Privacy Policy
Last updated: February 14, 2026
1. Introduction
HelloShare ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our social media management platform ("the Service").
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, and profile picture via Google Sign-In or email/password registration.
Connected Social Accounts
When you connect social media accounts, we receive and store OAuth access tokens and refresh tokens. These tokens are encrypted using AES-256-GCM before storage. We also store your social media display name, profile picture URL, and platform user ID.
Content
We store the posts you compose, including text, media files, scheduling preferences, and platform-specific customizations. Media files are stored in Firebase Storage.
Usage Data
We collect basic analytics about how you use the Service, including post performance metrics retrieved from connected platforms, for display in your dashboard.
3. How We Use Your Information
We use your information to:
- Provide and operate the Service
- Publish and schedule posts on your behalf to your connected social media accounts
- Display analytics and performance metrics from your connected accounts
- Authenticate your identity and secure your account
- Send transactional notifications related to your account
- Improve and maintain the Service
4. Data Storage and Security
Your data is stored in Google Cloud Firestore and Firebase Storage, hosted in the United States. All OAuth tokens are encrypted at rest using AES-256-GCM encryption. All data is transmitted over HTTPS. We follow industry-standard security practices to protect your information.
5. Third-Party Services
The Service integrates with the following third-party platforms to provide its core functionality:
- Social media platforms — Instagram, X (Twitter), LinkedIn, Facebook, TikTok, YouTube, Threads, and others for publishing and analytics
- Firebase (Google) — Authentication, database, and file storage
- Vercel — Application hosting
Each third-party service has its own privacy policy governing its use of your data. We only share the minimum information necessary for each integration to function.
6. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We only share your data with third-party services as described above to operate the Service. We may disclose your information if required by law or to protect our legal rights.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we will delete your personal data, posts, media files, and connected account tokens within 30 days. Anonymized analytics data may be retained for longer.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect any connected social media account at any time
- Export your data in a portable format
- Withdraw consent for data processing
To exercise any of these rights, contact us at the email address below.
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact
If you have questions about this Privacy Policy or your data, contact us at jonathangood@gmail.com.