Ghulam Dastageer ("we") runs TagFinch, a tool to schedule, publish and analyze social media posts. This policy explains what we collect, why, and the choices you have.
What we collect
- Account details: your name, email address and a hashed password.
- Connected social accounts: when you connect Facebook, Instagram, YouTube, TikTok, X, LinkedIn, Pinterest or Threads, we receive access tokens and basic profile information (account ID, name, handle, profile picture). Tokens are encrypted at rest.
- Content you create: captions, hashtags, titles, images and videos you upload, schedules and comments.
- Performance data: follower counts and post metrics (views, likes, comments, shares, saves) that the networks provide for your accounts.
- Billing: payments are processed by our payment provider (Paddle or Stripe). We store your customer ID and plan, never your card number.
- Usage and device data: IP address and browser or app information in server logs, used for security and troubleshooting.
How we use it
- To publish the posts you schedule, to the accounts you choose, at the times you choose.
- To show you analytics and reports about your accounts.
- To suggest hashtags, titles and captions. The text you enter may be sent to our AI provider (Anthropic) to generate suggestions; it is not used to train their models under our agreement.
- To send account emails such as failed-post alerts, invites and password resets.
- To bill your subscription and prevent fraud and abuse.
We do not sell your personal data and we do not use data from connected social accounts for advertising.
Google and YouTube data
TagFinch uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your Google security settings.
Who we share it with
- The social networks you connect, to publish your content and read your metrics.
- Service providers that run TagFinch for us: hosting, database, file storage, email delivery (Resend), payments (Paddle or Stripe) and AI suggestions (Anthropic).
- Your team: people you invite to your workspace, and clients you share a review link with, can see that workspace's content.
- Authorities, when the law requires it.
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your workspaces, posts, connected account tokens and metrics within 30 days, except records we must keep by law (such as invoices).
Your choices and rights
- Disconnect any social account at any time from Connected profiles, which deletes its stored tokens.
- Delete your account from Account settings, or see Data deletion.
- Ask for a copy of your data, or for corrections, by emailing ghulamdastageer43@gmail.com.
- If you are in the EU, UK or California you have additional rights to access, correct, delete and object to processing. Contact us to use them.
Security
Connections are encrypted with HTTPS, passwords are hashed, and social access tokens are encrypted with AES-256. No system is perfectly secure; tell us right away if you think your account was compromised.
Children
TagFinch is not for people under 16, and we do not knowingly collect their data.
Changes and contact
We will post changes on this page and email you about significant ones. Questions: ghulamdastageer43@gmail.com.