Data Safety
York is your AI social-media employee. It drafts posts, replies, reposts and likes for the accounts you connect — and nothing goes out until you say so. You approve everything, and we never see your password.
This page explains, in plain language, how York connects to your accounts, what it can and can’t do, and how you stay in control. For the full legal detail, see our Privacy Policy.
How York connects
When you connect an account, we send you to the platform’s own official sign-in page — X, Facebook, Instagram, TikTok, LinkedIn or YouTube. You sign in there, directly with them, never through us. We never see or store your password.
Once you approve, the platform gives York a secure access token — think of it as a guest pass that lets York do only the things you approved, and nothing else. You can revoke that access anytime — in York, or in the platform’s own connected-apps settings.
Your posts always go out through each platform’s official API, so they appear exactly as if you posted them yourself.
You approve everything
York never posts, replies, reposts or likes on its own. It drafts; you decide.
Before anything goes live you see exactly what will be published — the full text, any media, and which account it will post to. Nothing is sent until you approve that specific action. If you don’t approve it, it doesn’t happen.
The same goes for replies and comments: York suggests them in your voice, and they only go out once you’ve said yes.
What York can access
York works with the permissions you approve to provide its features — like drafting in your voice and showing you how your posts are performing.
You’re always in control of what you share: when you connect an account, the platform’s own authorization screen shows you exactly which permissions you’re granting, and you review and approve them there. York asks only for what it needs to do the job you’ve set up — and if a feature ever needs new access, we’ll ask you again first.
We never sell your data. The data from the accounts you connect — your posts, media and performance — is used only to run York for you: drafting, publishing and analyzing on your behalf.
What York can’t do
York works inside each platform’s rules, so some things are off-limits by design:
- It can’t act without your approval — no surprise posts, follows, or messages.
- It can’t do bulk actions like mass following or unfollowing.
- Where a platform requires you to use its own app for something, York will tell you rather than work around it.
Your connection also expires periodically by design, so York will occasionally ask you to reconnect — a safeguard that keeps you in the loop.
Keeping your data safe
Your data is protected with strong, industry-standard security. It’s encrypted in transit with TLS, and the access tokens for your connected accounts are encrypted at rest with AES-256. Access by our team is strictly limited, logged, and bound by confidentiality.
Our security program is built to SOC 2 and ISO 27001 standards, and we’re completing formal certification. For full details on how we store, use and protect your data, see our Privacy Policy.
Who we share data with
To run the service, York works with a small set of established service providers — for cloud hosting, publishing to the platforms, and AI features. Each one operates under a data-protection agreement and only ever handles what’s needed to do its job; none of them may use your data for their own purposes.
You can see the full list of these providers in our Privacy Policy.
Disconnect and delete anytime
You’re always in control of the connection between York and your accounts.
Disconnect anytime — one click. When you disconnect an account, York immediately revokes and deletes the stored access token and unlinks it from our publishing partner, so York can no longer reach that account. You can also revoke access in the platform’s own connected-apps settings at any time.
Delete your account anytime. When you do, we permanently erase your personal data and connected-account credentials — from York and from our service providers — within 30 days, keeping only what the law requires. You can also ask us to access, export, or delete your data at [email protected], and we’ll respond within 30 days. See our Privacy Policy for details.
The platforms’ rules
When you connect an account, you’re also agreeing to that platform’s own terms. In particular, by connecting YouTube, you agree to the YouTube Terms of Service and York’s use of YouTube data follows the Google Privacy Policy and Google’s Limited Use requirements.
For your privacy rights and how to exercise them, see our Privacy Policy.
Questions or requests
Questions about your privacy, or want to make a request? Email us at [email protected].
For the full detail, see our Privacy Policy and Terms and Conditions.