XpostrXpostr · Your data
Privacy Policy
Effective and last updated: 20 October 2026
This policy explains how the Xpostr iPhone app, publishing service and website handle your information. The data controller is Rewrite, CVR 43102990, Denmark. Contact contact@xpostr.dk about privacy or your data.
1. Information we handle
- Videos and drafts. The video you select, its title and captions, duration and dimensions, selected platforms, visibility and audience declarations, interaction options and other posting choices. The app imports a working copy of the selected video; selecting a video does not give our server access to your whole Photos library. A video is sent to our backend when you start its upload.
- Thumbnail designs. Selected video-frame times, photos you choose, cropping and editable text layers are stored with the local draft. Flattened cover images for selected supported destinations are uploaded for publication; a saved photo is not access to your whole library. We validate and re-encode uploaded JPEGs, remove embedded metadata such as location data, and hold the resulting images as temporary, unencrypted working data on the backend. Your original camera-roll photo stays on your device.
- Preferences on your iPhone. Saved platform defaults, such as your usual destinations and YouTube visibility, and TikTok interaction preferences. Drafts and these defaults are stored locally; Xpostr does not provide cloud draft synchronization.
- Connected-account information. Account or channel identifiers, display names, authorization and refresh tokens, and information returned about publishing or processing. You authorize access through the relevant platform. We do not receive your Instagram, TikTok or Google password.
- Publishing and connection records. Installation/session credentials, request identifiers, destinations, posting settings, status and error information, timestamps and platform post identifiers. Your device credential is stored in Keychain; the server stores its hash. These records help avoid duplicate submissions and support destination-specific retries.
- Apple identity, subscriptions and usage. When Apple billing is enabled, Apple-signed app-purchase information links your installation to a pseudonymous usage account. We process app-purchase, subscription and transaction identifiers, an app-account token, entitlement status, billing-period dates and accepted-crosspost counts. The service verifies these with Apple and processes signed subscription notifications. This integration does not provide us with your Apple Account password, email address or payment-card details. In previews, an installation session may be used instead of an Apple purchase identity.
- Website, security and support information. IP addresses and ordinary network/request information needed to deliver the service and address abuse or faults, plus your email address and anything you send to support. This website has no analytics scripts, advertising trackers, embedded social feeds, third-party fonts or non-essential cookies.
2. How and why we use it
We use this information to save your work, connect accounts you authorize, upload and publish the content you confirm, display progress and history, retry affected destinations, clean up working files, verify and restore purchases, and enforce posting allowances. We also use relevant information to answer support enquiries, secure the service, investigate faults and meet legal obligations.
Saved defaults apply to new drafts. TikTok visibility is chosen for each post, and applying saved interaction preferences still requires your action. Posting declarations are transmitted with the post where required by the selected platform.
Under the GDPR, our legal bases are performance of our agreement with you for the service you request (Article 6(1)(b)), legitimate interests in service security and reliability (Article 6(1)(f)), and compliance with applicable legal obligations (Article 6(1)(c)). Authorizing a platform connection lets us access the information needed for that integration; you may revoke it. We do not sell your personal data, use your videos or connected-account data for advertising, or use them to train general-purpose AI models.
3. Who receives information
Your selected platforms receive the video, title, caption, account information and posting instructions needed for publication. Access to a server-held video may be provided through a temporary signed download link. Anyone with a valid link can retrieve that video until the link expires, the file is removed or access is restricted. Files are not listed on this website.
Instagram, TikTok and YouTube process information under their own terms and privacy policies. Their controls govern content once they receive it. Apple processes App Store payments and receives the identifiers needed to verify purchases and subscription status. We use Hetzner for backend and website hosting, and Simply.com for support correspondence and reference-only report alerts. Relevant providers process information to supply those services.
We may also disclose information when legally required or necessary to protect legal rights or service security. We do not provide your content to unrelated advertisers or data brokers. Some platform or support processing may take place outside the European Economic Area. Where Rewrite arranges a transfer requiring safeguards, applicable data-protection requirements apply; contact us for details of the arrangements relevant to your information.
4. Google and YouTube information
Xpostr uses YouTube API Services. With the youtube.upload and youtube.readonly permissions, we identify your channel, upload the videos you confirm, and check their status. Your YouTube caption is sent as the video description, together with your chosen title, visibility, audience and applicable disclosure settings. These permissions are not used to read Gmail or download your existing YouTube video library.
Xpostr’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable. See the Google Privacy Policy for Google’s practices.
You can revoke Xpostr’s access through Google’s security permissions page and disconnect YouTube in Xpostr. Revoking access does not remove videos already uploaded to YouTube. To request deletion of retained YouTube API data held by Rewrite, contact us using the process in section 6.
5. Automatic cleanup, retention and security
The server is a temporary publishing relay. New videos and cover images are not encrypted at rest. They are held while the selected destinations receive and process the current attempt, then removed during cleanup whether that attempt succeeds, fails or needs review. An asynchronous platform download needs a temporary server copy; the service is not a storage or backup service. Cleanup runs during worker cycles while the service operates; outages or file-system failures can delay deletion.
| Information | Retention and control |
|---|---|
| Server video and covers: attempt finished | Removed during cleanup after all selected destinations finish the current attempt, including failures and uncertain outcomes. An active destination may still need the shared copy. |
| Active server transfer | A two-hour limit from each upload bounds active transfer storage. On expiry, working files are removed and unconfirmed results need status checks. No server copy is kept for a later retry. |
| Unused or interrupted server upload | Unused uploads expire after 15 minutes. Failed or cancelled request files are removed by the request handler; crash leftovers are swept after 15 minutes. |
| Imported copy inside Xpostr | After all video and thumbnail destinations succeed, removed during the app’s next synchronization. Failed, uncertain and unsubmitted drafts remain on this phone until you delete the draft or remove the app. They are needed for retries and are not synchronized to another device. |
| Photos originals and published posts | Remain in Photos or on the selected platform. Manage them through those services. |
| Publishing history and connected-account credentials | Kept separately from the video. File cleanup does not remove titles, captions, posting settings, results or platform post identifiers. Disconnecting removes the stored connection credentials; contact us about other retained records. |
| Subscription, identity and usage records | Kept as needed to verify access, count accepted crossposts, restore purchases, handle billing changes and meet applicable obligations. They are not deleted by video cleanup or by disconnecting a social account. |
| Support correspondence | Kept as necessary to resolve your enquiry and meet applicable obligations. |
Connections use HTTPS. New video and thumbnail working copies are not encrypted at rest by Xpostr and can be read by administrators or anyone who obtains access to that server storage. Platform tokens, publishing records and private report records remain encrypted separately. Previously accepted encrypted files may be read to finish an existing attempt; new uploads do not use video encryption or decryption. Access controls, private file permissions and short retention limit exposure, but are not a substitute for encryption. No storage or transmission method guarantees absolute security.
Server-held covers are deleted with the temporary video even if a YouTube thumbnail fails. Retrying a failed destination, thumbnail or interrupted transfer that needs video bytes uploads the same original and required cover again from this phone. Status-only checks do not re-upload or create a new post. Re-uploads use mobile or Wi-Fi data and follow the one-video-per-two-minutes limit; retries within the same job do not consume another crosspost. Deleting the local draft or removing the app can make retry impossible.
Automatic cleanup covers active Xpostr working storage. It does not remove copies in pre-existing device or server backups. We do not describe Xpostr as a video archive; keep your own originals.
Reports, safety decisions and preservation
When you report a concern, we collect the category, exact location or reference, explanation, good-faith confirmation, timestamp, and name and email where provided. We record human review decisions, factual restriction reasons and any preservation basis and review date. Report details and private decision records are encrypted at rest with restricted operator access; automated alerts to contact@xpostr.dk contain only a report reference, not your allegation or attachments. The form accepts text only.
We process this information to assess reports, protect people and service security, explain and reconsider restrictions, respond to lawful authority requests, and meet applicable obligations. Depending on the circumstances, this is based on legitimate interests (Article 6(1)(f)) or a legal obligation (Article 6(1)(c)); any special-category or criminal-offence information requires an additional applicable legal condition. Please omit unnecessary sensitive information. We limit disclosure, including reporter identity, to what is lawful and necessary.
Exception to ordinary video cleanup: an identified video may be held beyond the ordinary attempt-end, two-hour or 15-minute deletion point where a documented legal or safety basis requires or justifies preservation. A held file remains subject to its existing storage format and is blocked from publishing and new signed-link requests. Holds carry review dates and require human release; overdue review dates do not automatically destroy evidence. We review necessity and remove files through normal cleanup when no hold remains. Reports, review records and related correspondence are retained only as needed for case handling, review, legal claims and applicable obligations, with periodic review of that need. They are not removed by ordinary video cleanup.
A report does not automatically establish illegality or trigger a user restriction. Restrictions are human decisions. Contact contact@xpostr.dk with your case reference to request review or exercise data rights. We cannot guarantee confidentiality where disclosure is legally required, and may withhold information where law requires it. See Acceptable Use & Reporting.
6. Your controls and privacy rights
You can delete drafts from the app and manage connected accounts from Settings. You can also revoke access through Google’s security settings, Instagram’s connected-app controls, or TikTok’s connected-app settings. Disconnecting cannot undo an upload already accepted by a platform. Apple subscriptions can be restored or managed from Plans & Usage; removing the app or disconnecting a platform does not cancel an Apple subscription.
Automatic video cleanup requires no request. For access, correction, a copy or deletion of other server-held personal data, or earlier removal of a retained file, email contact@xpostr.dk with the subject “Xpostr privacy request”. Identify your connected account or channel and explain the request. We may need reasonable information to verify ownership; do not send passwords, payment details or access tokens.
Requests to delete YouTube API data are handled as soon as possible and within seven calendar days. Other requests are handled within applicable legal deadlines, normally one month. We may retain limited information where legally required and will explain any applicable exception. Deleting information held by Xpostr does not delete content held by the platforms or transaction records independently held by Apple.
Where the GDPR applies, you may also have rights to restrict processing, object to processing based on legitimate interests, and data portability. You may complain to your local supervisory authority or Datatilsynet, the Danish Data Protection Agency. We do not make decisions with legal or similarly significant effects about you based solely on automated processing.
7. Children and policy changes
Xpostr is intended for people aged 18 or over. Contact us if you believe a child has provided personal data through the service, so we can investigate and remove it where appropriate.
We publish updates and their date here as the service changes, and provide notice of material changes where required. New uses of connected-account information requiring additional permission will require that permission before use.
8. Contact
Rewrite · CVR 43102990 · DenmarkPrivacy and support: contact@xpostr.dk