Privacy policy

1. Who we are

Schedchie provides an online social media scheduling and management platform. This Privacy Policy explains what personal data we collect when you use the Service, why we process it, who we share it with, and the rights you have over it.

Schedchie is operated by MAMSplus s.r.o., registered at Miletičova 23, 821 08 Bratislava, Slovakia, which is the data controller for the personal data described in this policy. You can reach us at support@schedchie.com.

This policy covers the Service itself. It does not cover the social media platforms you connect to it, which handle your data under their own policies, and it does not cover the content you choose to publish through us once it has left our systems. Section 9 explains that boundary.

2. Information we collect

We collect the following categories of personal data:

• Account information: your name, email address, password in hashed form, and your account settings.
• Connected account information: the identifiers, display names, profile images and access tokens of the social media accounts you connect, so that we can publish on your instruction.
• Content you upload: the text, images and video you schedule, together with the metadata needed to deliver and process it.
• Payment information: your subscription status and billing records. Payment details are entered directly with our payment processor and are never held by us.
• Usage and technical data: log records of requests to the Service, including IP address, browser type, timestamps, and the actions taken in your account. We use these to operate the Service, to diagnose faults, and to detect and prevent fraud and abuse.
• Correspondence: the messages you send us and our replies.

3. Why we process it, and on what legal basis

• To provide the Service: creating and running your account, storing your content, publishing it to the platforms you have connected, and providing support. Legal basis: performance of our contract with you.
• To take payment: managing subscriptions, invoices and refunds. Legal basis: performance of our contract, and compliance with our legal obligations.
• To keep the Service working and secure: diagnosing faults, monitoring capacity, and detecting, investigating and preventing fraud, abuse, and breaches of our Terms of Service. Legal basis: our legitimate interest in operating a secure and functioning service, and in protecting our access to the platforms we integrate with.
• To communicate with you: service notices, security alerts and replies to your messages. Legal basis: performance of our contract, and our legitimate interest in keeping customers informed.
• To send marketing messages, where we do so. Legal basis: your consent, which you may withdraw at any time.
• To comply with the law: accounting, tax, and responding to lawful requests. Legal basis: compliance with our legal obligations.

4. Content you upload, and who is responsible for it

When you upload content to schedule, we process it on your instruction and for no purpose of our own. If that content contains personal data of other people, for example their images, names or voices, you decide what is published and you are responsible for having the right to publish it. In that respect you act as the controller of that data and we act as your processor.

We do not sell personal data, we do not use your content to train models, and we do not use it for advertising.

5. Who we share it with

We share personal data only where it is necessary to run the Service. We use the following providers, current as of the date at the top of this page:

• Cloudflare: storage and delivery of the media you upload, and network protection.
• MongoDB Atlas: the database holding your account, posts and settings.
• Google Cloud: the servers the application runs on.
• Vercel: hosting for this website and the application front end.
• Stripe: payment processing and subscription billing.
• Zoho: the email we send and receive.
• The social media platforms you connect: we send them the content you have scheduled, on your instruction.

This list may change as the Service changes, and we will update it here. We also disclose personal data where we are required to by law, where it is necessary to establish, exercise or defend legal claims, and where it is necessary to investigate a breach of our Terms of Service or to protect the Service, its users, or the platforms we integrate with.

6. International transfers

Some of the providers listed above process data outside the European Economic Area, including in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies, so that your data carries an equivalent level of protection. You can ask us for details of the safeguards in place.

7. How long we keep it

• Account data, connected accounts and content: for as long as your account exists. When your account is closed, by you or by us, your content, connected accounts and scheduled posts are deleted. We do not keep a copy on your behalf, so export anything you want to keep before closing the account.
• Deleted data in backups: copies may remain briefly in backups and in our providers' soft-deletion windows after deletion, and are not restored to the Service.
• Billing and invoice records: for the period required by applicable tax and accounting law, which is longer than the life of the account.
• Log and security records: for a limited period, and longer where they relate to an investigation of fraud or abuse, or to a legal claim.
• Correspondence: for as long as needed to deal with the matter and to keep a record of it.

Where an account has been closed for a breach of our Terms of Service, we retain the minimum record needed to enforce that decision and to prevent the same person from opening a further account.

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, encrypted storage of the access tokens for your connected accounts, restricted administrative access, and separation of the payment path so that payment details never reach our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority and, where the law requires it, you.

9. Connected social media platforms

When you connect an account, the platform authorises us with an access token limited to the permissions shown to you at the time. You can revoke that authorisation at any time, from within Schedchie or from the platform's own settings.

Once content has been published to a platform, that platform holds it under its own terms and privacy policy. Deleting your Schedchie account removes the content from Schedchie; it does not remove anything already published. We cannot control, retrieve, or delete data held by a platform, and we are not responsible for how a platform handles it.

10. YouTube API services

Use of YouTube API: Schedchie uses YouTube API Services to enable you to schedule and manage content on YouTube. By connecting your YouTube account, you authorize us to access your YouTube data on your behalf.

Data Usage and Sharing: We use YouTube API Services to:

• Access your YouTube channel information
• Upload and schedule videos to your YouTube account
• Manage video settings on your behalf

We do not share your YouTube data with external third parties except as necessary to provide our services or as required by law. Your YouTube data is processed in accordance with this Privacy Policy and Google's Privacy Policy.

Google Privacy Policy: Your use of YouTube through Schedchie is also governed by the Google Privacy Policy. We recommend you review this policy to understand how Google handles your data.

Data Storage and Cookies: When you connect your YouTube account, we store access tokens securely on our servers. We may also use cookies and similar technologies on your devices to maintain your authentication session and improve your experience. These technologies allow us to recognize your browser and remember your preferences.

Revoking Access: You can revoke Schedchie's access to your YouTube data at any time by visiting the Google security settings page. After revoking access, we will delete all stored YouTube data associated with your account within 30 days, except as required to comply with legal obligations or resolve disputes.

Deleting Your Data: To request deletion of your YouTube data stored by Schedchie, please contact us at support@schedchie.com. We will process your request within 30 days and confirm deletion via email.

11. Google Drive

What we can see: If you choose to add files from Google Drive, Google asks you to let Schedchie see only the files and folders you pick (Google’s drive.file permission). If you pick a folder, we add the files inside it. Schedchie cannot see, list or open any other file or folder in your Drive.

How we use it: We use that access only to copy the files you picked into your Schedchie media, so you can attach them to posts. We do not use it for anything else.

Storage: The copy is stored like any file you upload, under the retention and security terms in sections 7 and 8. Google’s access token is kept in your browser and stops working within an hour. It is sent to our servers only to download the files you picked. We do not store it.

Sharing and other uses: We do not sell data received from Google Drive, use it for advertising, or transfer it to third parties except as needed to provide this feature or as required by law. We never use it to develop, improve or train AI or machine-learning models. Nobody at Schedchie reads your files except with your permission, where it is necessary for security, or to comply with the law.

Limited Use: Schedchie’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: You can revoke Schedchie’s access to your Google Drive at any time on the Google third-party connections page. Revoking stops future picks. Copies already made stay in your Schedchie media until you delete them.

Drive links through the MCP connector: A Google Drive share link given to the Schedchie MCP connector is downloaded like any other public link. No Google sign-in or Google API is involved.

12. Cookies

We use cookies and similar technologies that are necessary for the Service to function, principally to keep you signed in and to secure your session. You can block cookies in your browser, but the Service will not work correctly without the necessary ones.

Our public website also sets one first-party cookie, sc_ft, the first time you visit. It records the page you landed on, the website that referred you, any utm_source, utm_medium and utm_campaign values in the link, and the time of that visit. It is never rewritten, expires after 90 days, and is read once, when you create an account, so that we know which page or link brought you to Schedchie.

13. Your rights

Under the General Data Protection Regulation you have the right to:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted, where the conditions for that right are met.
• Restriction: have processing limited in certain circumstances.
• Portability: receive the data you provided in a structured, commonly used, machine-readable format.
• Object: object to processing carried out on the basis of our legitimate interests, and to direct marketing at any time.
• Withdraw consent: where we rely on consent, withdraw it at any time, without affecting processing already carried out.

To exercise any of these rights, contact us at support@schedchie.com. We respond within one month, and may extend that period where the law allows. We may ask you to confirm your identity before we act on a request, and we may decline a request that is manifestly unfounded or excessive, or where acting on it would infringe the rights of others.

If you are unhappy with how we have handled your personal data, you may complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), or to the supervisory authority where you live.

14. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it and close the account.

15. Refunds and cancellations

Refunds and cancellations are not a privacy matter and are governed by sections 6 and 11 of our Terms of service.

16. Changes to this privacy policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the date shown at the top. Where a change materially affects how we handle your personal data, we will tell you directly.

17. Contact us

If you have any questions about this Privacy Policy or about how we handle your personal data, contact us at:

MAMSplus s.r.o.
Email: support@schedchie.com
Address: Miletičova 23, 821 08 Bratislava, Slovakia