Privacy Policy

Last updated: July 14, 2026

We respect your privacy. We do not sell your personal data. We collect and use only the information needed to operate Ferryman, including cross-posting, scheduling, drafts, analytics, AI-assisted writing, video sync, backups, billing, referrals, and programmatic posting features.

Information We Collect

• Account information: Your name, email address, profile image, username, referral username, subscription status, settings, and authentication/session information.
• Connected platform information: Account IDs, usernames, profile images, follower counts, OAuth scopes, access tokens, refresh tokens, app passwords, custom Mastodon or Bluesky server details, and connection status for platforms you connect.
• Content: Posts, threads, captions, uploaded images or videos, drafts, scheduled posts, content plan slots, platform selections, platform groups, posting preferences, skip phrases, promo reply text and links, and per-platform options such as Instagram feed/story settings or TikTok privacy and interaction settings.
• Cross-posting history: Source post IDs, target post IDs, URLs, status, errors, target surfaces, timestamps, and deduplication records used to prevent repost loops.
• Analytics and performance data: Follower counts, likes, reposts, replies, quotes, views, impressions, engagement snapshots, origin-post metrics, milestone notifications, and aggregate usage statistics.
• Video sync and backup data: Video IDs, source URLs, generated or temporary media URLs, backup file names, file sizes, MIME types, backup status, destination folder or file IDs, and backup preferences.
• Billing and referral data: Stripe customer and subscription identifiers, plan type, trial or subscription status, referral relationships, referral reward status, and signup attribution such as referrer URL or domain.
• Programmatic access data: API key labels, key prefixes, hashed API keys, last-used timestamps, and related audit information for MCP or agent posting features.
• Support, contact, and operational data: Messages you send us, email notification preferences, request metadata, logs, error messages, rate-limit records, IP address, user agent, and cookies needed for authentication, security, attribution, and measurement.

How We Use Information

• Authenticate you and keep your account secure.
• Fetch content from your selected origin platforms and publish, schedule, or save content to your selected target platforms.
• Process media uploads, video cross-posting, native draft modes, and platform-specific publishing settings.
• Generate analytics, engagement charts, follower reach, performance summaries, and milestone notifications.
• Provide AI-assisted drafting, content planning, text splitting, and optional per-target content transformations.
• Back up eligible videos to storage destinations you connect, such as Google Drive or Dropbox.
• Manage subscriptions, trials, invoices, plan limits, referrals, rewards, and support requests.
• Prevent abuse, enforce rate limits, debug errors, maintain reliability, and improve Ferryman.

Connected Social Platforms

When you connect a platform, Ferryman uses the permissions you authorize to read your eligible source content, display connection status, fetch public or account-level metadata, publish posts, upload media, refresh credentials, and collect engagement metrics where supported. Connected platforms may include X/Twitter, Bluesky, LinkedIn, Mastodon, Threads, Instagram, YouTube, TikTok, Facebook, and Substack.

We share content and related metadata with connected platforms only as needed to perform the actions you request or enable, such as publishing a post, uploading a video, creating a draft, or refreshing analytics. Those platforms process the information under their own privacy policies and developer terms.

Google User Data

If you connect YouTube, Ferryman accesses the following Google user data through the YouTube Data API:

• YouTube channel information: Your channel name and ID, used to identify your account and display your connection status.
• YouTube video metadata: Title, description, publish date, duration, privacy status, and video ID for eligible videos, including Shorts used for video sync.
• YouTube upload access: Permission to upload videos to your YouTube account when you choose YouTube as a video target. Draft/private publishing options may be used where supported.

If you connect Google Drive for video backup, Ferryman accesses your Google profile/email to identify the connection and uses the Drive file permission to create and manage files and folders that Ferryman creates or opens for the backup feature. We do not request broad access to all files in your Drive.

We do not access your watch history, playlists, subscriptions, comments, or other YouTube data beyond what is needed for the features you enable. Google OAuth tokens are encrypted at rest and used only to access the data and actions described above. You can revoke access at any time via your Google Account permissions.

Ferryman's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI Features

Ferryman may send the content you provide, relevant conversation history, uploaded image URLs, scheduling context, and, for eligible users, writing-avatar context derived from your post history and performance patterns to Anthropic to provide AI-assisted drafting, content planning, rewriting, polishing, and text splitting. We use this only to provide the AI features you request or enable. Do not submit sensitive personal information in prompts or drafts that you do not want processed by AI providers.

Backups and Media Storage

When you upload images or videos, or when Ferryman processes video sync, media may be stored with our hosting or object-storage providers so it can be published, previewed, scheduled, backed up, or processed by platform APIs. If you enable video backups, Ferryman transfers eligible video files and metadata to the backup destination you connect, such as Google Drive or Dropbox.

Payments, Referrals, and Measurement

Payments and subscription management are handled by Stripe. Ferryman stores Stripe identifiers and subscription status, but does not store full payment card numbers. We may send billing, trial, purchase, referral, and attribution information to Stripe and, where configured, hashed email, IP address, user agent, click identifiers, and event metadata to Meta's Conversions API for advertising measurement. We use cookies and similar technologies for login, security, referral attribution, and measurement.

How We Share Information

We share information only with service providers and connected platforms needed to operate Ferryman. This includes hosting, database, storage, email, analytics, AI, payment, advertising measurement, and connected social or backup providers. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

Security

We use technical and organizational safeguards designed to protect your data, including encrypted OAuth tokens and app passwords at rest, hashed API keys, access controls, secure cookies, and limited-use credentials. No system is perfectly secure, but we work to reduce risk and limit access to information needed to operate the service.

Your Choices and Rights

You can disconnect connected accounts, revoke platform permissions, disable sync flows, delete drafts or scheduled posts, revoke API keys, and update settings from Ferryman or from the connected platform's permission settings. You may request access, correction, export, or deletion of your personal information by contacting support@ferryman.io. Deleting or disconnecting data may limit Ferryman's ability to provide related features.

Retention

We retain information for as long as needed to provide Ferryman, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and preserve operational records. Some records, such as billing, audit, analytics, error, and anti-abuse records, may be retained after account deletion where necessary or legally required.

Children

Ferryman is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy as Ferryman changes. When we make material changes, we will update the date above and provide additional notice where appropriate.

Contact

If you have questions or requests about this policy or your data, contact us at support@ferryman.io.

We comply with applicable privacy laws, including GDPR and CCPA where they apply, and with applicable platform policies, including Meta's platform policies.

By using this service, you agree to this policy.