Privacy policy
Last updated: 27 October 2026
The short version: we keep what we need to run Zoomclap for you, we post only what you or your team schedule, we never sell your data or use it for advertising, and you can delete it at any time.
This policy explains how Zoomclap ("Zoomclap", "we", "us") handles personal data when you visit www.zoomclap.com, join our waitlist, or use the Zoomclap app at app.zoomclap.com (together, the "Service"). Zoomclap is a social media planner: teams use it to plan, design, approve, schedule and publish posts to their own social media accounts.
What we collect
When you join the waitlist
Your email address, the date you signed up and the page you signed up from. Nothing else.
When you use the app
Account details: your name, email address and sign-in details. Passwords are handled by our sign-in provider (Amazon Cognito) and are never visible to us.
Workspace content: the briefs, posts, captions, hashtags, links, images and videos you or your team add, notes, schedules, approvals and the history of changes to each post.
Team information: the workspaces you belong to, the people you invite (their email addresses) and the role each person has.
Connected accounts: when you connect a social network, the names and IDs of the pages, profiles or boards you choose, and the access tokens the network gives us. Tokens are stored encrypted.
Publishing results: whether each post was published, its link on the network, and any error the network returned.
Post performance: for posts published through Zoomclap, the numbers the network reports for them, such as likes, comments, shares, saves, clicks, reach and impressions. These are totals only: we don't collect who liked or commented, or what the comments say.
Technical data: IP address, browser type and request logs, kept for security and to fix problems.
How we use it
To run the Service: show your calendar, store your media, route posts for approval, and publish what you scheduled at the time you chose.
To keep the Service secure: sign-in, rate limits, abuse prevention and investigating problems.
To contact you about the Service: your waitlist invite, important account messages, and changes to our terms or this policy.
We do not sell personal data, we do not use it for advertising, and we do not use your workspace content to train AI models. We process your data because it is needed to provide the Service you asked for, because of our legitimate interest in keeping it secure, or with your consent (for example, joining the waitlist), and where the law requires us to.
Social networks you connect
Zoomclap connects to Facebook, Instagram, Pinterest, LinkedIn, X, Threads, Bluesky and Mastodon only when you choose to connect an account, and only with the permissions you grant on the network's own consent screen. We use that access only to:
list the pages, profiles and boards you can post to, so you can pick which ones to add;
publish the posts your workspace scheduled or published, with their text and media, and a first comment if you add one;
read back the result of each post (published or not, and its link) and its performance totals (likes, comments, shares, saves, clicks, reach and impressions), to show you how your posts did.
We don't read your private messages, we don't post anything you or your team didn't create and schedule, and we don't share data from a network with anyone else. Media is sent to a network only for the time it takes to publish. Your use of each network is also covered by that network's own terms and privacy policy.
For Bluesky you give us an app password and for Mastodon an access token, instead of a sign-in screen. Use an app password, not your main password; you can revoke either at any time in that network's settings.
Who we share it with
We share personal data only with the service providers that run Zoomclap for us, under contracts that limit them to that purpose:
Amazon Web Services: sign-in (Cognito), media storage and delivery (S3, CloudFront), email.
MongoDB Atlas: the database that holds accounts, workspaces and posts.
Northflank: hosting for the Zoomclap app and its servers.
Anthropic: only if you use AI caption suggestions — the post text you ask it to work on.
We also send your posts to the social networks you connected, because that is what you asked us to do. We may disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of the business, in which case this policy continues to apply.
Where your data is stored
Your data is stored on servers in India (AWS Asia Pacific, Mumbai). Media may be delivered through a content delivery network with locations worldwide. Where data leaves your country, we rely on our providers' contractual safeguards.
How long we keep it
Waitlist emails: until we invite you or you ask us to remove you.
Account and workspace content: for as long as your account or workspace exists. Deleted posts disappear from the app straight away and are erased from our systems when the workspace is deleted, or within 30 days of you asking us to erase them.
Access tokens: until you remove the channel, the network revokes them, or your workspace is deleted.
Request logs: up to 90 days, unless needed longer to investigate a security issue.
Deleting your data
You can delete your data at any time:
One channel: in Zoomclap, go to Channels and choose Remove. Its access tokens are deleted straight away.
Facebook and Instagram: in Facebook, go to Settings & privacy → Settings → Business integrations (or Apps and websites), select Zoomclap and choose Remove. We are notified and delete the tokens of every page and Instagram account you connected through it, and remove those channels.
Other networks: revoke Zoomclap's access in the network's connected apps settings. The channel stops publishing; remove it in Zoomclap to delete its tokens.
Your whole account or workspace: email privacy@zoomclap.com from your account's email address. We confirm and delete it, including its posts and media, within 30 days.
The waitlist: email privacy@zoomclap.com and we remove your address.
Cookies
This website uses no analytics or advertising cookies. The Zoomclap app uses only the cookies needed to keep you signed in and protect your session; it doesn't work without them.
Security
Data is encrypted in transit and at rest, network access tokens are encrypted with keys kept separate from the database, media is held in private storage and served through signed, expiring links, and each workspace can see only its own data. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent. To use any of these rights, email privacy@zoomclap.com. We answer within 30 days. You can also complain to your local data protection authority.
Children
Zoomclap is a tool for businesses and is not meant for anyone under 18. We don't knowingly collect data from children.
Changes to this policy
If we change this policy, we update the date at the top. For important changes we tell you by email or in the app before they take effect. The terms that govern your use of the Service are in our Terms of service.
Contact
Questions about privacy or this policy: privacy@zoomclap.com.