Sharefly ("we", "us", "our", or the "Service") is a content scheduling platform that helps
website owners, bloggers, and creators publish content to their own social media accounts on a
schedule they control.
The Service is operated by Aeonhue LLC, 1309 Coffeen Avenue STE 1200, Sheridan,
WY 82801, United States.
This policy explains what we collect, why, and what you can do about it. If you do not agree
with it, please do not use the Service.
2. Information we collect
2.1 Account information
Email address — used for login and account recovery
Password — hashed with bcrypt; we never store or see plaintext passwords
Display name — optional
2.2 Connected social accounts
Sharefly publishes only to accounts you explicitly connect. Connecting always happens through
the platform's own OAuth flow — your social media password never reaches our
servers. Depending on which platform you connect, we store:
Facebook Pages (Meta)
Page ID and Page name — to identify where to publish
Page access token — to publish on your behalf
Long-lived user access token — to keep the Page connection alive
Instagram (Meta)
Instagram Business Account ID and username
The linked Facebook Page's ID, name and access token — Instagram publishing
is performed through the Page that owns the account
Pinterest
Pinterest user ID and username
Access token and refresh token
Board names and IDs — imported at connection time so you can choose where pins go
We do not read your feed, messages, friends, followers, or any content you did not
create in Sharefly. The permissions we request are used only to list the accounts and
Pages you manage, to publish the content you scheduled, and to add the first comment you wrote.
2.3 Token encryption
All access tokens are encrypted with AES-256-GCM before being written to our
database, using a key held outside the database. They are decrypted only at the moment a
publish request is made on your behalf.
Post content — post text and captions, first comments, destination links
Media URLs — links to images and videos you host elsewhere. Media is fetched
directly by the social platform from your URL; for Pinterest, images rendered by Sharefly are
stored on our server
Scheduling data — publish times, status, and error messages
Crawl state — for blog projects, the URLs already turned into pins, so the same
article is not processed twice
2.5 AI generation (optional, Pinterest projects only)
If you enable AI pin generation, article titles and URLs are sent to OpenAI to draft pin titles
and descriptions. Article body text is not sent. Facebook and Instagram content is never sent to
OpenAI — you author it yourself. See
OpenAI's Privacy Policy.
2.6 Logs
Publishing logs — the HTTP status and response for each publish attempt, kept so
you can see why something failed
Error messages returned by the social platforms
3. How we use it
To operate the Service — authenticate you and run your account
To publish for you — post the content you created and scheduled, to the accounts
you connected, at the times you chose
To add first comments — publish the comment you wrote, immediately after the
post it belongs to
To show you status — surface failures, expired connections, and queue health
To generate drafts — only where you enabled AI generation
Security and legal compliance
We never post anything you did not create and approve in Sharefly. Every post
is drafted by you, reviewed by you, and released by you.
4. Sharing
We share data only with the parties needed to deliver the Service:
Meta Platforms, Inc. — to publish to the Facebook Pages and Instagram accounts you connected
Pinterest, Inc. — to publish to the Pinterest account you connected
OpenAI, Inc. — only if you enabled AI generation, and only article titles and URLs
Our hosting and database providers — to run the Service
We may disclose information where required by law or to protect the rights and safety of our
users or the public.
We do not sell, rent, or trade your personal information, and we do not use your data or
your audience's data for advertising.
5. Retention
Account data — kept while your account is active
Access tokens — deleted immediately when you disconnect an account or delete the project
Posts and projects — kept until you delete them or close your account
Publishing logs — kept up to 90 days, then deleted
6. Your rights and controls
Inside the app you can, at any time:
Edit or delete any scheduled post before it is published
Disconnect a Facebook Page, Instagram account, or Pinterest account — which deletes its stored tokens
Delete a whole project, which deletes its content, logs and connected account
Delete your entire account and all associated data
You can also revoke Sharefly's access from the platform's own settings at any time —
see Data Deletion Instructions.
If you are in the EU, the UK, California, or another jurisdiction with privacy legislation, you
additionally have the right to access, correct, export, restrict, or erase your personal data.
Write to [email protected] and we will respond
within 30 days.
7. Security
Passwords hashed with bcrypt
Access tokens encrypted at rest with AES-256-GCM
All traffic served over HTTPS (TLS 1.2+)
Sessions use httpOnly, sameSite cookies
No system is perfectly secure, but we maintain safeguards appropriate to the sensitivity of the
data we hold.
8. Third-party policies
Your use of the connected platforms is also governed by their own terms:
Sharefly is an independent application. It is not endorsed by, affiliated with, or operated by
Meta Platforms, Inc. or Pinterest, Inc.
9. Government and legal requests
We occasionally may receive requests from public authorities for user data. Our practice is:
We review the legality of every request. A request is assessed against the
applicable law before any data is disclosed, and we do not comply with requests we believe to
be unlawful or overbroad.
We challenge requests we consider unlawful, including by seeking to have
them narrowed or withdrawn.
We disclose the minimum necessary. Where disclosure is required, we release
only the specific data the request compels, never a broader export.
We document every request — what was asked, who asked, our legal reasoning,
and what we disclosed.
We notify the affected user where the law permits us to do so.
We have not received a national security request for user data.
10. Children
Sharefly is not intended for anyone under 13. We do not knowingly collect information from
children. If we learn that we have, we delete it and close the account.
11. Changes
We may update this policy. Material changes will be announced on this page with a new "Last
updated" date, and by email where the change meaningfully expands what we collect or how we use it.
12. Contact
Aeonhue LLC
1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States Email:[email protected]