Privacy Policy

Effective 2026-08-12 · Updated 2026-11-09 (OpenAI added to the service providers, for checking product matches) · Previously updated 2026-11-08 (research: combined, de-identified data across creators to improve the service, give recommendations and publish what works; what it can and never uses, minimum group sizes, opt-out, opt-in tests; YouTube, TikTok Shop, the TikTok video list and Amazon earnings are left out) · Previously updated 2026-11-05 (Auto DM limits described in general terms: only recent comments, one message per comment, paced within Meta's limits) · Previously updated 2026-11-04 (Pinterest: what we actually read and how its tokens are stored; Discord: what our bot does in our own server; the TikTok video-list connection and what disconnecting it does) · Previously updated 2026-11-03 (YouTube: disconnecting revokes our access at Google; accounts with no use and no posting for 30 days have their YouTube access revoked and YouTube data deleted; Delete my data removes YouTube right away) · Previously updated 2026-10-21 (YouTube: the exact Google link for revoking access, and a plain statement that with your approval we edit the description of your own videos to add your product links; nothing else on the video) · Previously updated 2026-10-20 (Auto DM limits described as they work; every service provider listed, including error monitoring, Amazon's product data, the web app's typeface and browser notifications) · Previously updated 2026-10-10 (referral tracking for our affiliate program, through Rewardful; removing EverySqueeze in Instagram now deletes its Instagram data automatically) · Previously updated 2026-10-07 (how AI features and Pip questions are handled, shared product matching, optional Google Drive backup, cookies, retention periods) · Previously updated 2026-10-06 (visit counts on the public pages, kept without cookies) · Previously updated 2026-09-28 (Instagram connected without Facebook; comments and automatic link messages on Facebook and Instagram; iPhone app: notifications and sharing into the app) · Previously updated 2026-09-25 (rewrote the summary and what we store for the web app and the iPhone app; added usage measurement, service providers and Sign in with Apple) · Operated by Elli & Tee Inc., United States · Contact: support@everysqueeze.com · Support

The short version: EverySqueeze is a web app at everysqueeze.com and an iPhone app that shows the same web app. To publish and track your videos it stores your account, your videos and the data from the accounts you connect on our servers, hosted by Cloudflare. We do not sell your data or use it for advertising, and we do not run third-party analytics, ad trackers or pixels. The one exception is referral tracking for our affiliate program (below): when it is switched on, the home page and the sign-up page use Rewardful so a partner who sent you to us can be credited. While you use the app it sends a periodic signal that it is open, which we use to see which accounts are active. We also study combined, de-identified data across many creators to improve EverySqueeze, give recommendations and publish what works, never in a way that identifies you, and you can opt out (see Research). You can disconnect any platform, or delete your whole account, from Settings.

What we collect, and where it lives

Your account. Your email address, the name you or your sign-in provider share with us (Google, Apple, Discord or TikTok, depending on how you sign in), your workspace id, the ids of the accounts you connect, and the sign-in records we need to let you back in (a password, if you set one, is stored only as a salted one-way hash).

Your content and connected-account data. The videos, cover images and thumbnails we copy from your TikTok account or that you upload (including from your iPhone's photo library, only when you choose a video), your captions, schedules, templates and product picks, the posting records and coverage we track across platforms, and earnings data from accounts you connect: TikTok Shop orders and commissions, and Amazon Associates and Creator Connections earnings if you use the extension (below). This is stored on our servers so the service can publish and track your videos, and it stays there until you disconnect the account it came from or delete your data (see below).

Messages you send us. Support emails, and notes you send from the app (for example feedback on a product pick), with the workspace they came from.

Usage. While you are signed in and the app is open and in view, it sends a small signal about once a minute that the app is open. From it we keep when your workspace was last active and a daily count of those signals for each workspace. We use this to see which accounts are active and to support you; if you have an assistant, the owner's assistant dashboard shows the assistant's own activity for the day. It is not used for advertising and not shared.

On your device. Your theme choice and a few display preferences are kept in your browser's storage (or the iPhone app's web storage). Clearing site data or removing the app erases them.

Server logs. Our host (Cloudflare) keeps standard, short-lived request logs (IP address, user agent, requested URL) to operate and secure the service. We do not build profiles from them.

Visit counts on the public pages. Our own server counts visits to the public pages of everysqueeze.com (the home page, the sign-up page, Help, the blog and pages like this one) without cookies: each visit adds one to a daily total for the page, the site that linked to it, any campaign tag in the link, the country and the type of device, and no IP address is stored. To count a visitor once a day we use a scrambled code made from the IP address and browser type; it cannot be turned back into either, it is different every day, and it is deleted when the day ends.

No third-party analytics or advertising. The site and the iPhone app contain no third-party analytics, pixels, or ad code, and we do not track you across other companies' apps or websites.

Referral tracking for our affiliate program. EverySqueeze has an affiliate program: partners share a link to EverySqueeze and earn a share of what the people they refer pay us. When the program is switched on, the home page and the sign-up page load a script from Rewardful, the service that runs the program. If you arrive through a partner's link (for example one ending in ?via= and the partner's code), Rewardful records the visit and keeps a referral code in a cookie on your browser for up to 60 days, so that partner can be credited if you join. Rewardful receives what any website receives when your browser loads its script (your IP address, browser type and the page address). If you then sign up, we keep that referral code and the partner's code with your signup. When you subscribe, we attach the referral code to your billing record at Stripe, and Rewardful reads from Stripe the payments you make, so it can calculate the partner's commission. The partner sees that someone they referred signed up and paid; we do not give partners your email address. The script is not loaded inside the iPhone app or in the signed-in app, and it is not used for advertising.

Service providers. These companies process data for us, only to provide the service, and each gets only what its job needs:

Cloudflare hosts the service: storage, video delivery, the request logs above, and a bot check on the sign-in page when it is switched on. AI models that run on Cloudflare also find the help articles for a question you ask Pip (the cleaned question, see below) and stand in as a backup for parts of product matching.
Resend sends sign-in and account emails, so it receives your email address and the email.
Stripe handles billing on the website. Card details go to Stripe, not to us.
Rewardful runs referral tracking for our affiliate program (above). If you join the program as a partner, your name and email are used to create your partner account there, and payouts and tax details are handled in Rewardful's portal.
Anthropic provides the AI model we use to match your videos to products and to your posts on other platforms, and to draft captions and titles (below). We send it the relevant video frames or thumbnails, titles, captions and product details, never your passwords or access tokens.
OpenAI provides an AI model we use to check that our product matches are right. We send it video frames and covers, product photos, product names and the video caption (with @handles and email addresses removed), never your passwords or access tokens.
We use a provider of public social media data to look up public information: we send it public handles and the public links of videos, posts and products (your TikTok videos and TikTok Shop products, your public Facebook and Instagram posts when we check which video each one is, and your Amazon storefront's address if you add it), and it returns the public profile, post, product and transcript information shown there.
We use a provider of Amazon product and price data to search Amazon's catalog for the products in your videos. We send it product names, search words and Amazon product ids, nothing about you. Amazon's own product service is used the same way, to look up products and build product links.
Sentry (error monitoring), when it is switched on, receives a report when something on our servers fails: the kind of error, its message with email addresses, codes and tokens, @handles, link details and quoted text masked out, where in our code it happened, which part of the service it was, and your workspace id. It never receives your requests, cookies, content, name or email.
Google Fonts. The signed-in web app loads its typeface from Google's font service, so Google receives what any website receives when your browser loads a file from it (your IP address and browser type).
Your browser's push service (for example Google's, Mozilla's or Microsoft's) delivers notifications if you turn them on in your web browser. Each notification is encrypted, so the push service cannot read it. In the iPhone app, Apple delivers them (see the iPhone app).

We do not sell data to anyone.

AI features (Anthropic). To match your videos to products and to your posts on other platforms, and to draft captions and titles, we send Anthropic the relevant video frames or thumbnails, titles, captions and product details, never your passwords or access tokens. Anthropic processes this data only to return results to us and, under Anthropic's commercial terms, does not use it to train its models.

Questions you ask Pip. Pip is the in-app assistant. Before a question is used, we remove email addresses, phone numbers, long codes and tokens, and anything written after words like “password”, “code” or “token”, and we replace each web link that starts with http:// or https:// with just the name of its site. We then send the cleaned question, the earlier messages in that chat, the name of the screen you are on, matching help text and, so Pip can answer about your own account, a few short facts read from it (for example whether a platform is connected or what is scheduled, and earnings totals if you are the account owner) to Anthropic. The cleaned question and Pip's answer are also kept in our own log, with your workspace id, for 30 days and then deleted; we read them to find questions Pip could not answer and to improve its answers.

Shared product matching. When you copy or publish a link for a TikTok product, or confirm, pick or correct which Amazon product it matches (including “none of these match”), that choice may be added to a shared record for that TikTok product. The record holds the product ids, a count, and an internal workspace code used only to count each workspace once; it does not hold your name, email or account details. We use the combined choices of several creators to improve product matching and suggested links for everyone. Because the record is shared, it is not removed when you delete your workspace.

Your agreement to our Terms. When you agree to the Terms of Service (when you create an account, or when we ask you to agree to an updated version), we keep a record of the version you agreed to, when and how you agreed, the email on the account, the country our host reported for the request, and a one-way hash of your browser's user agent. We do not store your IP address or your full user agent in it. We keep this record even after your workspace is deleted, as evidence of the agreement.

Research and combined insights

We study, across many creators, what helps reposted videos do well: for example, whether a Facebook product link gets more clicks in the caption or in the first comment. We use what we learn to improve EverySqueeze and its defaults, to give creators recommendations, and to publish research about what works. This always uses data combined across many creators, with anything that identifies you removed, never one creator's account on its own.

What it can use. EverySqueeze's own records of what it does for you: which video went to which platform and when, the settings in force at the time (for example whether Auto DM or a first comment was on), simple facts about each caption (whether it had a link, its length, how many hashtags; not the text itself), clicks on product links that go through EverySqueeze, how many automatic link messages were sent, and posts that failed. To improve the service and for recommendations inside EverySqueeze only, it can also use the views and engagement of your Facebook and Instagram posts and the public information about your posts that our public data provider returns (see Service providers). Numbers from Facebook and Instagram are never used in published research.

What it never uses. Your name, email address and @handles; the text of your captions, comments and messages; commenters' names; your passwords and access tokens; any data we receive through YouTube API Services (see YouTube); data from your TikTok Shop connection and from the TikTok video-list connection; and the Amazon earnings the extension reads.

How it is protected. Research works on a separate copy of the data in which your workspace and your posts are replaced by scrambled codes, with no names, emails or handles in it. It is never used to make a decision about your account. A result is shown to creators (in the app, in Help or in a support answer) only when it combines at least 20 creators and 200 posts and no one creator makes up more than a fifth of it. Published research combines at least 25 creators, uses rounded numbers, shows no dollar amounts, and never names a creator, an account, a post, or a product or brand used by fewer than 25 of those creators. We do not sell this data, we do not use it for advertising, and we never try to identify anyone from combined results.

Tests. Sometimes we compare two versions of a feature that you could already choose yourself in Settings, for example where a product link goes in a caption. A test that changes what is posted from your accounts runs only if you opt in to it. A setting you picked yourself always wins, and you can leave a test at any time.

Opting out. Email support@everysqueeze.com from the email on your account and ask to be left out of research. Within 7 days your data stops being used in research and in the combined results behind recommendations. Results already published stay as they are, because they identify no one. Opting out changes nothing else about your account. When your workspace is permanently deleted (see Delete my data), its data is removed from research data the same way.

Connected accounts (for example, TikTok Shop)

Some features let you connect an external account so the tool can show you your own data — for example, connecting TikTok Shop so we can display which products in your showcase match brands on other platforms. When you connect an account:

You choose the scopes. The platform's consent screen lists exactly what we request, and we request read-only access unless a feature clearly requires more. You can decline individual permissions where the platform supports it.
What we receive: access tokens and the data those scopes cover (for TikTok Shop: your creator profile, your showcase product list, your collaborations, and related commission information). We never see or store your password.
How it's used: solely to power the feature you connected it for — cross-referencing, display, and recommendations shown to you — plus, for Facebook and Instagram only, the combined, de-identified use described under Research. TikTok Shop data is never used in research. We do not sell it, share it with other users, or use it for advertising.
Storage and protection: tokens and synced data are stored encrypted at rest, transmitted only over TLS 1.2+, and accessible only to this service.
Automatic cross-posting is opt-in. By default, nothing is ever published anywhere without you pressing Post on a specific video. If you turn on auto-posting for your account, the engine publishes your new TikTok videos to the platforms you selected, using captions derived from your own content; every auto-post is visible in your dashboard, and you can turn the setting off at any time, which stops it immediately.
Deletion on disconnect: every connected platform has a Disconnect button in Settings. For YouTube, Pinterest, Facebook and Instagram, disconnecting deletes the stored tokens and the data we synced from that account. For TikTok, disconnecting an account deletes its token and stops new videos and data from being imported; the videos already imported stay in your library until you use Delete my data (below), because several TikTok accounts can feed one library. Disconnecting YouTube also revokes EverySqueeze's access at Google. For the other platforms, disconnecting changes nothing on the platform itself: revoke our access there too if you want to (TikTok Shop's authorized apps, Facebook's Business Integrations, Pinterest's connected apps).
Delete my data: Settings → Account and device → Delete my data disables your sign-in right away and permanently deletes everything we hold for your workspace after a 7-day grace period, once our scheduled cleanup runs: your tokens, synced data, coverage records, and the video and image files stored for you (a file that another EverySqueeze workspace also uses stays for that workspace). A restore link is emailed to you and works for those 7 days. You can also email us to ask for the same deletion.

The EverySqueeze Chrome extension

If you install the extension, it works inside the Amazon Associates session you are already signed in to. It never asks for or stores your Amazon password. With your permission it reads your own earnings reports to build a list of the products you have sold, requests acceptance of Creator Connections and, if you turn it on, Sponsored Products campaigns in your own account, and reads your own Creator Connections earnings report.

What it sends to us: that product list (product IDs, titles, brands and variation IDs), the Amazon account id and store ids it came from, which campaigns were accepted and how each run went, and your Creator Connections earnings figures. All of it is stored in your own workspace only, over HTTPS, and is deleted with the rest of your workspace when you use Delete my data. The rest of what the extension learns stays in your browser's extension storage, kept separately for each Amazon account, and you can remove it for one account from the extension menu.

Nothing is accepted until you confirm the consent step in the extension menu, and you can turn the daily run off at any time. We do not sell or share this data, and we do not use it for advertising.

The EverySqueeze Chrome extension's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

The EverySqueeze iPhone app

The iPhone app shows the same EverySqueeze web app, so everything on this page applies to it. It asks for access to your camera and microphone, or your photo library, only when you choose to film or upload a video, and it reads only the video you pick. It does not use Apple's advertising identifier and does not track you across other companies' apps or websites. You can delete your account from inside the app: Settings → Account and device → Delete my data.

Notifications. If you allow notifications, the app registers with Apple’s push notification service. We store the device token Apple gives us under your account and use it only to send you EverySqueeze notifications (for example, a video ready for you or a post that needs attention). The token is removed when you log out or delete your account, and you can turn notifications off at any time in your iPhone’s Settings.

Sharing into the app. When you use Share → EverySqueeze from another app, the video or link you picked is handed to the EverySqueeze app on your phone and is uploaded only when you continue in the app. Nothing else from the other app is read.

Signing in with Apple

Where it is offered, you can sign in with Apple. Apple then shares an identifier for your Apple account, your email address (which may be a private relay address Apple forwards to you) and, the first time only, your name. We use them to sign you in and match you to your EverySqueeze account. When you sign in, Apple also issues us a token for your Apple sign-in. We store it encrypted, and we use it for one thing: when your account is permanently deleted, we tell Apple to revoke EverySqueeze's access. You can also stop using Sign in with Apple for EverySqueeze at any time in your Apple ID settings.

Signing in with Discord

Where it is offered, you can sign in with Discord. Discord then shares your Discord user id, username and the email address on your Discord account. We use that email to sign you in only if Discord has verified it, and we match it to your EverySqueeze account exactly as we would an email sign-in link. During each Discord sign-in we also check whether you belong to one Discord server, the AIC community server; members receive lifetime full access. Signing in never reads your other servers, your direct messages or your friends list.

What we keep. Your email and your EverySqueeze account, as with any sign-in. If you are an AIC member, we keep a grant record with your Discord user id, your email and the workspace the access applies to, so one Discord account grants access only once. That record is kept even after your workspace is deleted, like our other access-grant records. We do not keep Discord's access token: it is used for these reads during sign-in and then discarded. You can remove EverySqueeze from your Discord account at any time under User Settings, Authorized Apps.

Connecting Discord to your account. Where it is offered, you can also connect Discord from Settings while signed in. Discord then shares your Discord user id and username (not your email). We keep your Discord user id and username with your account so that signing in with that Discord account opens it, even if Discord holds a different email, and we run the same one-server membership check. You can disconnect it in Settings at any time; that removes the connection and leaves any access already granted in place.

Our Discord bot. EverySqueeze runs a bot in its own Discord community server. Where it is offered, when you connect Discord and allow it to add you to that server, the bot adds you and gives you the server's member role. The bot also reads the messages people post in that server's channels, with their Discord user ids and usernames, so our team can see and answer support questions in one place, and matches the authors to EverySqueeze accounts; it never posts, reacts, edits or deletes there. To confirm AIC membership, it can read the AIC server's member list (Discord user ids, usernames and display names), which we keep as a member list. The bot never reads your direct messages or any other server.

YouTube API Services

EverySqueeze uses YouTube API Services. If you connect your YouTube channel, you are additionally agreeing to the YouTube Terms of Service, and Google's handling of any data it receives is governed by the Google Privacy Policy.

What we read. Only the channel you authorise, and only your own uploads — video title, publish date, duration, and the public statistics YouTube already shows on the video. We use this for one purpose: to build the coverage checklist that tells you which of your own videos have and have not been published to each platform you use.

What we write. Nothing, unless you explicitly choose a specific video and press publish — or you have explicitly turned on the optional auto-cross-posting setting for your account, in which case the app may upload your new videos to your own channel with titles and descriptions derived from your own content. You can turn that setting off at any time; with it off, publishing is strictly per-video and manual. We never post in bulk to channels you do not own.

Only when you approve it (by pressing Apply on a video, or by turning on automatic link adding, which is off by default and comes with an Undo), we edit the description of your own YouTube videos to add your own product link block (using the YouTube API's videos.update method). We change nothing else on the video, and Undo removes only the block we added.

What we never do. We do not read channels you do not own, do not access other users' data, do not build advertising profiles, and do not sell, rent or share YouTube data with third parties. Nothing derived from YouTube data is used to target advertising. YouTube data from your channel is never combined with other creators' data, and it is never used for research, for recommendations to other creators, or in published findings (see Research).

Storage and retention. Authorisation tokens are stored encrypted, scoped to your account alone, and are used only to serve your own requests. Video metadata is cached only as long as needed to render your coverage view: it is refreshed on each sync and permanently deleted within 30 days of disconnecting your channel or your account becoming inactive. If an account has had no use and no posting by EverySqueeze for 30 days, we revoke its YouTube access at Google and delete its YouTube token and YouTube data; connecting YouTube again starts fresh. When you use Delete my data, your YouTube access is revoked and your YouTube data deleted right away, without waiting for the 7-day restore window.

Revoking access. You can disconnect inside EverySqueeze at any time, which revokes our access at Google and deletes the stored token and the metadata synced with it. You can also revoke independently of us, at any time, via Google's security settings: security.google.com/settings/security/permissions. Revoking through Google immediately ends our access whether or not you tell us.

Limited Use. EverySqueeze's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalised AI/ML models, and we do not transfer it to third parties for that purpose.

Google Drive backup (optional)

Back up to Google Drive is optional and off until you connect it in Settings → Accounts & platforms. You sign in to Google and give EverySqueeze one permission, drive.file: access only to the files and folders EverySqueeze itself creates in your Drive. It cannot see, change or delete anything else in your Drive.

What it stores. Once connected, each new TikTok video is copied to your own Drive, into a folder named EverySqueeze Backups (then your @handle and the month), with the caption as the file name and, in the file's description, the caption, the date it was posted, its TikTok link and its video id. EverySqueeze only adds files; the one change it makes to a backup is to swap in a sharper copy of the same video, once. It never deletes anything from your Drive. On our side we keep the Google sign-in for this connection, the email and name of the Google account (shown on the account card), the backup settings, and a record of which videos were copied so the same video is not copied twice.

Turning it off. Switch off “Back up new TikTok videos”, or press Disconnect on the Google Drive account card. Disconnect stops backups and deletes the stored Google sign-in and the videos waiting to be copied; it never touches your Drive, so files already there stay until you delete them. It is separate from your YouTube connection. To remove EverySqueeze's access on Google's side, use myaccount.google.com/permissions (if that is the same Google account you use for YouTube, that also ends YouTube access). Use of information received from Google APIs for this feature follows the same Limited Use commitment as the YouTube section above.

Meta Platforms (Facebook & Instagram)

If you connect a Facebook Page or Instagram professional account, we use Meta's APIs to publish the specific videos you choose to your own Page or account, to read back your own posts so your coverage view stays accurate, and, if you turn them on, to help you answer comments on your own posts (below).

Two ways to connect Instagram. You can connect Instagram through your Facebook Page (Facebook Login), or connect your Instagram professional account directly without Facebook (Instagram Login). With Instagram Login we receive your Instagram account id, username and account type, an access token for that account and the permissions you granted; nothing about your Facebook account. When both are connected and your Facebook Page is linked to your Instagram account, posts go through the Page and the Instagram connection waits on standby; a video is never posted to Instagram twice because two connections exist.

What we write. By default, a post is created only when you press Post on a specific video, with a caption you approved. If you turn on the optional auto-cross-posting setting, the app may also publish your new TikTok videos to your own Page or account as they appear — a setting you control and can turn off at any time. What we read: your list of managed Pages (to let you pick one), and the content and basic engagement of posts on that Page, used to show you your own coverage and results and, combined with other creators' data and de-identified, to improve EverySqueeze and the recommendations it gives (see Research). It is never used in published research.

Comments and link messages. If you use Engage or Auto DM, we read the comments people leave on your own posts (the commenter's name or username, the comment text and its time), which Meta sends us as they arrive, so you can see them and answer. When you post a comment or send a link, it goes out from your own Page or account. Auto DM sends one private message per comment, only to a person whose own comment asked for the link using a trigger word you chose, with the link for that video (and any extra buttons you added) and the disclosure you picked; never to anyone else and never in bulk. It only answers recent comments, and only once per comment. Messages are paced, with a gap between them, and stay within the limits Meta sets and the limits we set for each account. When a limit is reached, a message waits its turn, and if the comment is by then too old it is not sent at all. If Meta asks us to slow down, nothing is sent from that account until Meta's wait is over; if Meta refuses a message for a policy reason, it is never retried. Commenters' names and comment text are kept for 30 days, then deleted. We record which comments were answered so the same comment is never answered twice. We do not read your inbox or other people's posts.

Storage, deletion, revocation. Page and account tokens are stored encrypted and scoped to your workspace alone. A Facebook connection serves both your Page and the Instagram account linked to it, so the Facebook and Instagram cards share one Disconnect button: disconnecting deletes the stored token and every piece of Facebook and Instagram data we synced (post lists, coverage records, pictures, stored comments) — except, when Instagram is also connected directly with Instagram Login, the Instagram data, which stays with that connection. An Instagram Login connection has its own Disconnect button, which deletes its token and the Instagram data it synced. You can also revoke our access at any time: for Facebook in your Facebook settings under Business Integrations, for Instagram Login in the Instagram app under Settings and activity > Website permissions > Apps and websites. Revoking ends our ability to read or post immediately. Removing EverySqueeze in Instagram, or asking Instagram to delete your data, also tells us: we then disconnect that Instagram Login connection and delete the Instagram data it synced automatically. Revoking Facebook does not by itself delete what we already synced — use Disconnect for that, or Delete my data to remove your whole workspace after the 7-day grace period.

Where it is offered, you can also connect your TikTok account through TikTok's own login, with two permissions: user.info.basic and video.list. We use it to list your own public videos so new ones are found quickly: each video's id, caption, title, post date, duration, cover image, link and its public view, like, comment and share counts. This connection does not give us your video files, your TikTok Shop products or your messages. Its token is kept with your workspace and used only for these reads. Disconnecting it in Settings asks TikTok to revoke our access and deletes the token; the videos already in your library stay until you use Delete my data. You can also remove EverySqueeze in TikTok's own settings.

If and when you connect a Pinterest account, the same rules apply. We read your Pinterest username and profile picture, your list of boards (so you can choose where Pins go) and the processing status of the videos we upload. We publish only the Pins you explicitly create from your own videos or turn on automatic posting for, and we create only the boards you approve. We do not read your Pins' analytics. Your Pinterest tokens are kept with your workspace in our hosting provider's storage, which encrypts all stored data at rest; EverySqueeze does not add its own separate encryption to them. We delete tokens and synced data on disconnect. We never read other users' data or use Pinterest data for advertising.

Affiliate links

Some outbound links are affiliate links and are labeled as such where they appear. If you buy through one, the operator earns a commission from the vendor at no extra cost to you. Vendors do not send us data about you beyond that a purchase occurred through our link.

Cookies

We use only strictly necessary cookies, which the service cannot work without, plus, while our affiliate program is switched on, Rewardful's referral cookie on the home and sign-up pages (see Referral tracking). We do not use advertising cookies or analytics cookies. The cookies below are set by everysqueeze.com and are marked HttpOnly and Secure (so scripts on the page cannot read them), except es_ws, which is Secure only.

Staying signed in. sq_gate keeps you signed in for 30 days and is renewed while you keep using the app (a sign-in from an emailed invite link lasts 90 days). sq_gx and sq_lo are small companion markers that time its renewal and make sure signing out sticks, with the same 30-day life. tt_session remembers which TikTok account you signed in with, for 30 days. es_ws remembers a workspace you chose on the join page, for up to a year. Signing out clears them.
Connecting an account. While you sign in or connect Google, Apple, Discord, TikTok, Facebook, Instagram, YouTube, Pinterest, Snapchat or Google Drive, short-lived cookies (for example g_state, ap_state, d_state, tt_state, tt_ok, fb_state, yt_state, gd_state and es_return_*) hold a one-time random code that protects the round trip to that provider. They last 10 to 15 minutes and are cleared when the step ends.
Agreeing to the Terms. es_tos carries your tick of the Terms box through sign-in. It lasts 30 minutes.

How long we keep things

These are the fixed periods the service applies. Everything else stays until you disconnect the account it came from or delete your data (above).

Questions you ask Pip, and its answers: 30 days.
Commenters' names and comment text from your Facebook and Instagram posts: 30 days.
Public-page visit totals: 90 days. The scrambled daily code used to count a visitor once is erased when that day ends.
YouTube data: refreshed on each sync and deleted if it cannot be refreshed within 30 days (see the YouTube section).
A workspace you delete: sign-in is disabled at once, you have 7 days to restore it, and then the data is permanently deleted when our scheduled cleanup runs. The record of your agreement to the Terms and the shared product-matching record described above are kept after that.
Research data: your data stops being used within 7 days after you opt out or your workspace is permanently deleted. Combined results already made, which identify no one, are kept.
Cookies: lifetimes are listed above.

Your rights

Email support@everysqueeze.com to ask what we hold about you, to request deletion, or to ask questions about this policy. You can also act yourself: disconnect a platform from Settings to delete what we synced from it, or use Settings → Account and device → Delete my data (on the website or in the iPhone app) to delete your whole account, as described above. Step-by-step help is on the Support page.

Children

This service is for working creators and is not directed at children under 18. Every monetization programme it describes requires adulthood; do not use the service if you are under 18.

Changes

Material changes to this policy will be dated here and noted on the site's "What's changed" page. We will not weaken the deletion-on-disconnect commitment retroactively.