Privacy Policy

Last updated June 2026

Crosspost, operated by MirrorMagic Games Ltd (Cyprus) ("we", "us"), helps creators compose, generate, schedule, and publish content to social platforms. This policy explains what we collect, why, and your choices. We aim to collect as little as we need to run the service.

Information we collect

Account data - your email address, a chosen display name, a hashed password, and your niche preference.
Content you create - the posts, captions, images, and schedules you make in Crosspost.
Connected accounts - when you connect a social account, we store the access credentials needed to post on your behalf, encrypted at rest. You can disconnect at any time.
Usage data - basic logs (e.g. publish results and errors) needed to operate and debug the service.

How we use your information

To publish and schedule the content you ask us to, to the accounts you connect.
To generate content with AI when you request it (your prompts and source material are sent to our AI providers solely to produce your result).
To secure, maintain, and improve the service.

Sharing

We do not sell your personal data. We share data only with the services needed to run Crosspost: the social platforms you choose to connect and post to; our AI generation providers; our hosting and storage infrastructure. Each receives only what's needed for its function.

Data retention and your rights

We keep your data while your account is active. Under the GDPR you can access, correct, export, and erase your data. In Settings, under Account Security, you can download a copy of your data at any time (the right of access) and delete your account - which permanently erases your workspace and removes its stored media. We also answer any request emailed to privacy@crosspost.media within one month. EU/EEA and UK users hold these rights under the GDPR / UK GDPR.

Security

Connected-account credentials are encrypted at rest, passwords are hashed, and traffic is served over TLS. No system is perfectly secure, but we work to protect your data.

Contact

Questions about privacy, or want your data deleted? Email privacy@crosspost.media. The data controller is MirrorMagic Games Ltd, Cyprus.