that lets people and businesses connect their social media accounts, schedule and publish posts, collaborate with teammates and clients, and see how their posts perform. This policy explains what information we collect, how we use it, and the choices you have. Questions? Email [email protected].
- We only collect what we need to run YappHub for you.
- We never sell your data, show you ads, or use your content to train AI models.
- Your social media passwords never reach us. You connect accounts by signing in to each network, and you can revoke access at any time.
- Access tokens are encrypted, and passwords are stored only as one-way hashes.
- You can export or delete your data whenever you want.
1. Information we collect
Account information
Your name, email address, and password (stored only as a salted one-way hash). If you turn on two-factor sign-in, we store the authenticator secret in encrypted form. We also record your role in your workspace (for example owner, editor or client).
Content you create
Posts, captions, scheduled times, images and videos you upload, comments and approval notes, caption templates, hashtag sets, short links, client names and notes, and reports you generate.
Connected social media accounts
When you connect an account on Facebook, Instagram, Threads, X, LinkedIn, TikTok, YouTube, Pinterest, Bluesky or Mastodon, the network gives us an access token for the permissions you approve. We store it encrypted (AES-256). We also store the account's name, handle, profile picture and ID. While you use YappHub we may retrieve from those networks:
- the IDs and links of posts you published through YappHub;
- engagement metrics for those posts (such as views, likes, comments and shares);
- your recent posts, and comments or mentions on them, which are shown in Streams so you can read and reply to them;
- for Facebook, the list of Pages you manage and the Instagram Business accounts linked to them, so you can choose which to connect.
We only request permissions needed for these features, and we never post anything you did not create or schedule.
Security and usage information
Sign-in times, IP addresses and browser type (to show you your active sessions and alert you about new sign-ins), and an activity log of actions in your workspace (for example "post approved" or "account connected"). When someone clicks a YappHub short link we record the click time and the referring website's domain, with no personal identifiers.
Cookies
We use one essential cookie to keep you signed in. We do not use advertising cookies, tracking pixels or third-party analytics.
2. How we use information
- To provide YappHub: publishing and scheduling posts, approvals, notifications, analytics and reports.
- To keep accounts secure: detecting suspicious sign-ins, enforcing two-factor sign-in and preventing abuse.
- To communicate with you about your account: invites, password resets, approval requests and reports you set up.
- To comply with the law and enforce our Terms of Service.
We do not sell personal information, use it for advertising, or use your content to train artificial-intelligence models.
3. Data from Meta (Facebook, Instagram, Threads)
We use data obtained through Meta's platform only to provide the features you request in YappHub, in line with the Meta Platform Terms. We do not sell it, transfer it to data brokers, or use it for advertising or to build profiles of people. You can remove YappHub's access at any time in Facebook under Settings & privacy → Settings → Business integrations, in Instagram under Settings → Website permissions → Apps and websites, or in Threads under Settings → Account → Website permissions. To have us delete data received from Meta, see our data deletion instructions.
4. YouTube (Google) data
YappHub uses YouTube API Services to upload videos you choose and to show statistics for them. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke YappHub's access at any time from your Google security settings. YappHub's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. When information is shared
- With the social networks you choose: when you publish, we send that post and its media to the networks you selected.
- Inside your workspace: teammates and client logins you invite can see the workspace content their role allows. Client logins only see their own brand, and internal notes are hidden from them.
- Service providers who help us run YappHub, under obligations to protect the data:
- Cloudflare, which provides secure network delivery;
- our email delivery provider, which sends account and notification emails;
- Anthropic, but only when you use the AI caption writer. In that case the topic, draft text and brand notes for that request are sent to generate suggestions.
- Legal reasons: if required by law, or to protect the rights, safety and security of our users and the public.
Shared report links and short links are public to anyone who has the link. Only share them with people you trust.
6. Storage and security
YappHub runs on servers we operate in the United States, behind encrypted HTTPS connections. Access tokens and secrets are encrypted at rest and passwords are hashed. We offer two-factor sign-in, lock accounts after repeated failed sign-in attempts, and keep backups for up to 14 days. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.
7. How long we keep information
- Your account and content: kept for as long as your account or workspace exists.
- Disconnecting a social account: deletes its access token immediately.
- Deleting your workspace: deletes its users, accounts, posts, media and reports. Copies remaining in backups are removed automatically within 14 days.
- Security logs: kept for up to 12 months.
8. Your choices and rights
You can access and update your information in YappHub, export a brand's data from the Clients page, disconnect social accounts at any time, and ask us to delete your data (see data deletion). Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete, restrict or object to processing of your personal information, and to data portability. Email [email protected] and we will respond within 30 days. We will not discriminate against you for exercising these rights.
9. Children
YappHub is not intended for anyone under 16, and we do not knowingly collect information from children.
10. Changes to this policy
If we make material changes, we will update the date above and notify account owners by email or in the app before they take effect.
11. Contact
YappHub · [email protected]