What we collect.
Goosebumps is a creative studio and software house. This policy explains what information we gather when you use our tools and connected integrations, how we use it, and the rights you have over it.
Account information
When you sign up, we store your email address, a display name, and an API key we generate for you. We do not store passwords — authentication is handled by API key or, where applicable, OAuth with third-party platforms.
Social platform data (via OAuth)
When you connect a social platform — Facebook, Instagram, TikTok, YouTube, X, Snapchat — we request the minimum permissions needed to post on your behalf. Depending on the platform, this may include your platform user ID and display name, the list of Pages or channels you manage, an access token scoped to the account you selected, and basic post metrics (views, likes, comments) for analytics.
We never request permission to read private messages, personal friend lists, or content outside the accounts you explicitly connect.
Content you upload
Videos, images, audio, and text you upload or import are stored so we can process, edit, and publish them on your behalf. You retain ownership of your content at all times.
Usage data
We log basic technical data — IP address, browser type, timestamps of requests — to operate, secure, and debug the service.
How we use it.
- To provide the core service: editing, scheduling, and posting to the social accounts you connect.
- To display analytics and performance metrics for the posts we publish.
- To communicate with you about account activity, security, and service updates.
- To detect, prevent, and respond to abuse or fraud.
How we share it.
We share data only with the service providers we depend on to operate:
- Meta (Facebook, Instagram), TikTok, Google (YouTube), X, Snapchat — to publish the posts you schedule.
- AI providers — Google Gemini, Anthropic Claude, OpenAI, Deepgram — for video analysis, caption generation, and transcription. Providers receive only the minimum content needed for each task.
- Cloudflare — hosting, CDN, and DNS.
We disclose information if required by law, valid legal process, or to protect the rights, safety, and property of our users or ourselves.
Storage & security.
Your data is stored on servers operated by Goosebumps. Access tokens, API keys, and credentials sit in restricted configuration files and databases accessible only to our service processes. We use HTTPS for all API communication and follow standard industry practices to protect against unauthorized access.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you promptly.
Retention.
We retain your account information and content for as long as your account is active. When you disconnect a social platform, we clear the stored access token for that platform within seven days. When you close your account or request deletion, we remove your data as described on our data deletion page.
Your rights.
- Access — request a copy of the personal data we hold about you.
- Correct — ask us to fix inaccurate data.
- Delete — request deletion of your account and associated data (see Data Deletion).
- Disconnect — revoke any connected social platform at any time, either in your account settings or directly on the platform.
- Object or restrict — limit certain uses of your data.
To exercise any of these rights, email contact@gsbmps.com. We will respond within 30 days.
Children.
Goosebumps is not intended for anyone under 13 years of age, or 16 in jurisdictions where that is the applicable minimum. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.
International users.
Goosebumps may process your data in countries other than your own. By using the service, you consent to the transfer of your information to those countries.
Changes to this policy.
We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of this page and — for material changes — notify you by email or an in-app notice.
Contact.
Questions about this policy? Email contact@gsbmps.com.