Most connections use each platform's official sign-in, so we never see your password. Bluesky uses an app password you can revoke there. Access tokens and app passwords are encrypted with AES-256-GCM, API keys are stored only as hashes, and disconnecting an account wipes its stored tokens.
We are not currently certified against SOC 2 or ISO 27001, and we won't imply otherwise. The security page explains exactly what is in place.
Was this helpful?
Ship on-brand posts in minutes
Back to all FAQsAI content, scheduling, engagement and a full marketing suite — free to start.
Start free
