Privacy Policy

Last updated: November 6, 2026

1. Introduction

Poof is operated by The Israeli Center for Companies Ltd ("we", "us"). This policy explains what information we collect, how we use it, and how we protect it. We are committed to full transparency and to protecting your privacy.

2. Information We Collect

  • Account details: name, email, and user ID on every connected platform.
  • Access tokens: OAuth tokens for the platforms you connect — stored encrypted and used solely to publish on your behalf.
  • Content you upload: text, images, and videos you create or upload to the system.
  • Performance data: publishing metrics (likes, comments, impressions) retrieved from the networks' APIs.
  • Technical usage data: IP address, browser type, access times — for security and service improvement purposes.

3. How We Use Information

  • Operating the service — publishing posts on your behalf at your explicit request.
  • Storing publishing history and analytics data in your dashboard.
  • Improving the service, debugging, and maintenance.
  • Communicating with you about the service (notifications, updates).
  • We do not sell your data to third parties. Period.

4. Sharing Information

  • We share information only in the following cases:
  • Infrastructure providers: Vercel (hosting), Neon (database), Vercel Blob (media storage) — under DPA agreements.
  • Connected platforms: when you publish a post, the content is sent to Meta / X / LinkedIn / TikTok as you choose.
  • Legal obligation: if required by law or court order.

5. Data Security

We use HTTPS encryption for all traffic, store tokens encrypted, and restrict access to relevant staff only. That said, no system is completely immune — we recommend using strong passwords and 2FA on all connected platforms.

6. Data Retention

  • Active account data — kept as long as the account is active.
  • Content and posts — kept until you delete them.
  • Upon account closure — all data is deleted within 30 days.
  • Encrypted backups — kept for up to 90 days.

7. Your Rights

  • Access: obtain a copy of all information held about you.
  • Correction: update inaccurate information.
  • Deletion: request full deletion of your account and data.
  • Disconnection: disconnect any social network account at any time — from the dashboard or from the network itself.
  • Export: receive your data in a portable format (JSON).
  • To exercise these rights: office@poof.li

8. Cookies

We use cookies that are necessary for the service to operate (session, security). We do not use advertising or third-party tracking cookies.

9. Data From External Platforms

Our use of information obtained from Meta, X, LinkedIn, and TikTok is subject to those platforms' own terms of service and privacy policies, in addition to this policy. We collect and store only the information necessary to operate the service (access token, user ID, page name).

10. Changes to This Policy

We will update this policy from time to time. Material changes will be sent by email or shown in the dashboard. The last update date appears at the top of this document.

11. Contact

For privacy questions: office@poof.li

12. YouTube API Services (Google)

  • Poof uses YouTube API Services to let you connect your YouTube channel, upload videos to it, and view your channel's videos, statistics and comments inside Poof.
  • By connecting a YouTube channel, the Google Privacy Policy also applies to you: https://policies.google.com/privacy
  • Your use of YouTube through Poof is also subject to the YouTube Terms of Service: https://www.youtube.com/t/terms
  • What we access, and store where needed to operate the service: your channel ID, channel title and thumbnail; an OAuth access token and refresh token; the IDs, titles, thumbnails and publish dates of your channel's videos; view, like and comment counts; and recent comments on videos published through Poof.
  • We use this data only to provide the Poof service to you. We do not sell it, do not share it with third parties other than the infrastructure providers listed in section 4, and do not use it for advertising.
  • You can disconnect your channel at any time from Poof ("Channels" > "Disconnect"), and you can revoke Poof's access on the Google permissions page: https://security.google.com/settings/security/permissions
  • To delete all your data, including data obtained from YouTube: office@poof.li. Full instructions: https://poof.li/data-deletion
Privacy Policy — Poof