Privacy policy
Effective October 6, 2026. Project and website operator: Engels Florentino.
The local application
SocialCli processes the accounts, text, supplied media files and operation records you configure. Creator workspaces stay on your chosen computer or server. The shared connection service does not receive your media or publish posts.
Shared account connections
When you use connect with https://social.florentino.pro, Engels Florentino operates the authorization service. It processes provider account identifiers and display names, granted permissions, OAuth authorization codes, access and refresh tokens, and random connection credentials. Tokens are encrypted at rest; application secrets and refresh tokens remain on the service. Your CLI stores its connection capability in the OS keyring and retrieves access tokens into process memory for authorized operations. Passwords are entered directly on provider pages and are never collected by SocialCli.
These data are used only to establish your selected connection, provide the operations you request, renew authorized credentials and protect the service. They are not sold, used for advertising or used to train AI models. An AI assistant you choose may process content you give it under that assistant provider’s policies; SocialCli does not include a built-in AI service.
Retention and security
Pairing sessions and uninstalled connections expire after ten minutes. Installed connection capabilities expire after ninety days; expired service records are removed by daily pruning. Disconnect deletes that connection’s server credentials. Operational logs exclude OAuth codes and tokens and rotate at a bounded size. Rate-limit records contain hashed peer identities and minute counters and are cleared during pruning. Protected backups may retain earlier encrypted data until the operator removes those backups; contact us for a deletion request. No system can guarantee absolute security.
Independent applications
With independent-app auth, your credentials stay on your chosen computer or server and are not sent to our connection service. With a self-hosted connection service, its operator handles authorization data; review that operator’s policy.
Communication with providers
When you authorize an account or run a feature, SocialCli sends the necessary requests and data to Google/YouTube, Meta/Facebook/Instagram or TikTok. If you configure remote hosting or a runner, files transfer to your chosen destination. Each provider applies its own policies and retention periods.
This website and GitHub
The documentation website is hosted on GitHub Pages; the connection website and service run at social.florentino.pro. It includes no forms, advertising, first-party analytics or tracking scripts. GitHub may process technical access data under its policy. GitHub issues and contributions are public; do not send secrets or unnecessary personal information.
Deletion and revocation
You can disconnect service accounts, delete local data and revoke permissions on each platform. Disconnect stops access through the service but does not guarantee immediate invalidation of previously issued provider access tokens; remove SocialCli in provider settings to revoke the provider grant. Deleting a local token does not revoke remote authorization, and deleting a media file does not remove a published post. Manage submitted content on the platform or through authorized management features.
Contact and changes
For privacy inquiries, email blades3@gmail.com. Do not include tokens or keys. For other questions, use the maintainer's profile or repository without including sensitive information in public messages. This policy applies to the shared connection service and the independent local application.