Privacy Policy

egged is a social media scheduling and automation tool. Each user connects the social media accounts they own or operate and uses egged to schedule posts and automate replies on those accounts. This policy explains what data egged processes and why.

Data you connect

When you connect an account (Instagram, Facebook, Threads, YouTube or X), the platform gives egged an access token via that platform's official sign-in. egged stores this token encrypted and uses it only to act on the account you connected — publishing the content you schedule and, for messaging platforms, sending the automated replies you configure. egged never receives or stores your platform password.

Data from people who interact with your accounts

For comment and DM automation on Instagram and Facebook, the platform forwards interactions (a username, platform user ID, and the text of a comment or message) so egged can send the automated reply you configured, tag the conversation, and let a human take over. Automated conversations are disclosed as automated at their start.

YouTube API Services

egged uses YouTube API Services. With the scopes you grant, egged: youtube.readonly — reads your connected channel's id and title (shown so you can confirm the correct channel) and the status of videos egged itself uploaded; and youtube.upload — publishes the videos you schedule to your own channel. egged reads only your channel's identity and the status of videos egged uploaded, and writes only the videos you schedule.

egged's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not share it with third parties except the platform APIs themselves as technically required to perform the action you requested. See also the Google Privacy Policy and the YouTube Terms of Service.

Storage, retention and deletion

Data is stored in a private database and access tokens are encrypted at rest. Access is restricted to the workspace that connected the account. You can disconnect any account at any time, which deletes its stored token and conversation data. You can request deletion of all data we hold about you — see data deletion instructions or email scott.bryan.chen@gmail.com; requests are honored within 30 days.

Requests from public authorities

If a public authority requests personal data, we review the request's legality, challenge requests we consider unlawful or overbroad, disclose only the minimum necessary, and document each request and our response.

Your rights

If you are in the EU/EEA (GDPR) or a comparable jurisdiction, you have the right to access, correct and erase your personal data and to object to its processing. Contact scott.bryan.chen@gmail.com. The data controller is the operator of egged, reachable at the same address.