Privacy Policy

Last updated: July 15, 2026

This Privacy Policy explains how ReplyNodes ("ReplyNodes", "we", "us", or "our") collects, uses, shares, and protects information when you use our social media scheduling, publishing, and analytics platform at replynodes.com and app.replynodes.com (the "Service"), including when you connect third-party social networks such as Facebook, Instagram, and Threads.

1. Information We Collect

We collect the following categories of information:

  • Account information: name, email address, password (hashed), workspace/team details, and billing information processed by our payment provider.
  • Content you provide: posts, captions, images, video, and other media you create, upload, or schedule through the Service.
  • Connected platform data: when you connect a social account (Facebook Page, Instagram Business account, LinkedIn, X, TikTok, YouTube, and other supported channels), we receive and store an OAuth access token and the minimum profile data needed to publish and report on your behalf, such as the account/page name, ID, and profile picture.
  • Usage and log data: IP address, browser type, device information, pages visited, and actions taken in the Service, used for security and reliability.
  • Cookies: used to keep you signed in and remember preferences. See "Cookies" below.
  • Agent and AI feature data: if you use AI-assisted drafting, chat, or agent (MCP) features, the prompts and content you submit are processed to generate suggestions. See "AI Features" below.

2. How We Use Your Information

We use the information above to:

  • Provide the Service, including scheduling, publishing, and analytics features;
  • Authenticate your account and maintain the security of the Service;
  • Publish content and retrieve engagement metrics on your behalf, only when you initiate it;
  • Process payments and manage subscriptions;
  • Send you service-related communications (e.g. publishing confirmations, security alerts);
  • Diagnose problems, improve performance, and develop new features.

We do not use the content of your scheduled or published posts to serve you advertising, and we do not sell your personal data to third parties.

3. Facebook and Instagram Platform Data

When you connect a Facebook Page or Instagram Business/Creator account, ReplyNodes uses the Meta Graph API to access only the permissions you explicitly grant during the OAuth flow — typically the ability to read your Page/Instagram account details, publish posts on your behalf, and read engagement metrics (likes, comments, shares, reach) for content published through ReplyNodes. We do not access your personal Facebook profile, friends list, private messages, or any data beyond what is required for the scheduling and analytics features you use.

Platform data obtained through Meta's APIs is used solely to provide the Service to you and is handled in accordance with the Meta Platform Terms and Developer Policies, including Meta's Platform Data Use restrictions. We do not use Facebook or Instagram platform data for advertising, and we do not sell it or share it with data brokers.

4. AI Features

ReplyNodes offers optional AI-assisted features (draft generation, chat, and MCP-based agent tools). When you use these features, the prompts, content, and relevant context you submit may be transmitted to third-party AI providers (such as OpenAI) solely to generate a response for you. We instruct these providers not to use your data to train their models, and this data is not sold or used for advertising.

5. How We Share Information

We share information only in the following circumstances:

  • Service providers: hosting, storage, email delivery, payment processing, and AI providers who process data on our behalf under contractual confidentiality obligations;
  • Connected platforms: the social network you connect (e.g. Meta, LinkedIn, X) as necessary to publish content and retrieve analytics you request;
  • Legal requirements: if required to comply with a legal obligation, protect our rights, or prevent fraud or abuse;
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply.

We do not sell your personal information.

6. Data Retention

We retain account and content data for as long as your account is active. If you close your account, we delete or anonymize your personal data and revoke stored platform access tokens within 90 days, except where we are required to retain limited records (e.g. billing records) for legal or tax purposes. Usage logs are retained for up to 12 months for security purposes.

7. Data Deletion & Your Rights

You can remove access to your data at any time:

  • Disconnect a social account: go to Settings → Integrations in the ReplyNodes dashboard and disconnect any connected Facebook, Instagram, or other platform account. This immediately revokes the stored access token and stops any further data access.
  • Delete your ReplyNodes account: email support@replynodes.com with the subject "Delete my account" from your registered email address. We will delete your account, content, and any stored platform access tokens within 30 days, and confirm by email once complete.
  • Revoke access from Facebook directly: you can also remove ReplyNodes' access at any time from your Facebook settings under Settings → Business Integrations, which immediately invalidates any tokens ReplyNodes holds for your account.

Depending on your location, you may also have the right to access, correct, export, or object to the processing of your personal data. California residents have rights under the CCPA/CPRA, and EU/UK/EEA residents have rights under the GDPR. To exercise any of these rights, contact support@replynodes.com.

8. Security

We use encryption in transit (TLS) and at rest, secure storage of platform access tokens, and access controls to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us so we can delete it.

11. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and for material changes we will provide additional notice (e.g. by email).

13. Contact

For privacy questions, data access requests, or account/data deletion requests, contact support@replynodes.com.