Skip to content
VScheduler

Privacy Policy

Last updated: October 26, 2026.

1. Who we are

VScheduler ("VScheduler," "we," "us") provides a social media scheduling and publishing service for content creators, VTubers, and the teams and agencies that manage them. This policy explains what information we collect, how we use it, and the choices you have.

2. Information we collect

  • Account information: name, email address, profile photo (if your sign-in provider shares one), time zone, and authentication data when you sign up or log in.
  • Two-factor sign-in: if you turn on two-factor sign-in (it is required to post to client profiles in an Agency workspace), we store your authenticator app's secret key, encrypted, one-way hashes of your recovery codes, and when each signed-in session last passed the check. We also count recent code attempts so nobody can guess their way in.
  • Connected social accounts: when you connect an X, Bluesky, Instagram, TikTok, YouTube, or Threads account, we store an access token (and refresh token, where applicable) issued by that platform, encrypted at rest, so we can publish content on your behalf at the times you schedule. We do not store your social account passwords.
  • Content you upload: images, videos, captions, and scheduling details you provide for posts.
  • Billing information: if you subscribe to a paid tier, your name, billing address, and payment details are collected and processed directly by Link, Stripe's merchant of record service, which needs your address to work out sales tax or VAT. We do not store your card number.
  • Usage data: which features you use and how many posts you schedule per platform per month, used to enforce plan limits.
  • Security and abuse-prevention data: your IP address when signing in, used only to rate-limit suspicious activity (such as an unusual burst of account-creation attempts), and a bot-verification signal from Cloudflare Turnstile on our sign-in and contact forms. This data is kept only as long as needed for that check (typically under a day) and is never used for tracking, advertising, or building a profile of your browsing activity.
  • Post performance data: on Pro Lite and higher tiers, after a post you scheduled goes live on X, Bluesky, or YouTube, we read back view, like, comment, and share counts from that platform's own API on a fixed schedule for 30 days, to show you analytics. We only fetch performance data for posts published through VScheduler, never your general account activity on that platform.
  • Account administration records: if we suspend an account, give it a plan, turn off its two-factor sign-in, or delete it, we record the action, when it happened, the account's email address, and any reason we noted.

3. Cookies and similar technologies

  • Sign-in cookies: when you sign in, we set a first-party session cookie (HttpOnly, and Secure in production) to keep you signed in between visits, plus short-lived cookies that protect the sign-in step itself. They are strictly necessary for the service to function and are never used for tracking or advertising.
  • Theme cookies: two first-party cookies remember your light/dark mode and accent color for up to a year, so every page loads in the theme you picked. They hold only those two choices.
  • Local storage: your browser's local storage (not a cookie, but a similar on-device technology) keeps, per creator profile, the YouTube upload settings (category, audio language, title/description language) you used last, so the composer does not ask again on every post. This stays on your device; it is never transmitted to our servers or to any third party.
  • We do not use third-party advertising cookies, tracking pixels, or cross-site analytics of any kind.

4. YouTube API Services

VScheduler uses the YouTube API Services when you connect a YouTube channel. We access and store your channel ID and name, and use the API only for actions you initiate:

  • uploading videos on your behalf;
  • editing a video's details: title, description, tags, category, language, visibility, scheduled publish time, made-for-kids setting, and altered or synthetic content disclosure;
  • deleting a video when you cancel its post before it goes public;
  • listing your channel's videos so you can edit them;
  • showing which of your playlists a video is in, and adding it to or removing it from them;
  • uploading captions;
  • if you turn on go-live announcements, checking whether your channel is live, and keeping the ID of the last live stream we announced so it is never announced twice.

By connecting a YouTube account you also agree to be bound by the YouTube Terms of Service. Our use of information received from YouTube APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use YouTube data only to provide and improve the scheduling features described in this policy, never to serve advertising, and never to let anyone but you and the team members you invite read it.

You can review Google's own privacy practices at policies.google.com/privacy, and revoke VScheduler's access to your YouTube account at any time from Google Account permissions or by disconnecting it in VScheduler.

5. How we use your information

  • To publish your scheduled content to the platforms you have connected, at the times you specify.
  • To operate, maintain, and improve the service.
  • To enforce the usage limits of your subscription tier.
  • To detect and prevent spam, abuse, and fraudulent account creation, and to suspend accounts that break our Terms of Service.
  • To keep accounts secure, including two-factor sign-in.
  • To communicate with you about your account or the service.
  • To comply with legal obligations and each connected platform's developer policies (X, Meta/Instagram, TikTok, YouTube/Google, Bluesky).

6. How we share your information

We do not sell your personal information. We share it only with:

  • Other members of your workspace, according to their role: content you schedule is visible to your team, and if a post you submit needs approval before publishing, an admin or owner is emailed about it and can see what you submitted, including if they reject it with a note.
  • The agency you work with, if you are its client: when you connect your accounts to a creator profile an Agency workspace manages for you, that workspace's team can schedule posts to those accounts and see how they perform.
  • The social platforms you explicitly connect, solely to publish the content you schedule.
  • Anyone who visits Hi-Scores, if you join it: the public leaderboard shows the nickname you pick, your language, badges, and weekly streak, and how many videos you published through VScheduler on that platform this month. Your nickname links to your channel or account unless you choose "Don't Link Me".
  • Service providers who help us run VScheduler: Cloudflare (media storage, and bot/spam prevention via Cloudflare Turnstile), Stripe and its Link service (payment processing, and the merchant of record for subscriptions), Resend (delivering sign-in links and account emails), Sentry (error and performance monitoring, which receives technical details such as the page, browser, and error message when something goes wrong), and our hosting provider, each bound by their own data-handling agreements.
  • Legal authorities, if required by law.

7. Data retention and security

  • OAuth tokens are encrypted before storage and are only decrypted in memory at the moment a publishing call needs to be made on your behalf. Two-factor secret keys are encrypted the same way, and recovery codes are stored only as one-way hashes.
  • You can disconnect a social account at any time; the associated token is deleted immediately.
  • Uploaded media (images and video) is automatically deleted from storage 48 hours after every post using it has been published, and sooner if you delete the post or upload yourself before then. We cap total storage per creator profile at 500MB to keep this workable.
  • If an Agency workspace removes a client's creator profile, that profile's connected accounts are disconnected and their tokens deleted right away. The rest of its data (posts, uploads, and boards) is kept for 60 days in case the client is invited back, then permanently deleted.
  • You can request deletion of your account and associated data by contacting us at contact@vtcreationsllc.com. Deleting an account removes the workspaces it owns along with their creator profiles, posts, uploads, and connected accounts, and cancels its subscription. Account administration records (described above) are kept after the account is deleted, as a record of what was done.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us at contact@vtcreationsllc.com to exercise these rights.

9. Children's privacy

VScheduler is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do.

11. Contact us

Questions about this policy: contact@vtcreationsllc.com

Privacy Policy | VScheduler