Privacy Policy
This policy explains the information Meadow receives, how we use it, how long we keep it, and how you can withdraw access or delete it.
Meadow is operated by MALIK SEITU MUNYENGE, trading as Woodbark Software.
Effective September 14, 20261. Account and workspace information
Clerk handles sign-in and provides your user identifier and account details, such as your email address. We store the media, captions, settings, schedules, API-key records, and workspace information you give us to operate your account and carry out your publishing requests.
We receive technical information needed to operate and protect the service, including request times, IP addresses processed by our infrastructure, and error information. We do not request or store your social-platform password. OAuth access and refresh tokens are encrypted in Meadow’s application database.
2. Connected platforms and purposes
You can enter and use your Meadow workspace without connecting a social account. Before supported connections or reconnections, Meadow may present a separate data notice and ask for your agreement. We save the notice version and acceptance time with the authorization.
For connected platforms, Meadow receives the account identifiers and permissions needed to direct your content to the account you select. Depending on the platform, we also receive account names, profile images, publishing options, delivery identifiers and status, and performance statistics. We use this information to display your connections, validate and deliver your posts, show publishing results, and provide the analytics you request.
The platform-specific notices below describe the data used by each supported connection, its purpose, retention and removal, and provide links to the platform’s official privacy information. A platform’s authorization screen also shows the permissions requested. Connecting an account does not authorize Meadow to publish content you have not submitted.
3. Limits on use and sharing
We do not sell connected-platform data or use it for advertising, data brokerage, or training general-purpose AI models. We do not use your Google or YouTube data for purposes unrelated to the features you request. Meadow’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Read the Google API Services User Data Policy. Access by people is limited to what is necessary for authorized support, security, legal obligations, or operation of the requested service, subject to the applicable platform rules.
Clerk processes authentication data; Cloudflare provides hosting and infrastructure; and Stripe processes subscription payments and billing records. We send media, captions, and settings to the social destinations you select. These providers process information under their own terms and privacy policies. We may disclose information when legally required or necessary to protect the service and its users.
4. Cookies and product analytics
Trybe uses a first-party visitor cookie to attribute purchases to creator referrals. When a payment succeeds, we send Trybe the visitor identifier, order identifier, amount, currency, payment time, and customer email. This includes subscription renewals. Trybe hashes customer emails for attribution; we do not send card details or connected-platform content to Trybe.
Meadow and Clerk use browser storage and cookies needed for sign-in, security, and workspace preferences. Product analytics tracking is currently disabled; Meadow does not send new product usage events to PostHog. Earlier versions used PostHog and may have sent usage events, your account identifier, email address, and name. Account deletion includes a request to remove historical analytics associated with your account.
Social performance analytics are separate from product usage tracking. They use your connected-platform permissions to show the results of the posts you published. Your browser may contact a platform when displaying its profile images or when you follow a platform link.
5. Retention
We keep user-provided workspace content while your account is active and until you delete it or your account. Temporary OAuth connection requests expire after ten minutes; Bluesky authorization state expires after fifteen minutes. Expired state is removed by the maintenance worker. Abandoned temporary uploads and unreferenced media files are removed after twenty-four hours.
YouTube channel data is checked regularly while connected. Stored YouTube API data is refreshed or removed within thirty days. When access can no longer be verified or a video is no longer available, Meadow removes the affected API data instead of continuing to show old statistics. Disconnecting YouTube or deleting your Meadow account requests deletion immediately; our target for completing the requested local deletion is within seven days.
Pinterest profile details, board lists, and organic statistics are retrieved for the current operation or screen and are not persisted as a reusable cache. Credentials and the minimum records required for your authorized publishing workflow remain until the connection is removed.
Deletion jobs start immediately and retry failed cleanup. Where direct token revocation is supported, encrypted credentials needed only for revocation are retained for no longer than seven days and are then destroyed even if the platform cannot confirm revocation. A minimal deletion receipt and hashed account identifier remain to prevent stale sign-ins or delayed webhooks from recreating deleted workspaces. These markers are not used for analytics or advertising.
Records needed to finish billing cancellation or processor deletion are retained only while that work is outstanding. Stripe may retain payment records required for legal and accounting obligations. Restricted infrastructure logs, legal records, and any recovery copies follow their applicable operational or legal retention schedules; they are not used to restore an erased workspace to active service. Contact us for the status of a specific deletion request or recovery-copy removal.
6. Disconnecting a platform
In Connections, remove the relevant account to stop new publishing and delete its stored credentials, profile, delivery history, and metrics from Meadow. Matching connections in your other Meadow workspaces may also be removed when they share that authorization. Your original media, captions, and posts for other destinations remain in Meadow. A request already sent to a platform may still finish, and posts already published remain on that platform until you remove them there.
For Google and YouTube, you can also revoke Meadow’s access in your Google Account permissions. Google may revoke the entire authorization, affecting other channels or Google connections using it. Meadow checks YouTube access regularly and removes data when authorization can no longer be verified, within the thirty-day refresh-or-delete limit.
For TikTok, use the app’s security and app-permissions settings to remove Meadow. For Pinterest, also remove Meadow from Pinterest’s security and app settings: Pinterest does not currently offer direct revocation for the regular user tokens Meadow uses. Other platforms offer similar connected-app controls. Removing tokens from Meadow ends Meadow’s local access; removing the app in the platform’s settings revokes the platform-side grant.
7. Delete your account or make a privacy request
Open Settings → Privacy & Account → Delete account. After confirmation, Meadow closes all your workspaces, stops new publishing, revokes API keys, removes workspace content and social data, requests cancellation of your subscription, and deletes your Clerk sign-in account. This is permanent. You receive a deletion reference, and cleanup normally completes within seven days. A platform outage or manual processor follow-up may delay external completion; we keep the request pending rather than reporting it as completed.
You can request access, correction, an export, deletion, or information about a pending request at hello@findmeadow.com. Include the account email or deletion reference, but never passwords or access tokens. We may ask for enough information to verify that the request concerns your account. Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, or complain to a privacy regulator.
8. Updates and contact
The effective date identifies this version of the policy. Connection notices have their own version and are shown whenever you connect or reconnect the relevant platform. Agreement is specific to that authorization; it is not a requirement for entering your Meadow workspace.
Meadow is operated by MALIK SEITU MUNYENGE, trading as Woodbark Software. Contact hello@findmeadow.com about privacy or this policy.
Meadow connects to an Instagram professional account through Meta’s official authorization flow.
- Data Meadow accesses
- Professional account ID, username, profile image and profile link; publishing quota information; the media, captions and format you submit; container and published-media IDs, processing status and permalink; and available views, likes, comments, shares and saves.
- How Meadow uses it
- To identify the selected professional account, validate its current publishing allowance, publish the content you request, confirm delivery and show available post performance.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
TikTok
Meadow connects to a TikTok creator account only after you approve the permissions shown by TikTok.
- Data Meadow accesses
- TikTok open ID, display name, username or nickname and avatar; available visibility and interaction options and maximum video duration; the videos or photos, captions, visibility, interaction and commercial-content choices you submit; publish IDs, status, links and rejection reasons; and available views, likes, comments and shares.
- How Meadow uses it
- To show the correct account and publishing choices, deliver only the content you submit, track its status and display available performance. TikTok authorization-removal events let Meadow stop publishing and remove the affected connection data.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
YouTube
Meadow uses YouTube API Services to connect a channel, upload requested videos and retrieve authorized performance data.
- Data Meadow accesses
- Channel ID, name, profile image and link; the video file, title, description, visibility, audience and synthetic-content settings you submit; upload-session and video IDs, processing and visibility status and published link; and available views, likes, comments and authorized analytics.
- How Meadow uses it
- To identify the selected channel, upload and schedule the videos you request, verify processing and delivery, and show available performance. Meadow does not request Gmail, Drive or Calendar access for YouTube publishing.
- Retention and removal
- Stored YouTube API data is refreshed or removed within thirty days. Disconnecting starts local deletion immediately, with a target of seven days. Credentials retained only to retry Google revocation are destroyed within seven days. Original uploads and captions remain until you delete them or your Meadow account.
Meadow connects to Facebook Pages that you are authorized to manage.
- Data Meadow accesses
- Page IDs, names, profile images and Page authorization; the text, titles, images and videos you submit; upload and post IDs, processing status and published links; and available reactions, comments, shares and impressions.
- How Meadow uses it
- To list the Pages you can select, publish requested feed posts, photos, videos, Reels or Stories, confirm delivery and show available Page-post performance.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
X
Meadow connects to an X profile through X’s OAuth authorization flow.
- Data Meadow accesses
- X account ID, username, profile image and profile link; the text, images or videos you submit; media-upload and post IDs, processing status and published link; and available impressions, likes, replies, reposts, quotes and bookmarks.
- How Meadow uses it
- To identify the selected profile, upload media, publish only the posts you request, confirm delivery and display available public post metrics.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
Meadow connects to a LinkedIn member profile and, when separately authorized, organizations the member administers.
- Data Meadow accesses
- Member or organization identifier, display name, profile image and available organization link; the text, title, images, videos or documents you submit; upload and post identifiers, processing status and published link; and available reactions, comments, shares, clicks and impressions according to the granted permissions.
- How Meadow uses it
- To show eligible publishing destinations, upload and publish the content you request, verify delivery and display available post performance. Organization access is used only when the required organization permission is granted.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
Meadow connects to a Pinterest account to show its boards, publish requested Pins and retrieve available Pin performance.
- Data Meadow accesses
- Account ID or username, profile image and link, and board IDs and names; the images or videos, title, description, destination link, board and schedule you submit; upload and Pin IDs, delivery status and published link; and available impressions, saves, Pin clicks and outbound clicks.
- How Meadow uses it
- To identify the account, let you choose a board, create only the Pins you authorize, prevent duplicate publishing and display available performance.
- Retention and removal
- Profile details, board lists and organic metrics are retrieved for the current screen or operation and are not saved as a reusable database cache. Authorization, routing identifiers, chosen publishing settings and delivery records remain until you disconnect. Also remove Meadow in Pinterest’s security settings to revoke Pinterest’s authorization.
Threads
Meadow connects to a Threads profile through Meta’s official authorization flow.
- Data Meadow accesses
- Threads profile ID, username, profile image and link; publishing quota information; the text, images or videos you submit; container and post IDs, processing status and permalink; and available views, likes, replies, reposts and quotes.
- How Meadow uses it
- To identify the selected profile, validate its current publishing allowance, publish the content you request, confirm delivery and show available post performance.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
Bluesky
Meadow uses AT Protocol OAuth to connect a Bluesky profile without receiving the profile’s password.
- Data Meadow accesses
- Decentralized identifier, handle, profile image and profile link; encrypted OAuth session material; the text, detected links, images, video and alternative text you submit; record URI and published link; and available likes, replies, reposts and quotes.
- How Meadow uses it
- To restore the authorized session, identify the selected profile, upload media, create only the posts you request, confirm delivery and display available post performance.
- Retention and removal
- Meadow keeps the encrypted authorization, selected account identity, delivery records, and available metrics while the connection is active. Disconnecting removes the stored connection data, delivery history, and metrics. Credentials kept only to retry a requested revocation are destroyed within seven days. Your original media and captions remain in your Meadow workspace until you delete them or your Meadow account.
Google Business Profile
Meadow connects to Google Business Profile accounts and locations that the selected Google Account manages.
- Data Meadow accesses
- Business account and location resource IDs and location names; the images, post text, language and schedule you submit; and the returned post ID, status and Google post link. Meadow does not collect retired Google Business Profile local-post analytics.
- How Meadow uses it
- To list eligible locations, publish and schedule the business updates you request, and verify their delivery. This connection does not request Gmail, Drive or Calendar access.
- Retention and removal
- Business routing IDs, location names, authorizations and delivery records remain while the connection is active and are removed when you disconnect. Credentials retained only to retry Google revocation are destroyed within seven days. Original images and text remain until you delete them or your Meadow account.
9. Social platform privacy notices
Each notice describes what Meadow accesses through that platform, how the information supports the features you request, and how to remove the connection. The linked platform policies explain how the platform itself handles information.