JoltPost JoltPost
Sign in Get started
Legal

Privacy Policy

How JoltPost collects, uses, and protects your information.

Last updated: April 18, 2026

JoltPost (“JoltPost”, “we”, “us”, or “our”) is a product operated by Jolt Labs, a sole proprietorship registered in British Columbia, Canada. This Privacy Policy explains how we collect, use, store, and protect your personal and non-personal information when you use the JoltPost website at https://joltpost.com (the “Website”), the JoltPost dashboard, our APIs, and any related services (collectively, the “Services”).

By accessing or using the Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

1.1. Account & Identity Information

When you sign up for JoltPost we collect information needed to create and operate your account, including your name, email address, profile picture (if provided), and authentication identifiers. Account authentication is handled by our identity provider, Clerk.

1.2. Payment Information

If you subscribe to a paid plan, we collect billing details necessary to process your payment, including name, billing address, and payment method metadata. Full payment card numbers are handled directly by our payment processor and are never stored on JoltPost servers.

1.3. Social Media Credentials & Content

The core function of JoltPost is to publish content on your behalf to third-party social media platforms. When you connect an account, we receive and store:

  • OAuth access tokens, refresh tokens, and related scope metadata issued by the platform;
  • Basic profile information the platform returns (handle, display name, profile ID, avatar URL);
  • The posts, captions, media files, scheduling metadata, and analytics responses associated with content you create or publish through JoltPost.

Access tokens are encrypted at rest and transmitted over TLS. We use these credentials only to act on your behalf in ways you have explicitly authorized through the JoltPost dashboard.

1.4. Usage & Technical Data

We automatically collect standard log and device information when you interact with the Services, including IP address, browser type, device identifiers, operating system, referring URLs, and timestamps of requests. We use cookies and similar technologies for session management, security, and product analytics.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Services;
  • Authenticate users and secure accounts against abuse or unauthorized access;
  • Draft, schedule, and publish content to the social media platforms you have connected, on your behalf;
  • Power AI content generation and optimization features, in accordance with Section 6;
  • Process payments and manage subscriptions;
  • Respond to support requests and product inquiries;
  • Detect, investigate, and prevent fraud, abuse, or violations of our Terms;
  • Comply with our legal and regulatory obligations.

3. Connected Social Media Platforms

JoltPost integrates with the following third-party platforms. When you connect an account, you authorize us to use the scopes described below solely to deliver the Services you request.

3.1. X (Twitter)

We request scopes needed to read your profile, create posts, upload media, and (where you enable it) retrieve post metrics on your behalf.

3.2. Meta — Facebook Pages, Instagram, Threads

For Facebook Pages we request pages_manage_posts and supporting page-read scopes. For Instagram we request instagram_business_content_publish and supporting scopes for business/creator accounts linked to a Facebook Page. For Threads we request threads_content_publish and related read scopes. Your use of these integrations is also subject to Meta’s Data Policy.

3.3. LinkedIn

For personal profile posting we request w_member_social and profile read scopes. For company page posting we use LinkedIn’s Community Management API with scopes that allow posting and management on pages you administer.

3.4. YouTube

JoltPost uses YouTube API Services to upload and manage videos on your behalf. By using the YouTube integration you agree to be bound by the YouTube Terms of Service and acknowledge that Google’s Privacy Policy applies to information processed by Google. You can revoke JoltPost’s access to your Google account at any time at https://myaccount.google.com/permissions. JoltPost does not use YouTube API data for advertising, retargeting, or creating user profiles unrelated to the service.

3.5. TikTok

We request scopes needed to publish content to your TikTok account on your behalf (video.publish, video.upload, and related profile scopes) and to expose the creator-info, privacy, duet/stitch/comment, and branded-content controls required by TikTok’s Content Sharing Guidelines.

3.6. Pinterest

We request scopes needed to read boards you own and to create pins on your behalf (pins:write, boards:read, and related profile scopes).

3.7. Bluesky

We authenticate to Bluesky via OAuth (preferred) or app password using the AT Protocol, solely to post to your account.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

4.1. Social Media Platforms

When you schedule or publish a post, the content, media, and metadata you have chosen are transmitted to the platform(s) you selected. Each platform handles that data under its own privacy policy.

4.2. Service Providers

We use a small number of privacy-compliant providers to operate the Services, including Clerk (authentication), Neon (managed Postgres database), Railway (application hosting for our backend), Vercel (dashboard hosting), Cloudflare (landing site hosting and DNS), and LLM providers accessed through the Vercel AI SDK (AI content generation). These providers process data only as necessary to perform their service on our behalf.

4.3. Legal Requirements

We may disclose information where required by law or in response to valid legal process, including compliance with Canadian laws such as the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and British Columbia’s Personal Information Protection Act (“PIPA”).

4.4. Business Transfers

If Jolt Labs is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Website before your information becomes subject to a different privacy policy.

5. AI Content Generation

When you use JoltPost’s AI drafting, rewriting, or optimization features, the prompts and content you provide are sent to third-party large language model providers we access through the Vercel AI SDK. We do not authorize these providers to use your content to train their foundation models. We do not use your content to train our own models.

6. Data Retention & Deletion

We retain your information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. You may delete your account at any time from the dashboard or by emailing us; upon deletion we will remove or anonymize your personal information within a commercially reasonable period, subject to backup rotation and legal retention requirements.

You may also disconnect any individual social media integration from the dashboard. When you disconnect, the associated OAuth tokens are revoked and deleted from our systems.

7. Security

We take reasonable and industry-standard measures to protect your information. All traffic to the Services is served over HTTPS, OAuth access tokens and other sensitive credentials are encrypted at rest, production access is restricted to authorized personnel, and we monitor our systems for anomalous activity. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

Jolt Labs operates from British Columbia, Canada. Our service providers may store or process information in Canada, the United States, or the European Union. By using the Services you consent to the transfer of your information to these jurisdictions.

9. Your Rights

Subject to applicable law, you have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, and to request a portable copy of your data. To exercise these rights, email support@joltpost.com.

10. Children’s Privacy

JoltPost is not directed to children under the age of 13 (or the minimum age required by your jurisdiction to consent to the processing of personal data). We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or a prominent notice on the Website before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

Jolt Labs (operator of JoltPost)
British Columbia, Canada
Email: support@joltpost.com