Privacy Policy
Last updated: October 15, 2026 · Effective immediately
1. Overview
FlockPush ("we", "us", or "our"), operated by BattaTech, provides a hosted multi-network social media broadcasting service. This Privacy Policy details how we collect, process, protect, and delete information when you access flockpush.com, utilize our developer APIs, or connect external social media accounts.
2. Google API Services User Data Policy (Limited Use Disclosure)
Google Limited Use Notice:
FlockPush's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
FlockPush utilizes YouTube API Services to schedule and publish video content to connected YouTube channels. In accordance with the YouTube Terms of Service and Google API Services User Data Policy:
- We only request OAuth scopes strictly necessary to upload scheduled videos and retrieve publishing metadata. We do not use Google or YouTube user data to train generalized AI/ML models or sell information to third-party data brokers.
- Your use of YouTube integrations is subject to the YouTube Terms of Service and the Google Privacy Policy.
- You can revoke FlockPush's access to your Google and YouTube data at any time via the Google Security Settings Page.
3. Meta Platform Data Handling (Facebook, Instagram, Threads)
In full accordance with the Meta Platform Terms and Developer Policies:
- Token Security: All user access tokens for Facebook Pages, Instagram Professional Accounts, and Threads are encrypted at rest using AES-256-GCM envelope encryption via Google Cloud KMS. Unencrypted tokens are never stored, logged, or exposed.
- Data Minimization: We only read the profile ID, name, and publish capabilities needed to deliver your authorized posts.
- Automated Deletion Callback: We operate a cryptographically signed data deletion endpoint adhering to Meta guidelines. When an app is uninstalled or deletion is requested, associated tokens and channel records are immediately disassociated.
4. Data Retention & Automatic Purge Schedules
We adhere to strict data lifecycle limits:
| Data Category | Retention Window | Purge Mechanism |
|---|---|---|
| Posts & Delivery History | 13 Months | Monthly automated archiver drops raw payloads |
| Media Assets (Images/Videos) | 90 Days | R2 lifecycle expiration after final delivery |
| Soft-Deleted Organizations | 30 Days | Hard purge job cascades deletion of all tenant data |
| OAuth States & Idempotency | 24 Hours | Daily sweeper job purges expired states |
5. Your Rights (GDPR & CCPA)
Regardless of your physical location, we provide all users with the following self-serve and request-based rights:
- Right to Export: Export all organization posts, delivery records, and channel details via
POST /v1/organizations/exportin JSON or CSV. - Right to Erasure: Soft-delete your organization immediately with a 30-day scheduled purge via
DELETE /v1/organizations/current. - Right to Rectification: Edit drafts and channel mappings at any time in the Composer Studio.
Questions regarding our policies?
Contact our privacy and compliance desk at privacy@flockpush.com