Privacy policy

1. Who we are

Lemonpost ("we", "our", or "us") provides a social media scheduling and publishing platform (the "Service") that lets you create, schedule, and publish content across your connected social accounts from one place. We are based in Norway and act as the data controller for the personal data described in this policy. By using Lemonpost, you agree to the practices set out here.

2. Information we collect

2.1 Account and contact information

• Name and email address
• Billing details and payment information
• Business information such as company name and role, if you provide it

2.2 Social media platform data

When you connect a social account, we collect and store the access tokens and authentication credentials needed to publish and manage content on your behalf. These credentials are encrypted, both in transit and at rest, using industry-standard measures, and access to them is tightly restricted. We also process:

• Profile information from your connected accounts
• Content you upload, schedule, or publish through the Service
• Analytics, engagement, and audience metrics returned by the platforms

2.3 Usage data

• IP address and device information
• Browser type and settings
• Usage patterns and product preferences
• Log data and analytics

3. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Publish and manage the content you schedule
• Process your payments and manage your subscription
• Analyse performance and give you insights
• Communicate with you about updates, security, and support
• Keep the Service secure and prevent fraud and abuse
• Comply with the platform policies of the networks you connect

Our legal bases for processing are the performance of our contract with you, your consent (where required, for example for optional cookies), our legitimate interests in running and improving the Service, and compliance with legal obligations.

4. Platform-specific data usage

Lemonpost connects to the social networks you choose, including Instagram, TikTok, Facebook, LinkedIn, X, Threads, Bluesky, Pinterest, and YouTube. When you use the Service with any of these networks, your data is also handled under that network's own terms and privacy policy.

4.1 Google (YouTube) data

Lemonpost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We only use access to YouTube data to provide our publishing and management features, such as scheduling and publishing content and reporting on its performance.
• We do not use Google user data for advertising.
• We do not allow humans to read this data unless we have your explicit consent for specific content, it is necessary for security or to investigate abuse, it is required by law, or the data has been aggregated and anonymised for internal operations.
• We do not sell Google user data or transfer it for unrelated purposes.

Because we use YouTube API Services, your use of those features is also subject to the YouTube Terms of Service and the Google Privacy Policy.

4.2 Meta (Facebook and Instagram) data

We process Meta platform data in accordance with Meta's Platform Terms and Developer Policies.

4.3 TikTok data

We handle TikTok data in accordance with TikTok's Platform Terms of Service and its data and privacy requirements.

5. How we share your information

We may share your information with:

• Service providers and sub-processors who help us run the platform. Our current list is on our sub-processors page.
• The social networks you connect, as needed to publish and manage your content
• Authorities, where we are required to by law
• Other parties where you have given us your explicit consent

We do not sell your personal data.

6. Data security

We take the security of your data seriously and apply industry-standard safeguards, including:

• Encryption of sensitive data, including access tokens and credentials, both in transit and at rest
• Strict access controls, so only authorised personnel can reach sensitive data
• Regular review of our security practices
• Monitoring for suspicious activity to detect and prevent unauthorised access

No system can be guaranteed to be completely secure, but we work continuously to protect your data and to respond quickly if an issue arises.

7. Your rights

Under the GDPR and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Withdraw consent and disconnect any connected platform at any time
• Export your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at [email protected].

8. Data retention

We keep your information for as long as your account is active and for as long as we need it to provide the Service and meet our legal obligations. When it is no longer needed, we securely delete or anonymise it.

9. International data transfers

Some of our sub-processors are located outside the European Economic Area. Where we transfer data internationally, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.

10. Children's privacy

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will let you know through the Service or by email, and we will update the "last updated" date above.

12. Contact us

If you have any questions about this policy or how we handle your data, reach us at:

• Email: [email protected]
• Address: Møllergata 6, 0179 Oslo, Norway