Privacy Policy

Zably is operated from Germany. For any privacy question or request, contact us at support@zably.co.

Account information. Your name, email address and password. Passwords are hashed by our authentication provider — we never see or store them in readable form.

Connected social accounts. When you connect an account we store its identifier, display name and profile picture. For YouTube and TikTok we also store an access token issued by that platform, encrypted before it is written to our database. For Facebook, Instagram and Threads we store no access token at all — that connection is held by our publishing provider, described under "Who we share it with" below.

Content you create. The captions, images and videos you upload in order to publish them, plus the publishing status of each post.

Statistics. Public engagement figures we retrieve from connected platforms, such as follower counts, views, likes, comments and shares.

Technical records. Basic security logs including IP address, browser type and the time of important account actions.

We use your data only to run the service: to authenticate you, to publish the content you ask us to publish, to show your statistics, to keep your account secure, and to respond when you contact us. We do not sell your data, and we do not use your content to train AI models.

We share data only with the providers needed to operate Zably. Each processes it on our instructions and for no purpose of their own:

Vercel — hosting. Supabase — our database and sign-in. Resend — the provider that delivers the account emails Supabase asks it to send: your verification link, and a password reset if you ask for one. It is given the address the mail goes to and what the mail says; it is not used for marketing, and we send no newsletter. All three are United States companies; where your data is transferred outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses in each provider's data processing terms.

ZERNIO SOFTWARE SL ("Zernio"), Spain — the provider through which Zably connects to Facebook, Instagram and Threads. When you connect one of those three, the authorisation is granted to Zernio's application and held by them, not by us. To publish, we send them your caption and the media for that post. To show your statistics, they read the figures from the network and we read them from Zernio — including the posts you published before joining Zably. If you use the Chats and Interactions screens, your direct messages and the comments on your posts are read through them, and a reply you write is sent through them. Your Zably email address is sent to them so that your connections can be told apart from another customer's. Zernio is a Spanish company. They use their own sub-processors, which they publish — with their security reports — at trust.zernio.com. Their privacy policy is at zernio.com/privacy-policy.

YouTube and TikTok do not go through Zernio. Zably connects to those two directly.

When you publish a post, its content is naturally sent to the social platform you selected, where that platform's own terms and privacy policy apply.

We keep your data while your account is active. When you disconnect a social account, we delete our copy of its credentials and, for Facebook, Instagram and Threads, instruct Zernio to hand the authorisation back — so neither we nor they can reach that account afterwards.

If you delete your Zably account we remove your personal data, together with the workspace holding your Facebook, Instagram and Threads connections at Zernio and everything imported into it. Some security logs are retained for a limited period where we are legally required to keep them.

Under the GDPR you may request access to your data, correction of it, deletion of it, or a copy in portable form. You may also withdraw your consent to a connected platform at any time by disconnecting it in Zably, or by removing Zably's access from that platform's own settings.

To exercise any of these rights, email support@zably.co. You also have the right to complain to your local data protection authority.

Zably uses YouTube API Services to publish videos to your channel, to read your channel's name, picture and statistics, and to read and answer comments on your videos — only for the channel you connect, and only while it stays connected.

By connecting a YouTube channel you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

You can withdraw Zably's access to your Google account at any time — disconnect YouTube inside Zably, or remove it from your Google account's third-party access page. Doing either stops us reading anything further; the copy of your access keys is deleted when you disconnect in Zably or delete your account.

If we change this policy we will update the date at the top of this page and, for significant changes, notify you by email.