Privacy policy

Unbusied is operated by MXVEN LLC, a United States company (“Unbusied,” “we,” “us”). The service consists of this website (unbusied.com) and the application at app.unbusied.com. This policy describes what personal data we collect, why, how long we keep it, and the choices you have. It applies to the service only; the social platforms you connect have their own privacy policies.

• Account information. Your email address and the name you provide. You can sign in with an emailed link or an optional password; if you set a password, our authentication provider stores only a salted hash of it, never the password itself.
• Content you compose. The posts, captions, photos, and videos you create or upload for scheduling and publishing.
• Connected-account data. When you connect a social account we store the OAuth access credentials the platform issues, plus basic profile details (account ID, username, display name, avatar) needed to show you what’s connected and to publish on your behalf.
• Publishing and analytics data. Delivery results for each post (published, failed, and why), links to the published posts, and periodic snapshots of follower/subscriber counts and post performance metrics from your connected accounts.
• Billing information. Payments are processed by Stripe. We store your subscription status and Stripe customer reference. We never see or store your full card number.
• Support correspondence. The name, email, and message you send through our contact form, or any emails you send us.
• Website usage data. Our own cookieless analytics (Unbusied Stats) counts page views across our site and app without storing any identifier of you. On the public marketing site only, Google Analytics also collects standard usage data (pages visited, approximate location, device and browser type) so we can see which pages are useful. See the cookies section below.
• Technical logs. Standard server logs (IP address, browser type, timestamps) kept briefly for security and debugging.

We use the data above solely to:

• Operate the service: schedule and publish your content to the platforms you connect, at your direction.
• Notify you: sign-in links, failed-post alerts, disconnected-account alerts, billing notices, and replies to your support emails.
• Bill you: manage your subscription through Stripe.
• Keep the service working: debugging, security, and abuse prevention.

We do not sell or rent your personal data, use it for advertising, or use your content or data to train AI models. We don’t send marketing email unless you’ve asked for it.

Unbusied only works because you grant it permission to act on your social accounts. On each platform we request the minimum scopes needed to (a) publish the content you schedule, (b) read basic profile information so the app can show what’s connected, and (c) read follower counts and post metrics for your analytics. Specifically:

• Instagram & Facebook (Meta). Permission to publish content (including Reels and their cover images) to the Instagram professional accounts and Facebook Pages you choose, and to read those accounts’ basic details, follower counts, their recent posts, and post performance metrics (insights) so your analytics can show how content performs.
• Threads. Permission to publish posts to your Threads profile and to read its basic details and your posts’ performance metrics (insights).
• YouTube (Google). Permission to upload videos to your channel at your direction and to read basic channel details, subscriber counts, your uploads list, and video statistics. See the dedicated YouTube section below.
• TikTok. Permission to post content to your TikTok account and to read basic profile information, follower statistics, and the list of your recent videos and their performance metrics.
• LinkedIn. Permission to post on your behalf and read your basic profile.
• X. Permission to post on your behalf, including offline access so scheduled posts can publish while you’re away.
• Snapchat. Permission to publish the Spotlight posts and Stories you schedule to your Snapchat Public Profile, and to read its basic details and subscriber count.
• Google Business Profile. Permission to create posts and upload media on the Business Profile locations you choose, at your direction. See the Google API Services section below.

OAuth credentials are stored with strict access controls (they are never sent to your browser or to other users), encrypted at rest by our database provider, and deleted when you disconnect the account. You can revoke Unbusied’s access at any time, either by disconnecting the account inside Unbusied or from the platform’s own security settings. See data deletion for step-by-step instructions.

Unbusied uses YouTube API Services to upload the videos you schedule to your own YouTube channel and to read basic channel information and statistics. By connecting a YouTube account you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy. If you connect a Google Business Profile, we use Google’s Business Profile APIs to create the posts and upload the media you schedule for your chosen locations.

Unbusied’s use of information received from Google APIs (including YouTube and Google Business Profile data) will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Beyond the OAuth credential, the channel and location details, and the statistics described above, we do not store Google user data. You can revoke Unbusied’s access to your Google account at any time via Google’s security settings. Revocation immediately invalidates the credential we hold; disconnecting the account inside Unbusied (or requesting deletion) removes the stored credential and account record as well.

We use a small set of infrastructure providers to run Unbusied. Each processes data only as needed to provide its function:

• Supabase: database, authentication, and storage (your account, posts, connected-account records).
• Cloudflare: application hosting, media storage (R2), video processing (Stream), image resizing, and the Turnstile bot check on our contact form.
• Stripe: payment processing and subscription billing.
• Mailgun: transactional email delivery (sign-in links, alerts, and contact-form messages).
• Google Analytics: website analytics on the public marketing site only (see the cookies section). Never runs inside the app.

We’ll update this list if providers change. Unbusied is operated from the United States and your data is processed there.

We deliberately keep as little of your media as the service needs. Our standing policy:

• Posters, covers, and display-resolution images are kept indefinitely, because they're needed to render your post history inside the app.
• Video files (your original upload and our normalized copy) are purged once every delivery for a post has succeeded, plus a grace period of about 7 days (about 30 days if a delivery failed, so retries remain possible).
• Media for failed or canceled posts is kept about 30 days for retry/reschedule, then purged. Draft media lives as long as the draft.
• A storage lifecycle rule automatically deletes original uploads after about 90 days as a backstop, even if an app-side deletion was missed.

In short: you keep your own originals, and we are not an archive. Non-media records (your posts’ text, delivery history, analytics snapshots) are kept while your account is active so your history renders, and deleted when you delete your account.

When you disconnect a social account, we delete its stored credentials and account record. When you delete your Unbusied account, we hard-delete your rows from our database and purge your media from storage. This is real deletion, not a soft-delete flag. Full instructions, including how to revoke access from each platform’s side, are on the data deletion page. Deletion requests are honored within 30 days; limited billing records are retained where tax and accounting law requires.

Wherever you live, we extend the same rights: you can request access to the personal data we hold about you, a copy of it (export), correction, or deletion. If you’re in the EU/UK, these correspond to your GDPR rights; if you’re in California, to your CCPA rights (and note: we don’t sell personal information, so there’s nothing to opt out of). Get in touch from your account address and we’ll handle it, with no forms and no runaround.

The app at app.unbusied.com uses only essential cookies: the session cookies that keep you signed in. It runs no advertising trackers and no third-party analytics.

Both the marketing site and the app use Unbusied Stats, our own self-hosted analytics. It works entirely without cookies: it sets nothing on your device, stores no identifier of any kind, and keeps no profile of you. Each page view records only the page path, the referring site, your screen width, and a country derived at the network edge, plus whether the viewer was signed in (as a simple yes/no bucket, never who). There is nothing to opt out of because there is nothing that follows you.

The public marketing site (unbusied.com) uses Google Analytics 4 to understand which pages are useful and how visitors find us. Google Analytics sets cookies and processes usage data (pages visited, approximate location from a shortened IP address, device and browser type) on our behalf. It runs only on the marketing pages, never inside the app, and we never use it for advertising or sell what it collects. You can opt out for every site with Google’s browser add-on, and Google’s own handling is described in the Google Privacy Policy.

Our contact form is protected by Cloudflare Turnstile, a privacy-friendly bot check that verifies you’re human without tracking you across the web.

All traffic is encrypted in transit (TLS) and data is encrypted at rest by our providers. Access to production data is restricted, and sensitive records like OAuth credentials carry additional service-level access controls so they are never exposed to browsers or other users. No system is perfectly secure, so if we ever learn of a breach affecting your data, we’ll notify you promptly.

We do not sell your data or share it with anyone beyond the service providers above. If a public authority requests user data, our policy is to review the request’s legality before responding, challenge requests we consider unlawful, disclose only the minimum necessary to comply with a valid request, document every request and our response, and notify affected users where the law allows.

Unbusied is a business tool and is not directed at children. You must be at least 16 (and old enough to hold the social accounts you connect) to use it. We don’t knowingly collect data from children; if you believe a child has created an account, contact us and we’ll delete it.

If we make material changes, we’ll update the effective date above and notify active subscribers by email before the changes take effect.

MXVEN LLC. Reach us through the contact form and you’ll get a reply from Jeff, the person who runs Unbusied.