Privacy Policy

Last updated: Spet 3, 2026

This Privacy Policy explains how Spred (“Spred,” “we,” “us”) collects, uses, discloses, and protects information when you use our social media automation and cross-posting service (the “Service”), including features that connect to third-party platforms such as YouTube, Facebook, Instagram, TikTok, and Snapchat (each, a “Connected Platform”).

1. Information We Collect

1.1 Information You Provide Directly

• Account information: name, email address, and password when you register.
• Billing details: billing name, address, and payment method, collected and processed through our payment processor (Spred does not store your full card number).
• Profile information: any profile photo, display name, or bio you choose to add.
• Content: videos, images, captions, thumbnails, titles, descriptions, and other content you create, upload, or import to configure a workflow.
• Support and correspondence: messages, attachments, and information you send us when you contact support or respond to a survey.

1.2 Information Collected Automatically

• Device data: device type, operating system, browser type and version, and unique device identifiers.
• Log data: IP address, access times, pages viewed, and the referring page or app.
• Usage data: features used, workflows created or run, publish success/failure events, and error logs generated as you use Spred.
• Approximate location: derived from your IP address, used for security and regional service delivery (we do not collect precise GPS location).
• Cookies and similar technologies: see Section 9 for details.

1.3 Information From Connected Platforms

When you connect an account on a Connected Platform, Spred requests specific permissions (scopes) from that platform and, once you grant them, accesses and stores only the data needed to run the workflows you configure:

• YouTube: channel ID and name, video metadata (titles, descriptions, tags, and privacy status), upload/publish status, and channel or video statistics such as views, likes, and comment counts.
• Facebook and Instagram (Meta Platforms): Page or account ID and name, posts and media published through Spred, and basic engagement metrics such as likes, comments, and shares.
• TikTok: account/profile ID and username, video metadata, and post status needed to publish or schedule content.
• Snapchat: account identifiers and content metadata needed to publish through Snap Kit-enabled workflows.

We do not access data on a Connected Platform beyond the scopes you explicitly authorize, and we do not access private messages, contacts, or content unrelated to the workflows you configure.

1.4 Information From Other Sources

• Payment processors: confirmation of successful or failed payments and limited billing metadata (we do not receive your full payment card number).
• Analytics providers: aggregated or device-level usage statistics used to understand how Spred is used (see Section 9).

2. How We Use Your Information

The table below sets out, category by category, what we collect and the specific purpose it serves.

Category	What We Collect	Why We Use It
Account & billing information	Name, email, password, billing address, payment confirmation	Create and secure your account, authenticate logins, process payments and invoices, send billing notices
Content you upload	Videos, images, captions, titles, descriptions	Run the publishing/cross-posting workflows you configure, exactly as instructed
Connected Platform data	Channel/account IDs, video/post metadata, engagement statistics (per Section 1.3)	Execute cross-posting workflows, display analytics dashboards inside Spred, detect and alert you to failed posts
Device, log, and usage data	IP address, device/browser type, pages viewed, feature usage, error logs	Operate and secure the Service, diagnose and fix bugs, detect fraud or abuse, understand feature usage to guide improvements
Support communications	Messages, attachments sent to support	Respond to your questions, troubleshoot issues, improve our help documentation
Cookies and analytics identifiers	Cookie IDs, analytics events (see Section 9)	Keep you signed in, remember preferences, measure and improve product usage

 

We do not use Connected Platform Data to build advertising profiles, we do not sell it, and we do not use it for any purpose beyond operating the Service and the workflows you configure.

3. Legal Bases for Processing

Where applicable law requires a legal basis for processing (for example, under the Nigeria Data Protection Act 2023 or the EU/UK GDPR for users in those regions), we rely on the following:

• Contract: processing needed to provide the Service you signed up for (e.g., running your workflows, billing your subscription).
• Consent: processing that depends on your affirmative action, such as connecting a Connected Platform account or accepting non-essential cookies.
• Legitimate interests: processing needed to secure, maintain, and improve Spred, such as fraud prevention and diagnostic logging, balanced against your rights.
• Legal obligation: processing needed to comply with applicable law, such as retaining billing records.

4. Our Use of Connected Platform APIs

Spred uses each Connected Platform’s official APIs to let you publish or cross-post content between platforms through workflows you configure. Your use of these integrations is also governed by each platform’s own terms and policies, which are incorporated by reference:

YouTube: by connecting a YouTube account, you agree to be bound by the YouTube Terms of Service.

Facebook and Instagram: use of these integrations is governed by the Meta Platform Terms.

TikTok: use of this integration is governed by the TikTok Developer Terms of Service.

Snapchat: use of this integration is governed by the Snap Developer Terms.

Our access to and use of information received from Google APIs specifically adheres to the Google API Services User Data Policy, including the Limited Use requirements:

https://developers.google.com/terms/api-services-user-data-policy

5. How We Share Your Information

We do not sell your personal data. We may share information as follows:

• Internally: with Spred personnel who need the information to operate, support, or secure the Service.
• Service providers: trusted third parties who perform hosting, analytics, payment processing, and customer support on our behalf, under contractual confidentiality obligations, and only with the data needed for their function.
• Destination platforms you connect: when you set up a workflow (for example, YouTube to TikTok, or Instagram to Facebook), the content and metadata needed to complete that publish are shared with the destination platform(s) you selected.
• Business transfers: if Spred is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy.
• Legal and safety reasons: where required by law, regulation, legal process, or to protect the rights, property, or safety of Spred, our users, or others.

We do not share Connected Platform Data with any third party for purposes other than those disclosed in this policy, except as required by a platform’s own API data policy or with your direction.

6. Data Retention

We retain personal information only as long as necessary to provide the Service or to meet legal obligations. In practice:

• Account and billing information is retained for as long as your account is active, and for a limited period afterward to meet accounting and legal recordkeeping obligations.
• YouTube non-authorized data (data that does not require you to be signed in, such as public statistics) is not displayed or stored for more than 30 days from retrieval, consistent with YouTube API Services policies.
• Authorized data from any Connected Platform (data tied to your connected account) is retained only for as long as your account remains connected and is deleted upon disconnection or account deletion, whichever is earlier.
• Support communications are retained for as long as needed to resolve your request and for a reasonable period afterward for quality and training purposes.
• Log and usage data is retained for 90 days for security monitoring and troubleshooting, after which it is deleted or aggregated so it no longer identifies you.

You may request deletion of your data at any time as described in Section 7.

7. Your Rights and Choices

Depending on your location, you may have the right to access, correct, delete, restrict, or request portability of your personal data, and to object to certain processing. To exercise these rights, contact us at info@spredapp.ai; we will respond within the timeframe required by applicable law.

You can also revoke Spred’s access to any Connected Platform independently of contacting us, directly through that platform’s own settings:

YouTube / Google: Google Security Settings

Facebook / Instagram: Settings → Apps and Websites, then remove Spred.

TikTok: Settings and Privacy → Manage Account → Apps and devices, then remove Spred.

Snapchat: Settings → Connected Apps, then remove Spred.

Revoking access on any platform will stop Spred from retrieving further data from that platform and will trigger deletion of the corresponding stored Authorized Data in accordance with Section 6.

8. Cookies and Tracking Technologies

Spred uses cookies and similar technologies for the following purposes:

• Essential cookies: keep you signed in and enable core functionality; the Service will not work correctly without these.
• Preference cookies: remember settings such as language or display preferences.
• Analytics cookies: help us understand how Spred is used so we can improve it.

You can control non-essential cookies through your browser settings or any cookie preference tool we provide.

9. Security

We apply reasonable technical and organizational safeguards including encryption in transit, access controls limiting who can view your data internally, and monitoring for suspicious activity. No system can guarantee absolute security, and you share information with us at your own risk.

10. Children’s Privacy

Spred is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at info@spredapp.ai and we will delete it.

11. International Users and Cross-Border Transfers

If you access Spred from outside the country in which our servers or service providers are located, your information may be transferred to, stored, and processed in a different country, which may have different data protection laws than your own. By using Spred, you consent to this transfer, and we take steps to ensure such transfers are protected in accordance with this policy and applicable law.

12. Nigeria Data Protection Act Compliance

As a company operating in Nigeria, Spred processes personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations issued by the Nigeria Data Protection Commission. This includes processing data lawfully, fairly, and transparently, collecting only the data needed for the purposes described in this policy, and honoring data subject rights requests submitted to info@spredapp.ai.

13. Changes to This Policy

We may update this Privacy Policy periodically, including to reflect new Connected Platforms, new features, or changes to a platform’s API policies. Material changes will be reflected by updating the “Last updated” date above. Continued use of Spred after updates indicates acceptance of the revised policy.

14. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at info@spredapp.ai.