Privacy Policy
Last updated: 29 July 2026
RatedStack ("the Service", "we", "us") is a social media publishing and scheduling tool operated by Digital Cliqs. This policy explains what data we collect, why we collect it, how long we keep it, and how you can have it deleted.
The short version: we store the minimum needed to publish the content you tell us to publish. We never sell your data, we never post anything you did not write or schedule, your platform credentials live in an encrypted vault, and the images and videos you attach are deleted as soon as your post goes out.
1. Who we are
Digital Cliqs is the data controller for information processed through RatedStack. For any privacy question, correction, or deletion request, contact digitalcliqsmarketplace@gmail.com.
2. What we collect and why
| Data | Why we hold it | How long |
|---|---|---|
| Google account basics (name, email address, account identifier) | To sign you in and identify your workspace. We never receive your Google password. | Until you ask us to delete your account |
| Early-access list entry (email address, name) | If you sign in before the Service is open to you, we record your address so we can tell you when your workspace is ready. | Until you ask to be removed, or until we contact you and you decline |
| Social platform credentials (access and refresh tokens) | To publish the posts you schedule and read back engagement figures for your own posts. | Until you disconnect that account, then destroyed immediately |
| Content you create (post text, links, schedule times, publishing records) | To schedule, publish, and report on your posts. | Until you delete it or your account |
| Media you attach (images, video) | To transfer the file to the platform you are publishing to. | Deleted immediately after publishing — for scheduled posts, held only until the scheduled time (maximum 90 days) |
| Engagement and traffic figures | To show you how your own posts performed. | With your publishing records |
| Operational logs | To keep the Service running and diagnose failures. Credentials and cookies are redacted from logs. | Short-term, rolling |
We do not use cookies for advertising or third-party tracking. The Service sets one essential, encrypted session cookie so you stay signed in.
3. Google user data — Limited Use disclosure
RatedStack uses Google sign-in to authenticate you. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
- We request only your basic profile and email address, and use them solely to authenticate you and contact you about the Service.
- We do not transfer this data to third parties except as necessary to provide the Service, comply with law, or as part of a merger or acquisition.
- We do not use this data for advertising, and we do not sell it.
- We do not allow humans to read this data unless you explicitly ask us to (for example, to resolve a support issue), we need it for security or legal reasons, or it has been aggregated and anonymised.
Where RatedStack reads Google Analytics figures, it does so only for properties you connect, only to report traffic to your own site, and under the same limitations.
4. Social platforms we connect to
When you connect an account, that platform issues us a credential scoped to the permissions you approve. We use it only to perform the actions you asked for — publishing your content, and reading engagement for your own posts.
| Platform | What we do with the connection |
|---|---|
| Facebook & Instagram (Meta) | Publish posts, images and video to the Page or professional account you select; read engagement counts for those posts; delete a post at your request. |
| Threads | Publish posts and media; read post insights; delete at your request. |
| TikTok | Read your basic profile to label the connection; publish videos you compose to your own account. |
| Publish posts to your member profile; delete at your request. | |
| List your boards; create pins you compose; read analytics for those pins. | |
| Bluesky, Mastodon, Telegram | Publish posts to the account or channel you connect; read public engagement counts where the platform provides them; delete at your request. |
Content you publish becomes subject to that platform's own terms and privacy policy. We are not responsible for how a platform processes content once it is published there.
5. How your data is protected
- Platform credentials are stored write-only in an encrypted secrets vault (Google Cloud Secret Manager) — never in our application database and never in logs.
- All traffic is encrypted in transit over HTTPS.
- Media is held transiently and in a private, non-public store; it is removed on every outcome — published, failed, or cancelled.
- Access to production systems is restricted to the operator.
6. Deleting your data
You are always in control:
- Disconnect a platform — destroys the stored credential immediately and, where the platform supports it, revokes our access on the platform side.
- Delete a published post — removes it on the platform (where that platform's API allows deletion) and retires its analytics record.
- Delete your account or leave the early-access list — email digitalcliqsmarketplace@gmail.com from the address you signed up with, with the subject "Delete my data". We will delete your account, stored credentials, content records and waitlist entry within 30 days and confirm by reply.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict, or delete the personal data we hold about you, and to object to processing. Exercise any of these by emailing us at the address above; we will respond within 30 days. You also have the right to complain to your local data protection authority.
Our lawful bases for processing are: performance of a contract (running the Service you signed up for), consent (joining the early-access list, connecting a social account), and legitimate interests (keeping the Service secure and working).
8. Data sharing and location
We do not sell personal data and we do not share it for others' marketing. We share data only with the infrastructure providers needed to run the Service — cloud hosting and the encrypted secrets vault — and with the social platforms you explicitly connect, at your instruction. Data may be processed in the United States and the European Union.
9. Children
RatedStack is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
If we make a material change we will update the date at the top of this page and, where the change affects you meaningfully, notify you by email.
11. Contact
Digital Cliqs — digitalcliqsmarketplace@gmail.com