Privacy Policy

Share Dock (“we”, “us”) is a tool for preparing, scheduling and publishing posts to social networks. This policy explains what we collect when you use Share-Dock.com, why, who receives it, and how you can see, change or delete it. Share Dock is operated by Habib Latif, an individual. You can reach us about privacy at habib@hyznlabs.com.

What we collect

Your account

• Your email address, name and password. Passwords are stored only as a one-way hash; we cannot read them.
• If you turn on two-factor sign-in, the secret for your authenticator app and your backup codes.
• Records of your sign-ins: active sessions, and a fingerprint of the devices you sign in from so we can warn you about a new device.

Your workspaces and posts

• Workspace names, time zones and the people you invite.
• The posts you write, their versions, schedules and the text or media you choose for each network.
• Photos and videos you upload. We check each file, keep the original, and make a cleaned copy for publishing (with location and other hidden photo details removed), a small preview image and, for photos Instagram needs as JPEG, a JPEG copy.
• Results from each network: the post’s ID and link, its status, and error messages, so you can see what happened.
• A history of important actions in a workspace (for example who connected or disconnected an account) for security and support.

Connected social accounts

• When you connect X, YouTube or Instagram, you approve Share Dock on that network. We receive and store the account’s ID, name, handle, the permissions you granted and the access tokens the network issues.
• Access tokens are encrypted before they are stored, and are used only to publish what you scheduled and to check its result. We never ask for or store your password for a social network.

We do not use your data for advertising, we do not sell it, and Share Dock does not use artificial intelligence to read, write or change your posts.

Why we use it

• To run the service you asked for: signing you in, saving your work, publishing at the time you chose and showing the result.
• To keep accounts secure: detecting new devices, rate limits, and investigating abuse.
• To send you emails you need: verifying your address, resetting your password, new sign-in alerts and posts that need your attention.
• To meet legal obligations.

Share Dock is operated from Canada and handles personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), with your consent when you create an account and connect networks, and as needed to provide the service you asked for. If you are in the European Economic Area or the United Kingdom, we rely on the contract with you (to provide the service), our legitimate interests (security and abuse prevention) and legal obligations.

Google and YouTube data

When you connect YouTube, Share Dock asks Google for two permissions: to upload videos to your channel (youtube.upload) and to read your channel’s basic details (youtube.readonly), which we use to show which channel is connected. We use them only to upload the videos you schedule and to check whether YouTube has finished processing them.

Share Dock’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service; Google’s handling of your data is described in the Google Privacy Policy. You can remove Share Dock’s access at any time from your Google Account permissions page, as well as by disconnecting in Share Dock.

Who receives your data

• The social networks you connect. The posts, photos and videos you schedule are sent to the network you chose, at the time you chose, under that network’s own terms and privacy policy.
• Service providers that run Share Dock for us: server hosting ([hosting provider and country]), file storage (Cloudflare R2), transactional email (Resend) and, once paid plans exist, payments (Stripe). They process data only on our instructions. Some of them store or process data outside Canada, including in the United States, where it may be accessible under the laws of that country.
• Have I Been Pwned (Pwned Passwords). When you choose a password, we check it against known leaked passwords. Only the first 5 characters of a one-way hash of the password are sent; your password, email and the full hash never leave Share Dock.
• When the law requires it, or to protect people from harm or fraud.

For Instagram, a photo or video is sent by giving Instagram a private link to that one file that stops working after 15 minutes.

How long we keep it

• Access tokens for a connected network are deleted as soon as you disconnect that account.
• Your account, workspaces, posts and files are kept while your account exists. After your account is closed they are deleted from our live systems within 30 days, and from our encrypted backups within 35 days.
• Security records (sign-in history, recognised devices and the history of actions in a workspace) are kept for 12 months. Emails waiting to be sent are deleted once sent or expired.

Deleting your data

• Disconnect a social account: in Share Dock, open Accounts and choose Disconnect. Its stored tokens are deleted immediately and nothing more is sent to that network. You can also remove Share Dock from the network’s own settings.
• Delete particular posts or files: open the post and choose Delete post, or choose the bin icon next to a file in the media picker. The post with its versions and results, or the file with all its copies, is deleted from our live systems straight away (stored files within a few minutes). A post cannot be deleted while it is scheduled or being sent; unschedule it first. Posts already published stay on the network until you delete them there.
• Delete your whole account: email habib@hyznlabs.com from the address you sign in with and ask us to delete your account. We will confirm and delete your account, workspaces you own, posts, files and connected-account data within 30 days, except records we must keep by law.

Your rights

Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, receive a copy, withdraw consent, object to some uses, and complain to a data protection authority, in Canada the Office of the Privacy Commissioner of Canada. Email habib@hyznlabs.com and we will answer within 30 days. To get a copy of your data, email us from the address you sign in with; we will send you a file (JSON) with your account details, workspaces, connected accounts, the posts you created with every version and result, and a list of the files you uploaded. The file lists your uploads but does not contain the photos and videos themselves.

Security

Data is sent over encrypted connections. Social network tokens are encrypted with keys kept separately from the database. Each workspace’s data is isolated at the database level.

Children

Share Dock is not meant for children under 13, or under the age of digital consent where they live if that is higher, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect. See also our Terms of Service.