Legal
Privacy Policy
Last updated: October 9, 2026
Greenbits ("we", "us") provides an AI social media management platform. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.
1. Information we collect
Account information
When you sign up we collect your name, email address, and a password (stored only as a salted hash), along with your workspace name, team members you invite, and your plan and billing status.
Connected social accounts
When you connect a channel (Instagram, Facebook, Threads, X, LinkedIn, TikTok, or YouTube) through that platform's OAuth flow, we receive the account or Page identifier, display name, profile image, and the access and refresh tokens needed to act on your behalf. Tokens are encrypted at rest with AES-256-GCM. We never see or store your passwords for those platforms.
Content you create
Posts, captions, hashtags, schedules, images and videos you upload or generate, your Brand Profile (business description, tone, products, FAQs, policies), autopilot plans, and automation rules are stored so we can publish and manage them for you.
Messages, comments, and contact information from connected platforms
If you enable the inbox or automations, the platforms send us (via webhooks and API calls) the direct messages, comments, and mentions that people send to your connected accounts. This can include the sender's platform user ID, display name or username, profile picture, and the content of their message. We store these so you can read, tag, and reply to them, and so AI-drafted replies have conversation context. We use this data only to provide these features to you.
Usage and technical information
We record feature usage, AI credit consumption, job and publishing status, error logs, IP address, and browser type for security, billing, and to operate and improve the service.
2. How we use information
- To provide the service: schedule and publish posts, sync analytics, receive and reply to messages and comments, run autopilot plans, and generate AI text, images, and video.
- To authenticate you, secure your account, and prevent abuse and fraud.
- To meter credits, manage plans, and process billing.
- To send service emails such as invitations, password resets, and important notices.
- To diagnose problems, maintain, and improve the service.
We do not sell personal information, and we do not use data obtained from social platforms for advertising or to build profiles of individuals unrelated to providing the service to you. We do not use your content or your connected accounts' data to train general-purpose AI models.
3. Service providers and third parties
We share information only as needed to operate the service:
- Social platforms (Meta: Facebook, Instagram, Threads; X; LinkedIn; TikTok; Google/YouTube). Content you publish and actions you take are sent to the platform you chose, under that platform's own privacy policy.
- OpenRouter, which routes requests to large language models. Prompts for AI text generation and reply drafting, which may include your Brand Profile and the relevant message content, are sent to it and to the underlying model provider.
- fal.ai, for AI image and video generation. Prompts and any reference images you provide are sent for rendering.
- Amazon Web Services (S3), where uploaded and generated media is stored.
- Hosting, database, email, and payment providers that process data on our behalf under contractual confidentiality and security obligations.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or sale of the business.
4. Google API Services and YouTube data
Greenbits's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect a YouTube channel we access only the data needed to upload and manage videos you choose to publish, and to read your channel details and comments if you enable the inbox. Specifically:
- We use YouTube data only to provide and improve the user-facing features you request within Greenbits.
- We do not transfer YouTube data to others except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use YouTube data for serving advertisements, and we do not sell it.
- Humans do not read YouTube data unless you give consent for specific items, it is necessary for security or abuse investigation, or it is required by law.
You can revoke our access at any time at myaccount.google.com/permissions. Use of the YouTube API is also subject to the YouTube Terms of Service and the Google Privacy Policy.
5. Meta, TikTok, X, and LinkedIn data
Data received from Meta, TikTok, X, and LinkedIn APIs is used only to provide the features you request in Greenbits and is handled in line with each platform's developer policies. We delete or de-identify platform data when you disconnect the account or ask us to, as described in our data deletion instructions.
6. Revoking access to your accounts
You can stop our access to a social account at any time by either:
- disconnecting the channel in Greenbits under Channels, which deletes the stored tokens; or
- removing Greenbits from the connected apps or permissions settings of that platform (for example Facebook and Instagram "Business Integrations", X "Connected apps", LinkedIn "Permitted services", TikTok "Manage app permissions", or your Google account's third-party access page).
7. Retention
We keep account and workspace data while your account is active. When you disconnect a channel, its tokens are deleted immediately, and the content and conversation data associated with it are removed within 30 days unless you ask us to keep it. When you ask us to delete your account, we delete your personal data and workspace content within 30 days. Limited copies may remain in encrypted backups for up to 90 additional days, and we may retain information we are legally required to keep, such as billing records.
8. Security
Access tokens are encrypted with AES-256-GCM, data is transmitted over TLS, passwords are hashed, and access to production systems is restricted. No system is perfectly secure, but we work to protect your information and will notify you of breaches as required by law.
9. Cookies
We use a single session cookie to keep you signed in and protect against cross-site request forgery. It is strictly necessary for the service. We do not use advertising or third-party tracking cookies.
10. Your rights
Depending on where you live (including under the GDPR, UK GDPR, and CCPA/CPRA) you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email us at privacy@greenbits.app. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
People whose messages or comments reach a connected account can make the same requests; contact us and we will help, or contact the account owner directly.
11. Children
The service is not directed to children under 16, and we do not knowingly collect their information. If you believe a child has provided us data, contact us and we will delete it.
12. International transfers
We and our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.
13. Changes to this policy
We may update this policy. We will change the "Last updated" date above and, for material changes, notify you by email or in the app.
14. Contact
Questions or requests: privacy@greenbits.app.