Privacy Policy
Last updated: October 4, 2026
This Privacy Policy explains how ModeRelay ("ModeRelay", "we", "us") collects, uses, shares and protects information when you use the website at moderelay.com and the ModeRelay social media scheduling service (together, the "Service"). By using the Service you agree to this policy. If you do not agree, please do not use the Service.
1. Summary
- We collect only what we need to let you write, schedule and publish posts to the social accounts you connect.
- We publish to a social network only when you schedule or publish a post. We never post on your behalf without your action.
- We do not sell your personal information and we do not use it for advertising.
- We do not read your direct messages, feeds or followers' data.
- Access tokens for connected accounts are encrypted at rest. You can disconnect an account at any time, which deletes its tokens.
2. Information we collect
2.1 Information you give us
- Account information: your email address and, if you choose one, a password (stored as a salted hash by our authentication provider) and a display name.
- Content: the text of the posts and drafts you write, captions, titles, hashtags, scheduled times, per-network settings, and the images and videos you upload.
- Settings: your time zone and preferences.
- Content sources: any RSS feeds or web addresses you add as inspiration sources.
- AI assistant input: notes, prompts and conversations you send to the writing assistant, and any AI credential you choose to connect.
- Support messages: anything you send us by email.
2.2 Information from social networks you connect
When you connect a social account, you sign in on that network's own page and grant ModeRelay specific permissions. We never see your password for those networks. We receive and store:
| Network | Permissions requested | Data we receive and store |
|---|---|---|
| TikTok | user.info.basic, user.info.profile, video.publish | Open ID, union ID, display name, username and avatar URL; access and refresh tokens; creator settings returned before posting (available privacy levels, whether comments, duets and stitches are allowed, maximum video length); the publish ID and status of videos you post. |
| X | tweet.read, tweet.write, users.read, media.write, offline.access | User ID, name, username and profile image URL; access and refresh tokens; IDs of posts you publish. |
| openid, profile, email, w_member_social | Member ID, name, email and profile picture URL; access token; IDs of posts you publish. | |
| instagram_business_basic, instagram_business_content_publish | Account ID, username, name and profile picture URL; access token; IDs and permalinks of posts you publish. | |
| YouTube | youtube.upload, youtube.readonly | Channel ID, title and thumbnail URL; access and refresh tokens; IDs of videos you upload. |
We do not request access to, and do not collect, your direct messages, your followers or following lists, other people's content, your watch history, or analytics beyond the status of the posts you publish through ModeRelay.
2.3 Information collected automatically
- Cookies: we use strictly necessary cookies to keep you signed in and to protect the sign-in and account-connection flows (for example, an OAuth state cookie). We do not use advertising or cross-site tracking cookies.
- Logs: our hosting provider records standard request logs (IP address, browser user agent, requested URL, time and status code) for security and troubleshooting.
3. How we use information
- To provide the Service: create your account, save drafts, show your calendar, and publish your posts to the networks you choose at the time you choose.
- To show which account a post will go to (for example, your TikTok display name and avatar on the compose screen) and to show you the posting options each network allows.
- To report publishing results and errors back to you.
- To run the optional AI writing assistant when you ask it to draft or edit text.
- To keep the Service secure, prevent abuse and fix problems.
- To respond to your support requests and send essential service messages such as sign-in codes.
- To comply with legal obligations.
We use data received from TikTok and other networks only to provide the features you request. We do not use it to build advertising profiles, we do not sell it, and we do not use it to train AI models.
4. How we share information
We share information only in these cases:
- With the networks you publish to: when you publish, we send that post's content and media, along with the settings you chose (such as TikTok privacy level, comment, duet and stitch settings and commercial content disclosure), to the network you selected.
- With service providers that process data on our behalf under contract:
- Vercel Inc. — application hosting and media file storage
- Neon Inc. — database and user authentication (including sign-in emails)
- Anthropic PBC — AI writing assistant, only for text you send to the assistant
- For legal reasons: if required by law, or to protect the rights, safety and property of our users, the public or ModeRelay.
- Business transfer: if ModeRelay is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
5. Data retention
- Account information and content are kept while your account is active.
- Access tokens for a connected account are deleted immediately when you disconnect that account in ModeRelay, or when you revoke ModeRelay's access in the network's own settings and the token stops working.
- Deleting a post or draft in ModeRelay deletes it from our database. It does not delete a copy already published on a social network; delete that on the network itself.
- When you ask us to delete your account, we delete your account, connected-account tokens, posts, media and assistant conversations within 30 days, except where we must keep limited records to comply with law.
- Server logs are kept for a limited period by our hosting provider and then deleted.
6. Your rights and choices
- Disconnect a network: go to Accounts and click Disconnect. You can also revoke access from the network: in TikTok, go to Settings and privacy → Security → Apps and services permissions (wording may vary by app version).
- Access, correct or export: you can view and edit your posts and settings in the app, or email us for a copy of your data.
- Delete your account: email hello@moderelay.com from your account email and we will delete your account and data as described above.
- Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have additional rights, including to object to or restrict processing and to lodge a complaint with your data protection authority. We will honor these requests as required by law and will not discriminate against you for exercising them.
Where the GDPR applies, we process your data to perform our contract with you (providing the Service), for our legitimate interests (security and improving the Service), and with your consent where required (for example, when you connect a social account).
7. Security
We use HTTPS for all traffic, encrypt social network access tokens at rest with AES-256-GCM, restrict production access, and request only the permissions needed for publishing. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information we will notify you as required by law.
8. International transfers
Our service providers store and process data in the United States. If you use the Service from outside the United States, your information will be transferred to and processed there, with safeguards required by applicable law.
9. Children
The Service is not directed to children. You must be at least 18 years old, or the age of majority where you live, to use ModeRelay. We do not knowingly collect information from children under 13 (or under 16 in the EEA and UK). If you believe a child has given us personal information, contact us and we will delete it.
10. Third-party services
Your use of TikTok, X, LinkedIn, Instagram and YouTube is also governed by their own terms and privacy policies, including the TikTok Privacy Policy. We are not responsible for how those services handle your data.
11. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above, and for material changes we will notify you by email or in the app before they take effect.
12. Contact us
Questions or requests about this policy or your data: hello@moderelay.com. See also our Terms of Service.