Privacy Policy

SendGecko is operated by PINTECH DOO Skopje, Skopje, North Macedonia, the company behind PintechLabs. For personal data we collect about you ourselves (your account, billing, the waitlist, how you use the Service) we are the controller.

When you use SendGecko for your own brand or for clients, the content and contact details you put in (for example the people in your workspace, or names in a post) are yours. For that data we act as your processor, under our Data Processing Agreement.

Privacy questions and requests: contact@sendgecko.io.

We collect only what we need to run SendGecko. Here is everything, grouped.

We do not ask for the passwords of your social accounts (the one exception is a Bluesky app password, which you create just for SendGecko and can delete any time). We don't read private messages, we don't collect your followers' or contacts' personal data, and we don't knowingly collect special-category data. If you put such information in your own posts, it is still your content and you decide what to publish.

You connect a network by signing in on that network's own screen and approving the permissions listed there. We use the network's official API, never your password, and never anything you didn't approve. These promises apply to every network:

• We publish only what you create and schedule, and only to the accounts, Pages and channels you connect and manage.
• We read only your own account details and the performance numbers of your own posts. We don't read other people's content or private messages.
• We don't sell, rent or share this data with advertisers, data brokers or ad networks. We don't use it for advertising, profiling, surveillance, or to train AI models, and we don't combine it with other data to build a profile of any person.
• We don't send data from the networks to AI providers. Gecko AI only sees what you write and the Resources you choose.
• We keep credentials encrypted, and delete them as soon as you disconnect a channel or the network tells us access was revoked. We delete the rest of that channel's data within 30 days (see Data Deletion).
• SendGecko is independent. It isn't affiliated with or endorsed by any of these networks. Names and logos belong to their owners.

Here is exactly what we ask each network for and why. The permission names are the ones the network itself shows.

This section covers two ways SendGecko can receive information from Google:

• Continue with Google (sign-in). We receive your name, email address and profile picture, so we can create and recognise your account.
• Connecting a YouTube channel. With your approval we can upload videos and Shorts you choose, read your channel's name and picture, and read analytics for your channel and videos. Permissions: youtube.upload, youtube.readonly and yt-analytics.readonly.

What we do with Google user data:

• We use it only to provide and improve the features you can see in SendGecko: signing you in, uploading and scheduling your videos, and showing your analytics.
• We don't transfer it to anyone else, except to provide those features with your consent, for security or abuse investigations, to follow the law, or as part of a merger or sale after you have been told and given your consent.
• We never sell it, use it for advertising (including retargeting or interest-based ads), or share it with data brokers.
• People at SendGecko don't read it unless you ask us to (for support), it is needed for security or to follow the law, or it is aggregated and used for internal operations.
• We don't use it to develop, improve or train generalized AI or machine-learning models, and we don't send it to AI providers.
• We store it encrypted where it is sensitive (tokens), protect it as described in our Security page, and delete it as described below.

YouTube. By connecting a YouTube channel to SendGecko you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

Revoking access. You can revoke SendGecko's access to your Google account at any time in your Google security settings, or by removing the channel in SendGecko (Settings → Channels). When access is revoked we delete the credentials immediately, and delete any other data we received from the YouTube API within 30 days. We also refresh or delete stored YouTube API data at least every 30 days; analytics history is kept only while we can re-confirm your authorization.

We don't make decisions about you by automated means that have legal or similarly significant effects, and we don't profile you for advertising.

Gecko AI is optional. When you use it, the text of your request goes to the AI provider of the model you pick, together with the context you allow: your draft, your brand voice, the Resources you selected or pinned, and (for matching your style) some of your recent posts. If you ask for alt text, the image is sent to a model that can see it.

• AI never publishes by itself. It makes suggestions. You review them, and nothing is posted unless you schedule it or you turned on an automation yourself.
• Our keys. We use the paid API plans of the providers listed on Subprocessors and, where the provider offers it, settings that keep your prompts out of model training. The page notes any exceptions.
• Your own key (BYOK). If you add your own provider key, we use it only for your requests, store it encrypted and show only its last few characters. Your data then goes to that provider under your agreement with them. We never silently fall back to our keys: that happens only if you switch on “use SendGecko credits as backup”.
• We don't train AI models on your content. We keep the text of AI requests and answers for 30 days to help fix problems, then only usage counts remain.
• Please don't put other people's personal data into prompts or Resources unless you have the right to.

Some networks ask you to label AI-generated content. The composer has a “Contains AI” switch for that. You are responsible for using it where a network requires it.

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We share it only in these cases:

• Companies that help us run SendGecko (hosting, email, payments, error monitoring, AI models). They act on our instructions under data processing terms. The full list, with what each one sees and where, is on Subprocessors. There are currently 13 entries, and the AI providers only receive data when you choose their model.
• The networks you connect. We send them what you publish. What they do with it is governed by their own terms and privacy policies, linked above.
• People in your workspace. Members see the content and channels their role allows. If you share an approval link, the guest sees the posts you chose.
• Authorities and advisers when the law requires it, to protect rights, safety or the Service, or to our lawyers and accountants under confidentiality.
• A buyer if SendGecko is ever merged or sold. We would tell you first, and this policy would keep applying.

Our servers are in Germany, and our team works from North Macedonia. Some of the companies on the Subprocessors page are in other countries, including the United States. When personal data leaves the European Economic Area or the UK, we make sure it is protected, using the EU Standard Contractual Clauses (and the UK addendum) and, for US providers that are certified, the EU–US Data Privacy Framework. Ask us at contact@sendgecko.io for a copy of the safeguards.

Tokens, app passwords and AI keys are encrypted with AES-256-GCM before they are stored. There are no passwords to steal: you sign in with passkeys, email codes or Google. Every request is checked against your workspace and your role. Read the details on Security. No system is perfect: if there is a breach that affects your personal data, we will tell you and the authorities within the time the law sets (72 hours for the authority under GDPR).

Whoever you are, you can ask us to:

• tell you what we hold about you and give you a copy (and a portable export);
• correct anything that is wrong;
• delete your data (see Data Deletion);
• stop using your data for a purpose you object to, or limit how we use it;
• withdraw a consent you gave, for example for waitlist emails.

Email contact@sendgecko.io from the address on your account. We may ask a question to make sure it is you. We answer within 30 days (and tell you if a complex request needs longer). It is free, and we won't treat you worse for using your rights.

If you are in the EEA, UK or North Macedonia, the GDPR and the local data protection law give you these rights, and you can complain to your data protection authority. Ours is the Agency for Personal Data Protection (North Macedonia).

If you live in California or another US state with a privacy law, you can ask to know, correct and delete your personal information, and to opt out of its sale or sharing. We don't sell or share personal information for advertising, so there is nothing to opt out of, and we honour Global Privacy Control signals anyway. You can use an authorised agent; we will ask for proof.

We use only the cookies the Service needs to work, and cookieless statistics. No advertising cookies, no cross-site tracking. The list is on the Cookie Policy.

SendGecko is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has given us data, write to contact@sendgecko.io and we will delete it.

We'll update this page when something changes and update the date at the top. If a change matters (a new purpose, a new kind of data), we'll email workspace owners and show a notice in the app at least 30 days before it applies, unless the law or a security need means it must apply sooner.

PINTECH DOO Skopje, Skopje, North Macedonia
Privacy: contact@sendgecko.io
General: contact@sendgecko.io