Privacy Policy

Who we are

PlanSend is an approval-first social media scheduler available at plansend.io. It is made and operated by ULA SOFT LTD, a company registered in England and Wales (company number 16531031, 10-16 Tiller Road, 14/2e Docklands Business Center, London E14 8PX, United Kingdom). ULA SOFT LTD also sells and bills paid plans, and is the name you will see on card statements.

ULA SOFT LTD is the data controller for your PlanSend account, website and billing data. For the posts, media and comments that you and your team put into a workspace, your organisation decides what is collected and why, so your organisation is the controller and PlanSend processes that content on your instructions.

Questions about this policy go to [email protected].

What we collect

We collect only what the service needs to run. In practice that means:

• Account data. Your email address, name and avatar, received from Google when you sign in. PlanSend has no passwords of its own.
• Workspace and brand data. Workspace names, time zones, approval settings, team members and their roles, and the brands you manage.
• Posts and media. Draft text, per-channel variants, scheduled times, images and videos you upload, and the publishing results returned by each network.
• Review comments and approval decisions. When you share a review link, reviewers type a name and leave comments or decisions. Reviewers do not need an account, and we store only the name they give.
• Billing metadata. Your Stripe customer id, plan, billing interval and invoice status. Card details are entered on Stripe-hosted pages and never reach PlanSend servers.
• Audit and publishing logs. Who did what in a workspace and when, and the outcome of each publishing job, so your team can trace every change.
• Technical logs. IP address, browser user agent, requested pages and errors, kept for 30 days for security and troubleshooting.
• AI Assist input. The text you choose to send to AI Assist, used only to generate the suggestion you asked for.

How we use your data

• To provide PlanSend: sign you in, store drafts, run approvals, schedule posts and publish them to the channels you connected.
• To bill you and issue invoices through Stripe.
• To send service messages such as review requests, publishing failures and billing notices.
• To keep the service secure, detect abuse and debug problems.
• To understand how the website and the app are used, through Google Analytics 4, only if you accept analytics cookies. In the app we record a few product events (an account created, a channel connected, a post scheduled or published, a checkout started) with no post content, no channel names and no personal data.
• To send occasional product news, only if you opt in. Every marketing email includes an unsubscribe link.

We do not sell personal data, and we do not use your content to train AI models.

Legal bases

Under the UK GDPR and the EU GDPR we rely on the following bases:

Connected social networks

When you connect a channel, the network asks you to authorise PlanSend and returns an access token. We store that token encrypted, together with the account name and id, so that we can publish the posts you schedule. PlanSend publishes only content that a member of your workspace scheduled, and never posts, likes, follows or messages on its own.

PlanSend offers connections for Facebook Pages, Instagram, Threads, LinkedIn, Bluesky, Mastodon, TikTok, YouTube and Pinterest. Availability of a connection does not guarantee that a network has approved every publishing feature. TikTok posts may be limited to private visibility until its Direct Post audit is approved. YouTube uploads use the visibility you select; platform reviews and account restrictions may affect feature availability. Each network processes your published content under its own privacy policy.

If you connect a YouTube channel, we ask Google for permission to identify the YouTube channel associated with the Google account you authorize and show its subscriber, video and view counts in workspace analytics (youtube.readonly), and to upload videos you choose to publish (youtube.upload). We use these permissions only to provide the YouTube connection, analytics and publishing features you request. You can disconnect the channel here or revoke access in your Google Account permissions. Google's own handling of your data is described in the Google Privacy Policy.

Disconnecting a channel in Settings → Channels deletes its stored tokens immediately. You can also revoke PlanSend's access from the network's own settings; see our data deletion instructions.

How we protect sensitive data

These protections apply to Google and YouTube user data as well as other connected-account data, including account identifiers, channel information, OAuth access and refresh tokens, and unpublished posts and media:

• Encryption in transit. PlanSend uses HTTPS/TLS for the production website and for requests to Google's OAuth and YouTube API endpoints.
• Encrypted credentials. Social-network OAuth access and refresh tokens are encrypted with AES-256-GCM before database storage. The encryption key is supplied separately through application configuration and is not stored with the token records.
• Access controls. Signed-in workspace membership and server-side roles control access to channel information, analytics, posts and publishing actions. Application queries are scoped to the relevant workspace. Session cookies are HttpOnly, SameSite and Secure in production; state-changing forms use CSRF protection.
• Limited use and disclosure. Google and YouTube data is used to provide the connection, channel statistics and video uploads you request. It is not sold, used for advertising or used to train AI models. AI Assist receives only the text you choose to submit to that feature, not your Google or YouTube OAuth credentials.
• Revocation and deletion. Disconnecting a channel removes its stored tokens immediately. You can also revoke access through Google Account permissions and request deletion as described below.

More information about our controls is available on our security page. No system can guarantee absolute security.

Processors we rely on

We use a small number of providers to run PlanSend. Each one processes data only on our instructions and under a written data processing agreement.

Cookies

PlanSend sets as few cookies as it can. Strictly necessary cookies keep you signed in and protect forms; they cannot be switched off. Analytics cookies are set only after you choose Accept analytics in the cookie banner.

You can change your choice at any time using the Cookie preferences link in the footer, or by deleting cookies in your browser. Private review links never load analytics.

How long we keep data

• Account and workspace data: for the life of your account, then deleted within 30 days of account deletion.
• Channel tokens: deleted immediately when you disconnect a channel or delete your account.
• Publishing logs: 12 months.
• Technical logs: 30 days.
• Invoices and billing records: 7 years, as required by UK tax law.
• Backups: rotate within 30 days, so deleted data leaves our backups within 30 days of deletion.

Where your data is stored

PlanSend is hosted in the European Union (Germany). The database, uploaded media and backups stay in the European Union. Because ULA SOFT LTD is based in the United Kingdom, data moves between the UK and the EU under the adequacy decisions that each side has granted the other.

Some processors, such as Amazon Web Services, Stripe, Google, Replicate and the social networks you connect, are headquartered in the United States. Where they receive personal data we rely on their standard contractual clauses (the EU SCCs together with the UK Addendum) and, where a provider is certified, the EU-US Data Privacy Framework and its UK Extension.

Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we process it;
• receive a copy in a portable, machine-readable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting processing that already happened;
• complain to the UK Information Commissioner's Office (ICO) or, if you live in the EU, to your local data protection authority.

To exercise any of these rights, email [email protected] from the address on your account. We answer every request within 30 days and do not charge for reasonable requests.

Deleting your data

Disconnecting a channel in Settings → Channels deletes its tokens immediately, and removing PlanSend from Facebook, Instagram or Threads makes Meta send us a signed notice on which we delete the tokens, stored profile picture and cached audience numbers of that account's channels automatically. In Settings → Your account you can download a copy of your data, delete a brand you own with everything in it, and delete your account: your email address, name and Google link are removed immediately, you are removed from every brand and signed out everywhere, and the API keys you created are revoked. If you cannot sign in, email [email protected] from your account's email address and we will remove your account, workspaces, posts, media and connected channels within 30 days. Invoices are kept for 7 years because tax law requires it. Step-by-step instructions, including how to remove PlanSend from Facebook, Instagram and Threads, are on the data deletion page.

Children

PlanSend is a business tool for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we use your data, we will email account holders at least 14 days before it takes effect.

Contact

ULA SOFT LTD, 10-16 Tiller Road, 14/2e Docklands Business Center, London E14 8PX, United Kingdom. Contact: [email protected].

• Privacy questions and data requests: [email protected]
• Product support: [email protected]
• Legal notices: [email protected]