Privacy policy
MCP Socials ("we") is a self-hosted publishing tool operated by studioarjuna, Kanpur, India. It connects to Facebook, Instagram, YouTube and X so that you can publish your own content to accounts you own or manage. This policy explains what data the tool accesses and how it is handled. Questions and data requests: imageapiai@gmail.com.
Data the app accesses
- Facebook and Instagram (Meta): your basic profile, the list of Facebook Pages you manage, a Page access token, and the ID and username of the Instagram professional account linked to your Page. Permissions used:
pages_show_list,pages_read_engagement,pages_manage_posts,business_management,instagram_basic,instagram_content_publish. - YouTube (Google): your channel's name and ID, and permission to upload videos and set thumbnails. Scopes used:
youtube.upload,youtube.readonly. - X: your username and permission to create posts and upload media.
- Your content: the text, images and videos you choose to publish.
How the data is used
The data is used only to publish the posts you ask the app to publish and to show you which account each post will go to. We do not use it for advertising, profiling, analytics or training models, and we do not sell or share it.
Where the data is stored
MCP Socials runs on your own computer. Access tokens are stored there, in a file readable only by your user account. They are never sent to us; we operate no server that receives them. Content is sent directly from your computer to the platform you publish to. If you configure your own storage bucket for media, files are uploaded there briefly so the platform can fetch them, and are deleted after publishing.
Google API Services
MCP Socials' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. MCP Socials uses YouTube API Services; by using it you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
Retention, revoking access and deletion
Tokens are kept until you remove them. You can revoke the app's access at any time:
- Google: myaccount.google.com/permissions, or Google security settings
- Facebook and Instagram: Facebook Settings → Business integrations
- X: Settings → Security and account access → Apps and sessions
To delete all data stored by the app, delete the ~/.config/social-publish-mcp folder on your computer. To ask us to confirm deletion, email imageapiai@gmail.com; we reply within 30 days. Posts you published stay on each platform until you delete them there.
Children
MCP Socials is not directed at children under 13 and does not knowingly collect their data.
Changes
We will post any change to this policy on this page and update the date above.