Privacy policy

Who we are

GoGoHype ("we", "us", "our") operates the social media scheduling platform at gogohype.com. We are the data controller for the personal data described in this policy. For any privacy question or request, contact us at [email protected].

Information we collect

Account information you give us when you sign up or invite teammates: name, email, agency name, password (stored only as a bcrypt hash, never in plaintext).

Workspace content you create or upload to GoGoHype: posts, captions, media files, notes, approvals, comments, calendars, brand guidelines.

Billing information needed to operate paid plans: workspace count, plan, subscription state. Card data is handled by Stripe directly. We never see or store full card numbers.

Connected social-account data. See the next section.

Messages you send through the contact form on gogohype.com: your name, email, company, the message itself, the page you sent it from and the country derived from your IP address. The IP address itself is not stored with the message.

Visits to gogohype.com, counted without cookies. See "Analytics on gogohype.com" below.

Technical data needed to run the service: IP address, browser/user agent, timestamps, request IDs, error traces.

Connected social accounts (how third-party platforms work in GoGoHype)

When you connect a social profile (Pinterest, Instagram, Facebook, TikTok, YouTube, LinkedIn, X or Threads) we run the platform’s standard OAuth flow. We store only what the integration needs to publish and read the metrics you explicitly enable.

Access tokens and refresh tokens are encrypted at rest with AES-256-GCM using a key held outside the database. The token itself is never written to logs, never shown back in the UI, and never shared with third parties beyond the platform that issued it.

You can disconnect any connected profile at any time from Settings → Integrations. Disconnecting deletes the stored tokens on our side every time, and revokes the access on the platform itself where the platform supports programmatic revocation.

You can also revoke our access directly from inside the platform’s own settings (for example, on pinterest.com under Account → Apps and websites, or on Facebook under Settings → Apps and websites). That revocation propagates to us on the next API call. Step-by-step instructions, and what each route erases, are on our data deletion page.

Pinterest data we access

When you connect a Pinterest account we request the following scopes: user_accounts:read, boards:read, boards:write, pins:read, pins:write. We use them only to: list your boards so you can pick a destination for each scheduled post; create the pins you schedule in GoGoHype; read back the basic metrics of pins we created on your behalf.

We do not read or store the followers, follows, secret-board contents or private messages of any Pinterest account. We do not use Pinterest data to train any AI model. We do not sell Pinterest data and we do not share it with other GoGoHype customers or third parties.

Pinterest data we keep: the encrypted OAuth tokens, your account ID and username (to display the connected account), and the metadata of the pins and boards used by your scheduled posts. Disconnecting the account erases the tokens; the record of what you published and its statistics stay until you delete the workspace, which removes everything.

Meta, TikTok, YouTube, LinkedIn, X and Threads

For every other connected social platform we follow the same model as Pinterest: minimal scopes, encrypted tokens and no resale. On disconnect we always delete the stored tokens, and we revoke the access on the platform where it supports that; storage is limited to what the integration requires to publish and report on your scheduled content.

Google API Services User Data Policy (Limited Use)

YouTube channels are connected through Google OAuth. GoGoHype’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use YouTube data only to publish the videos you schedule and to show the statistics of videos published through GoGoHype. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalised AI or machine-learning models. We transfer it to others only as needed to provide the features you use, for security, or to comply with the law, and people on our team read it only with your permission, for security investigations, to comply with the law, or when it is aggregated and anonymised for internal operations.

How we use your information

To operate the product: scheduling and publishing posts, generating AI caption suggestions, routing approvals, producing analytics, sending notifications, supporting your team.

To run our business: billing, support, answering messages sent through the contact form, fraud and abuse prevention, security monitoring, audit logging of changes to tenant-owned data.

To improve the product on aggregate, non-personal usage data only. We never train AI models on your social-account data or on private workspace content.

We do not sell your personal data. We do not use it for cross-context behavioural advertising.

Legal bases (GDPR / UK GDPR)

Performance of the contract you entered into with us (running the service you signed up for).

Our legitimate interests in keeping the service reliable, secure and improving, in answering messages you send us, and in counting visits to our website without cookies (subject to your rights).

Your consent where we ask for it (for example, when an address confirms that it wants to receive scheduled reports).

Compliance with legal obligations (tax records, lawful disclosure orders).

How we store and protect your data

Encryption in transit: all traffic uses TLS 1.2+.

Encryption at rest: social OAuth tokens use AES-256-GCM with a key kept in environment configuration and not in the database. Refresh tokens for your GoGoHype account are stored as SHA-256 hashes only. The raw value cannot be recovered. Passwords use bcrypt at a high cost factor.

Tenant isolation: every query runs within the tenant that owns the data, and every request checks that the caller is a member of the workspace it touches. A request authenticated for tenant A cannot read tenant B’s data.

Access control: production access is least-privilege and audited. Application logs strip secrets. We keep an audit log of changes to tenant-owned data.

What our team can see: authorised GoGoHype administrators use an internal console to see accounts, workspaces, billing, the connection status of social accounts and the posts published through GoGoHype, so that we can run the service, answer support requests and act on abuse reports. Each administrator’s access is limited by role, every change they make is logged, and connected-account tokens are never shown in any internal tool.

Support access to your account: when you ask us for help with something that can only be seen from inside your account, a GoGoHype administrator can open a session acting as your account. We do this only in response to your request. Opening a session requires a stated reason, the session expires on its own after a short time (15 minutes by default) and can be ended earlier, and the session together with every change made during it is recorded with the administrator’s identity.

Chat messages, including direct messages, are stored encrypted and are not shown in the console. An administrator can read a conversation only through a disclosure request that states a justification and that a second administrator approves. We use it only to comply with a lawful order or to investigate abuse, and every request and approval is recorded.

If we ever lose the encryption key, social-account tokens become unreadable and integrations have to be reconnected. Account passwords and refresh tokens are not affected.

Sub-processors (categories)

Hosting: Hetzner Online (data centres in the European Union). PostgreSQL and Redis run on our own Hetzner servers; media files are kept in Hetzner object storage.

Network delivery and protection: Cloudflare, which sits in front of our websites and API and therefore handles request metadata such as IP addresses.

Payments: Stripe Inc. Handles card data directly. We only receive a customer ID and subscription metadata.

Transactional email: Resend.

Error tracking and observability: Sentry (when enabled).

AI (GOGO AI): OpenAI for text generation and voice-note transcription, and Anthropic for text generation. We send only the text, brief, voice note and platform context you choose to include; we do not send your connected social-account credentials.

Every sub-processor is bound by a Data Processing Agreement and contractually limited to processing data only on our instructions.

Analytics on gogohype.com

Our marketing website counts visits with our own code, not with a third-party tracker. When a page opens, your browser sends us the page address, the address of the page that linked to it (we keep only its domain), and a random identifier kept in the tab’s session storage, which disappears when the tab is closed. Our server adds the country derived from your IP address at the network edge; the IP address itself is not stored.

The website sets no cookies and nothing links your visits to each other or follows you across other sites, which is why there is no consent banner. Obvious bots are marked and left out of the counts. Visit records are kept for 13 months.

Cookies

Strictly necessary: the app at app.gogohype.com keeps your sign-in in an HttpOnly, Secure cookie that holds the session refresh token. Without it you cannot stay signed in.

Preferences: the app remembers your chosen language and light / dark theme.

The marketing website gogohype.com sets no cookies. We do not use third-party advertising or cross-site tracking cookies, and we do not embed advertising pixels.

Data retention

Active accounts: while your subscription is active and for the period you continue to use the service.

Deleted workspaces: a workspace its owner deletes can be restored for 7 days. After that it is removed irreversibly, together with the connected accounts, their tokens and every statistic collected for them, and its stored files are erased within the following hour. Encrypted backups roll off within 30 days.

Account deletion: deleting your account in Settings removes it as soon as its workspaces are gone. If you ask us by email instead, we remove your personal data within 30 days of the request, except where retention is required by law (tax records, fraud prevention).

Messages sent through the contact form: kept while we answer and follow up on the conversation. Ask us and we delete them.

Visit records of gogohype.com: 13 months.

Audit logs: 12 months.

Your rights

You have the right to access, export, correct, delete, restrict or object to processing of your personal data, and to data portability. Where processing is based on consent you can withdraw consent at any time.

Submit a request from inside the app (Settings → Account) or email [email protected]. We respond within 30 days.

California residents: you have rights under the CCPA / CPRA including the right to know, delete, correct and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

If you believe we have not handled your data properly, you can lodge a complaint with your local supervisory authority.

International transfers

Our primary processing happens in the European Union. When data is transferred to a sub-processor outside the EU / EEA we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, plus technical safeguards (encryption in transit and at rest, least-privilege access).

Children

GoGoHype is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

When we make material changes we notify you in the app and by email. The effective date at the top of this page always reflects the latest version. Continued use after the effective date constitutes acceptance of the updated policy.

Contact

Privacy questions and rights requests: [email protected]. For general questions reach us via the Contact page.