ASOS privacy policy

Effective 9 November 2026

ASOS is a social-media publishing tool operated by TriStrand Tech (“we”, “us”). This policy explains what ASOS collects, why, and the choices you have. It supplements TriStrand Tech's company privacy policy, which applies to anything not covered here.

What we collect

• Account details: your email address, name, and — if you sign up with a password — a salted hash of it (never the password itself). If you sign in with Google we receive your name and email address.
• Your content and settings: brand descriptions, content topics, post drafts, schedules, and the images and videos you upload or generate.
• Connected social accounts: when you connect LinkedIn, X, Facebook, Instagram, Threads, YouTube, TikTok or Reddit, we store the access tokens those platforms issue and the identifiers needed to post on your behalf (for example a Page id, account handle or channel id). We do not receive or store your passwords for those platforms.
• Usage records: how many posts and AI generations each profile uses per day, so daily limits can be enforced, plus the publish result returned by each platform.

Cookies and storage on your device

ASOS stores and reads a small amount of information on your device or browser, using cookies and your browser's local storage. All of it is needed for the app to work; ASOS uses no advertising or analytics cookies, and does not allow third parties to place or read cookies or similar technology through ASOS.

• Sign-in cookies (set by our sign-in system, Auth.js): keep you signed in for up to 90 days, protect sign-in forms against cross-site request forgery, and remember where to return you after signing in.
• Active profile cookie (asos-profile): remembers which of your profiles you're working in, for up to a year.
• Connection cookies (asos-oauth-…): a random value that ties a platform connection (for example Connect YouTube) to the browser that started it. Each lasts 10 minutes and is deleted when the connection completes.
• Theme preference (local storage, asos-theme): whether you chose the light or dark theme.

When you sign in with Google or connect a platform, you're sent to that company's own pages, which use their own cookies under their own policies (for Google, the Google Privacy Policy). You can delete ASOS's cookies and local storage at any time in your browser settings; you'll then need to sign in again.

How we use it

• To draft, schedule and publish the posts you approve, to the accounts you choose.
• To generate text, images or video with the AI providers configured for the service.
• To send you the notifications you turn on (for example a new batch ready for review).
• To keep the service secure, enforce limits, and fix problems.

We only use social-platform access to publish your approved content and to show which accounts you can post to. We do not read your feeds, messages or followers, sell your data, or use it for advertising.

Who we share it with

• The platforms you post to receive the content you publish there.
• AI providers (such as Anthropic, OpenAI, Google, DeepSeek or OpenRouter) receive the prompts and draft text needed to generate content. They process it to return a result.
• Infrastructure providers: ASOS runs on Google Cloud (hosting, database and file storage). Optional integrations you set up, such as Make.com, receive what you send them.

YouTube and Google data

ASOS uses YouTube API Services to upload videos you choose to your YouTube channel. By connecting YouTube you agree to the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy. You can revoke ASOS's access at any time from your Google account permissions. ASOS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What ASOS stores from YouTube, and for how long: the access and refresh tokens Google issues when you connect; your channel's id, title and handle (to show which channel you're publishing to); and, for each video you publish, its video id and link (the record of your own upload). ASOS re-reads your channel details from YouTube at least every 7 days, and deletes them along with the tokens if it can no longer access your channel, for example after you revoke access in your Google account. Disconnecting YouTube in ASOS revokes ASOS's access at Google and deletes the tokens and channel details immediately. Video ids and links are deleted with the post or profile they belong to. ASOS doesn't download, store or re-host YouTube videos or any other YouTube content.

Meta, TikTok and other platforms

Data received from Facebook, Instagram, Threads, TikTok, X, LinkedIn and Reddit is used only to publish your content and identify the accounts you post to. You can disconnect any platform in ASOS Settings, and remove ASOS from the platform's own app settings, at any time.

How long we keep it

We keep your data while your account is active. Disconnecting a platform deletes its tokens immediately. Deleting a profile deletes its settings, connections, posts and media. When you close your account we delete your data within 30 days, except where the law requires us to keep records.

Your choices and rights

You can access, correct, export or delete your data. See how to delete your data, or email sales@tristrand.tech.

Security

Connection tokens are kept in a separate secret store scoped to your profile, never shown back in the app, and never written to logs. Data is encrypted in transit and at rest.

Children

ASOS is a business tool and is not intended for anyone under 18.

Changes

If we change this policy we will update the date above, and tell you in the app or by email about material changes.

Contact

TriStrand Tech — sales@tristrand.tech