Privacy Policy
Effective date: October 2026
Sarulian Publisher ("the Service") is an internal publishing tool developed and operated by Sarulian LLC. It schedules and publishes content to social media accounts that Sarulian LLC owns or manages. It is not offered to the public: there is no public sign-up, and only people authorized by Sarulian LLC can use it. This policy explains what information the Service accesses when an account is connected to it, how that information is used and stored, and how to have it deleted.
1. Who we are
Sarulian LLC is the developer and operator of the Service and the controller of the data it processes. Contact: contact@sarulian.com.
2. How accounts are connected
An account is connected to the Service by its owner through the platform's own authorization screen (OAuth). The Service never sees or stores the account's password. Each platform shows the permissions being requested before the owner approves them, and the owner can revoke them at any time (see section 8).
The Service currently connects to YouTube (Google), X, Instagram, Threads, and TikTok.
3. Information the Service accesses
Depending on the platform and the permissions granted, the Service accesses:
- Authorization tokens: access and refresh tokens (or, for X, OAuth access tokens) issued by the platform, used to act on the connected account.
- Basic account information: account or channel ID, display name, username or handle, profile picture, and, for Google, the email address of the authorizing Google account. This is used to identify which account is connected.
- Publishing permissions: the ability to upload videos and images, create posts, set post settings (title, description, visibility), and upload thumbnails on the connected account.
- Content we publish: the text, images, and videos prepared for publication, along with their schedule and status.
- Performance information: views, likes, comments counts, follower counts, and similar statistics the platform provides for the connected account and its posts. This is used to see how our own content performs.
- Comments and replies on our own posts: where the platform provides them (for example Instagram comments and Threads replies), including the commenter's public username and comment text. This is used to read and respond to engagement on our own content.
Per platform, the permissions requested are:
| Platform | Permissions requested |
|---|---|
| YouTube / Google | basic profile and email; manage YouTube account; upload videos; view YouTube account; YouTube partner access; view YouTube Analytics reports |
| X | read and write access to the connected account |
| basic profile; publish content; manage comments; view insights | |
| Threads | basic profile; publish content; manage replies; view insights |
| TikTok | basic and profile info; account statistics; list videos; upload and publish videos |
4. Information the Service does not collect
- It does not collect passwords for any connected account.
- It does not collect information about people other than the connected account, except the public usernames and text of comments or replies on our own posts, as described above.
- It does not sell data, share data with advertisers, or use data for advertising or profiling.
- It does not use data from any platform to train artificial intelligence models.
- It does not use cookies or tracking for anyone other than its authorized operators.
5. How information is used
Information is used only to provide the Service's features for the connected accounts: publishing and scheduling our content, showing its status and performance, and managing comments and replies on it. It is not used for any other purpose.
6. Google API Services and YouTube
The Service uses YouTube API Services. By connecting a YouTube channel, the account owner agrees to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
Sarulian Publisher's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Access granted to the Service can be revoked at any time on the Google security settings page.
7. Storage, security, and sharing
- Where: data is stored on servers owned and operated by Sarulian LLC in the United States. It is not stored with third-party cloud storage providers.
- Network: traffic to the Service passes through Cloudflare, which provides the encrypted (HTTPS) connection and access control in front of the Service. Cloudflare processes this traffic only to deliver it.
- Access control: the Service's interface and API are restricted to authorized operators of Sarulian LLC.
- Published media: images and videos queued for publishing are stored on the Service and served at unlisted public web addresses, because the platforms fetch media from those addresses when publishing.
- Sharing: data is shared only with the platform it belongs to (for example, a video is sent to YouTube to publish it), or where required by law.
8. Retention and revoking access
- Authorization tokens are kept while an account is connected and are deleted when the account is disconnected from the Service.
- Published content, schedules, and performance information are kept while they are useful to us and are deleted on request (see section 9).
- Deleted data is removed from backups as those backups expire.
Access can be revoked on each platform at any time, which immediately stops the Service from using it:
- Google / YouTube: Google security settings
- X: Settings and privacy → Security and account access → Apps and sessions → Connected apps
- Instagram: Settings → Apps and websites
- Threads: Settings → Account → Website permissions
- TikTok: Settings and privacy → Security and permissions → Apps and services permissions (labels can vary by app version)
9. Data deletion
To have data held by the Service deleted, email contact@sarulian.com with the subject "Data deletion request", naming the platform and the account or username. We will delete the tokens, account information, content, and statistics held for that account within 30 days and confirm by email.
Revoking the Service's access on the platform (section 8) stops all further access immediately. Disconnecting an account from the Service deletes its tokens.
10. Children's privacy
The Service is not directed at children and is not used to collect information from children under 13 (or the minimum age in your country).
11. Your rights
California residents have rights under the CCPA, and residents of the EU, EEA, and UK have rights under the GDPR, including the rights to access, correct, delete, restrict, or object to the processing of personal data, and to data portability. To exercise any of these rights, contact contact@sarulian.com.
12. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date.
13. Contact
Sarulian Publisher is operated by Sarulian LLC. Questions about this policy: contact@sarulian.com.