Privacy Policy

Who we are

Connectrix is a tool that lets teams connect, schedule, and publish to social platforms from one workspace. This Privacy Policy explains what information we collect when you use Connectrix, how we use it, and the choices you have. In this policy, "Connectrix", "we", and "us" refer to the operator of the Connectrix service. "You" refers to anyone who creates an account or uses the service.

Beta status

Connectrix is currently offered as a beta service. Our data-handling practices may evolve as the product matures. We will announce material changes to this policy in the product or by email before they take effect, as described in the "Changes to this policy" section below. During the beta period the Service is provided as-is, and you use it at your own risk.

Information we collect

Account information. When you sign up we store your email address, a hashed password if you sign up with credentials, and your display name. If you sign in with Google or another OAuth provider, we receive your email, name, and the provider account id from that provider.

Workspace and content data. Drafts you compose, posts you schedule, media you upload, and metadata about publish requests are stored so the service can deliver them on your behalf.

Connector tokens and platform data. When you connect a social platform, we receive an OAuth access token, a refresh token where the platform issues one, and a limited set of profile data needed to publish on your behalf. For YouTube this includes your channel id, channel title, and the upload status of videos that Connectrix publishes for you. Tokens are stored encrypted at rest and are never returned through our API.

Operational data. We log request metadata, delivery results, and audit events so we can diagnose failures, prevent abuse, and provide an audit trail to workspace owners. Tokens and post bodies are excluded from these logs.

How we use information

We use the information above to operate the service. That includes authenticating you, publishing the content you submit to the platforms you connect, refreshing OAuth tokens before they expire, surfacing delivery and analytics data on your dashboard, sending account and security email, and enforcing our Terms of Service.

We do not sell personal information. We do not use the content you publish or the data we receive from connected platforms to train machine-learning models or to build advertising profiles.

Google API Services and YouTube API Services

Connectrix uses Google API Services, including the YouTube API Services, to publish content on your behalf when you connect a YouTube channel. Connectrix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

By using the YouTube features of Connectrix, you also agree to be bound by the YouTube Terms of Service and you acknowledge the Google Privacy Policy. You can revoke Connectrix's access to your Google or YouTube account at any time through Google's security settings at myaccount.google.com/permissions.

How we share information

We share information only with parties that help us run the service. That includes the social platforms you choose to connect (publish requests are sent to those platforms by definition), our hosting and database providers, our transactional email provider, and our error and metrics observability provider. We do not share your information with third parties for their own marketing.

We may disclose information when required by law, when needed to protect the rights, property, or safety of Connectrix or its users, or in connection with a merger, acquisition, or sale of assets. In a sale, we will notify you before your data becomes subject to a different privacy policy.

Storage, security, and retention

OAuth tokens are encrypted at rest with rotatable keys. Passwords are hashed with a modern memory-hard algorithm. We restrict internal access on a need-to-know basis. No system is perfectly secure, so we cannot guarantee absolute security.

We keep account data while your account is active. When you delete your account or disconnect a platform, we revoke the relevant tokens and remove the associated records on a documented schedule, retaining only what is required for security, audit, and legal obligations.

Your rights and choices

You can review and update your account information from the account settings page. You can disconnect any platform at any time from the connectors page, which revokes Connectrix's access on that platform. You can delete your account from the account settings page, which removes your workspace data on the schedule above.

Depending on where you live, you may have additional rights under local data protection law, including the right to request access to, correction of, or deletion of your personal information, and the right to object to certain processing. To exercise these rights contact us at the address below.

Children

Connectrix is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be announced in the product or by email before they take effect.

Contact

Questions about this policy or about our handling of your data can be sent to privacy@connectrix.io.