Your accounts. Your content. Clear data handling.

Current scope

Contigrator currently implements a self-hosted, single-operator studio for Merit AC's own connected accounts. A public multi-user hosting service is not active. An account conversion, app request or scheduled record does not by itself mean API approval or successful public publication.

Information the application handles

With the account owner's authorization, Contigrator handles account identifiers, granted OAuth scopes, access and refresh tokens, and token expiry information. It reads information needed to verify the authorized account, its own boards and Pins, applicable creator settings, and post processing and publication status.

Its operator-controlled runtime stores uploaded or generated media, captions, titles, destination links, planned publication times, asset hashes, review records, provider identifiers, public post URLs and delivery or error history. It does not require financial records or customer invoice data to publish a commercial.

Authorization and security

Social account authorization uses the platform's OAuth flow. Contigrator does not collect social-platform passwords. Access tokens and sensitive resumable upload sessions are encrypted using a key managed separately by the operator. Hosted studio access requires operator authentication and HTTPS. Encryption does not protect data from a compromised running host or an operator who has its key.

Why information is used and where it goes

Information is used to review and manage content, verify the selected account, schedule authorized delivery, check provider results and prevent duplicate posts. Publication sends the relevant media, caption or title, destination link and required authorization to the selected platform. Public posts are intentionally visible according to that platform's rules.

Pinterest video transfer can use Pinterest's designated signed storage upload service. Hosting and backup services chosen by the operator may hold runtime data under their own arrangements. The current app has no built-in sale-of-data feature, advertising analytics SDK or cross-site tracking service. Social platforms and website infrastructure operate under their own policies.

Cookies, records and retention

Browser cookies bind an OAuth request to the operator's browser. Hosted sign-in sessions expire after twelve hours; OAuth state expires after ten minutes. Assets, operational records and encrypted account grants remain until the operator manages them. There is no implemented automatic retention service. Backup copies may retain earlier records and require separate removal.

Operator controls

The operator can pause publishing and disconnect accounts. Google and TikTok disconnect attempt remote grant revocation. Pinterest disconnect removes the local grant; remote app access must also be revoked in Pinterest account settings. Disconnecting access does not automatically delete existing platform posts, local assets, ledger history or backups.

Data removal is managed by the operator with the publisher stopped. Pending or uncertain requests must be reconciled before starting a replacement publisher, to avoid duplicate public posts.

Privacy requests and updates

For requests concerning Contigrator data, use Merit AC's contact page and identify Contigrator and the request in the message. The operator manages the applicable runtime and platform grants. Do not include passwords, access tokens or other credentials in a request.

This notice should be updated before changing the product audience, data handling, hosting arrangements or adding analytics or external generation services. Platform authorization and app approval remain separate from this notice.