What SaifCast does
SaifCast is a multi-platform automation service that publishes videos to your connected social media channels and accounts on schedules you set. Supported platforms include YouTube, TikTok, Instagram, and Facebook. You provide video content and repeat timing, and SaifCast publishes the media to your selected accounts at your designated times.
Information we collect
- Account: your name, email address, password hash, and timezone setting.
- Connected social accounts: channel/account title, platform handle, channel ID, profile avatar, and encrypted OAuth access & refresh tokens issued by the respective provider.
- Schedules: titles, descriptions, captions, tags, upload times, repeat rules, and video source links.
- Media library assets: video files and custom thumbnail images you upload directly to your SaifCast library.
- Publishing history & logs: timestamps when each upload ran, target platform, destination post URL, and status responses returned by provider APIs.
Google user data
SaifCast requests three specific Google OAuth scopes: youtube.upload (to upload scheduled videos to your connected YouTube channel), youtube.readonly (to identify your channel name, channel ID, avatar, and verify connection health), and youtube.force-ssl (to create and manage live broadcasts on your YouTube channel). We use these permissions solely to provide scheduling and publishing services. We do not read your private comments, analytics, or subscribers, and we never sell, share, or use your Google data for advertising.
SaifCast uses YouTube API Services. By connecting your channel you also agree to the YouTube Terms of Service.
SaifCast's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. For details on how Google handles your data, see the Google Privacy Policy.
You can review or revoke SaifCast's access to your Google account at any time in your Google Account permissions.
TikTok user data
When you connect a TikTok account to SaifCast, we request permission through TikTok's official OAuth consent screen. We access two specific scopes:
- user.info.basic: allows SaifCast to retrieve your public profile information (creator display name, username handle, profile picture, and open ID) so you can identify and manage your connected account in the dashboard.
- video.publish: allows SaifCast to upload and publish scheduled videos directly to your own TikTok creator account on your behalf.
How we use it: We use TikTok user data solely to publish videos on your behalf according to the schedule and settings you configure in SaifCast. We do not access your direct messages, private videos, followers, or browsing history.
Storage & Retention: TikTok OAuth access and refresh tokens are encrypted at rest on our secure servers and are never exposed in client-side code or logs. Stored tokens are permanently deleted when you disconnect your TikTok account or close your SaifCast account.
Compliance & Revocation: SaifCast operates in strict compliance with TikTok Developer Terms of Service and TikTok Privacy Policy. You can disconnect your TikTok account at any time in SaifCast (Dashboard → Social Accounts → Disconnect) or revoke access directly in the TikTok mobile app under Profile → Settings and privacy → Security → Manage app permissions.
Meta (Instagram & Facebook)
When you connect Meta-powered social accounts (Instagram Professional Accounts and Facebook Pages), we request permission via Meta's official OAuth dialog:
- Instagram scopes (instagram_business_basic, instagram_content_publish): allows SaifCast to identify your connected Instagram Business or Creator account (account name, username, ID, profile photo) and automatically publish scheduled video Reels and posts to your Instagram profile.
- Facebook Page scopes (pages_show_list, pages_read_engagement, pages_manage_posts): allows SaifCast to list the Facebook Pages you manage and publish scheduled video posts to the specific Page you select.
How we use it: Meta user data and Page tokens are used solely to deliver automated scheduling and video publishing to your designated Facebook Page or Instagram account. We do not read personal messages, friends lists, private feed posts, or personal profiles.
Storage & Retention: Long-lived Meta Page tokens and account metadata are encrypted at rest in our secure database. Tokens are purged immediately when you disconnect the account or delete your SaifCast profile.
Compliance & Revocation: SaifCast adheres to the Meta Platform Terms and Meta Privacy Policy. You can disconnect Meta accounts anytime in SaifCast (Dashboard → Social Accounts) or revoke access in your Facebook Account Settings under Settings & Privacy → Settings → Apps and Websites.
Data sharing & disclosure
SaifCast does not sell, rent, or trade your personal data or connected platform credentials to any third party. We share data strictly with third-party service providers required to operate the automation platform:
- Connected Platforms (Google, TikTok, Meta): OAuth tokens are transmitted only to the official APIs of Google/YouTube, TikTok, and Meta to authenticate requests and publish your scheduled videos.
- Database & Auth (Supabase): account profiles, encrypted OAuth tokens, schedule definitions, and upload logs are securely stored in Supabase (PostgreSQL with Row-Level Security).
- Object Storage (Cloudflare R2): video files uploaded to your SaifCast library are stored in Cloudflare R2 with encryption at rest.
- Payment Processor (Stripe): billing and payment processing is handled securely by Stripe. SaifCast does not store raw credit card numbers.
We do not share your data with advertisers, data brokers, advertising networks, or marketing partners.
Data protection & security
We maintain robust technical and organisational security controls to protect your personal information and sensitive OAuth credentials:
- Encryption in transit: all communications between your client device, our application servers, and provider APIs use modern TLS 1.2+ encryption over HTTPS.
- Encryption at rest: database tables, credentials, and Cloudflare R2 object storage are encrypted at rest using industry-standard AES encryption.
- Row-Level Security (RLS): database policies enforce strict tenant isolation — every database query is scoped strictly to the authenticated owner.
- Server-side token management: OAuth tokens for YouTube, TikTok, and Meta are kept securely on backend infrastructure and are never transmitted to client browsers.
- Least privilege principle: we request only the minimum API scopes required to verify your connected channel/account and publish videos.
Your videos & media library
SaifCast handles videos differently based on how you provide them:
- From Google Drive links: the file is downloaded temporarily at scheduled publish time, processed, uploaded to your connected destination, and immediately deleted from our servers as soon as upload completes or fails.
- From your SaifCast library: videos uploaded to your library are stored on Cloudflare R2 until you choose to delete them from your library or delete your account.
How long we keep data
Account metadata, connected accounts, and schedule definitions are retained for as long as your account remains open. When you disconnect a social account, its access tokens and credentials are deleted immediately. Inactive upload logs are retained for operational history and deleted upon account termination. Billing records are retained as required by applicable tax and accounting laws.
Data deletion & retention
SaifCast provides full, transparent data deletion mechanisms across all connected platforms:
- Disconnecting an account: Navigate to Dashboard → Social Accounts and click "Disconnect" on any connected YouTube, TikTok, Facebook, or Instagram account. This immediately revokes and purges all stored OAuth tokens and platform metadata for that account.
- Deleting your SaifCast account: Go to Dashboard → Settings → Delete Account, type your account email, and confirm. This permanently deletes your user profile, all scheduled jobs, media library assets, upload logs, and revokes all connected platform tokens.
- Meta Data Deletion Callback & Instructions: In compliance with Meta Platform Policies, users can initiate data deletion through Facebook settings or view our dedicated instructions and confirmation code checker at https://saifcast.com/data-deletion.
- Email deletion requests: You may email [email protected] at any time to request complete data erasure. Requests are processed within 48 hours.
Your rights
Depending on your jurisdiction (such as GDPR in Europe or CCPA/CPRA in California), you have the right to request access to your personal data, rectify inaccurate data, request data erasure ("right to be forgotten"), restrict processing, and export your data in a portable format. Contact [email protected] to exercise any of these rights.
Contact
Privacy and data inquiries: [email protected]. General support: [email protected].