Privacy Policy

To provide our services, we collect the following information as necessary:

• Account information: your name, email address, and hashed password provided at sign-up or sign-in; when you use third-party login (e.g., Google), the basic profile that provider returns to us (such as name, email, and avatar).
• Social-platform authorization: when you connect a social account, the OAuth access and refresh tokens issued by each platform with your consent, along with public profile data such as your platform username and avatar. Tokens are used to publish on your behalf and are stored encrypted.
• Content data: the text, images, and videos you create, draft, schedule, or publish through the Platform, along with publishing records and analytics.
• Usage and device information: access logs, IP address, browser and device type, timestamps, language and theme preferences, and information generated by cookies and similar technologies.
• Contact and feedback: information you voluntarily provide through support, appeals, or surveys.

We do not collect personal information unrelated to the service, nor do we require you to provide unnecessary information.

We use your information only to the extent necessary for the following purposes:

• To create and manage your account and to authenticate and sign you in;
• To publish, schedule, or withdraw content on the social platforms you have authorized, on your behalf;
• To provide core features such as content management, drafts, scheduling, and analytics;
• To keep the service secure and to prevent, detect, and handle fraud, abuse, and violations;
• With your consent, to send you service notices, verification emails, or product updates;
• To improve the product and perform necessary statistical analysis (generally in de-identified form);
• To comply with our legal obligations.

If we need to use your information for a purpose not stated in this policy, we will seek your separate consent.

Location and retention: your information is stored on the cloud services we use (our database is Cloud SQL for PostgreSQL). Unless required by law or necessary to fulfill the purposes of this policy, we retain your information only for the duration of your use of the service and for a reasonable period thereafter; beyond that period we delete or anonymize it.

Security measures: we apply industry-standard safeguards, including but not limited to encrypted storage of social-platform tokens, transport-layer encryption (HTTPS/TLS), least-privilege access controls, and keeping secrets only in environment variables isolated from source code.

Despite our reasonable measures, no method of transmission over the Internet is completely secure. Please keep your account and password safe.

We do not sell your personal information. We share it only in the following cases:

• With your authorization: when you choose to publish content to a social platform, that content is sent to the platform per your instruction and becomes subject to that platform’s privacy policy;
• Service providers: third parties necessary to operate the service (such as cloud computing, database, email delivery, and error monitoring) process data only to provide services to us and under contractual confidentiality obligations;
• Legal requirements: to comply with laws, regulations, or binding requests from judicial or administrative authorities;
• Corporate changes: in a merger, acquisition, or asset transfer, we will require the recipient to continue to honor this policy, or we will seek your consent again.

The Platform integrates via OAuth with third-party services including X, YouTube, Instagram, TikTok, and Google login. Your authorization of these platforms and the handling of your content on them are also governed by each platform’s own terms and privacy policy. You may revoke authorization at any time in the Platform or in the corresponding platform’s settings.

We use cookies and local storage to maintain your login session, remember your language and theme preferences, and keep the service secure. You can manage or clear cookies through your browser settings, but disabling some cookies may affect functions such as login.

To the extent permitted by applicable law (such as the GDPR, the CCPA, and relevant laws in China), you have the following rights regarding your personal information:

• Access and rectification: to view and correct your account information;
• Deletion: to request deletion of your personal information or closure of your account where conditions are met;
• Withdrawal of consent: to withdraw social-platform authorizations or marketing subscriptions at any time;
• Copy and portability: to obtain a copy of the information you provided;
• Restriction or objection: to restrict or object to certain processing where the law allows.

You can act directly in your account settings or contact us at support@loxily.com to exercise these rights. We will respond within a reasonable time.

The Platform is intended primarily for adult users. We do not knowingly collect personal information from minors below the legal age (typically 13/16 depending on local law). If you are a guardian and believe a minor has provided us information without consent, please contact us and we will delete it promptly.

We may update this policy from time to time. We will post the new version and its effective date on this page; for material changes we will notify you by prominent means. Your continued use of the Platform after the changes take effect constitutes acceptance of the revised policy.

If you have any questions, comments, or complaints about this policy or our handling of personal information, please contact us:

• Contact email: support@loxily.com