Privacy Policy

for Reddiflow - Reddit Post Schedulerreddiflow.io
Last updated:

Quick Summary

  • ✓ We use Reddit's official OAuth API - your password stays with Reddit, not us.
  • ✓ We only store what's needed to schedule your posts: titles, content, subreddit names, and scheduling times.
  • No tracking scripts or invasive analytics. We use basic usage metrics to improve the product.
  • ✓ Payments are handled by LemonSqueezy - we don't store your credit card details.
  • ✓ Your Reddit posts are never shared with third parties or used for training AI models.

Who We Are

This policy covers the website reddiflow.io and the Reddiflow web application (the "Service"). References to "we", "us," or "our" mean Reddiflow and its operators.

Contact: support@reddiflow.io

What Data We Collect

Account Information

  • Email address: for account creation, login, and important notifications
  • Reddit username: obtained via OAuth to identify your connected accounts
  • Reddit access tokens: securely encrypted, used only to post on your behalf

Post Data

  • Post content: titles, text, links, and subreddit selections you create
  • Scheduling information: dates, times, and timezone preferences
  • Post status: whether posts are scheduled, published, or failed

Usage Data

  • Basic analytics: page views, feature usage, error logs (no personal tracking)
  • Device information: browser type, operating system (for compatibility)
  • IP address: for security, fraud prevention, and rate limiting

How We Use Your Data

  • To provide the service: scheduling and publishing your Reddit posts at the specified times
  • To improve features: understanding which features are used to prioritize development
  • To send notifications: post success/failure alerts, subscription renewals, product updates
  • To prevent abuse: detecting spam, fraud, or violations of Reddit's terms
  • To comply with laws: meeting legal obligations and responding to valid legal requests

Data Sharing & Third Parties

We do NOT sell your data. We only share data with:

  • Reddit: via their official API to post on your behalf (required for the service)
  • LemonSqueezy: our payment processor for subscriptions and billing
  • Email service: to send transactional emails (post notifications, account updates)
  • Hosting providers: secure cloud infrastructure (AWS, Vercel, or similar)

All third parties are contractually bound to protect your data and use it only for specified purposes.

Data Security

  • Encryption: All data is encrypted in transit (HTTPS) and at rest
  • Access tokens: Reddit OAuth tokens are encrypted and never exposed in logs
  • Limited access: Only authorized personnel can access user data, and only when necessary
  • Regular audits: We review security practices and update as needed

Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Export your scheduled posts in a machine-readable format
  • Objection: Opt out of certain data processing (where applicable)

To exercise these rights, email support@reddiflow.io

Data Retention

  • Active accounts: Data is retained as long as your account is active
  • Deleted accounts: Data is permanently deleted within 30 days of account deletion
  • Billing records: Kept for 7 years for tax and legal compliance
  • Published posts: Once posted to Reddit, they're governed by Reddit's policies

Cookies

We use minimal cookies for:

  • Authentication: Keeping you logged in
  • Preferences: Remembering your timezone and settings
  • Analytics: Basic usage statistics (no personal tracking)

You can disable cookies in your browser, but some features may not work properly.

Changes to This Policy

We may update this policy from time to time. Significant changes will be announced via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.