Guidelines & Compliance
Last updated: October 2026
This page describes the concrete technical measures SocialsGenie takes to respect each connected platform's developer policies and posting guidelines, and how we safeguard your accounts and data. It documents how our integration is built to comply — it is not a claim of certification, partnership, or endorsement by any platform.
1. Cross-platform commitments
These apply to every network we publish to:
- Official APIs only. We publish exclusively through each platform's official API. We do not scrape, automate the web UI, or use unofficial endpoints.
- You are always in control. A post is published only after you create it or approve it. Posts you write are published when you publish or schedule them. Content libraries publish approved posts automatically on the weekly schedule you set, and only after you turn on auto-scheduling for that library on a consent screen that names every platform it will post to. See section 5.
- Least-privilege access. We request the minimum OAuth scopes required to publish and read basic account info on your behalf.
- Encrypted credentials. Your OAuth tokens are encrypted at rest and never exposed to the browser or third parties.
- Revocable any time. You can disconnect any account or delete your data from Settings, and we honor platforms' deauthorize and data-deletion callbacks.
- Rate-limit aware. We respect each platform's published rate limits and media requirements rather than retrying blindly.
2. Meta — Facebook & Instagram
We operate within Meta's Platform Terms and Developer Policies:
- We use the official Meta Graph API (v23) and keep the version current as Meta deprecates older ones.
- We publish only to Facebook Pages and Instagram Business/Creator accounts you connect and authorize, using the Page-token model.
- Instagram media validation: before publishing we check that media is served over HTTPS and uses a supported format (JPEG images, MP4/MOV video), and we enforce Instagram's caption, hashtag, mention and carousel limits. Meta validates file size and aspect ratio when it fetches the media, and any rejection is shown to you.
- Publishing rate limit: we check the account's content-publishing usage and respect Instagram's limit of 100 API-published posts per rolling 24 hours.
- We request only the permissions needed to publish and read engagement (e.g.
pages_manage_posts, instagram_content_publish). - We implement Meta's Deauthorize and Data Deletion callbacks for Facebook, Instagram and Threads: removing the app erases the stored access tokens and disconnects the account. A data-deletion request erases the access tokens, deletes the connection and its account analytics, and removes the Meta post IDs, post insights and publishing records from your posts on that platform. Your own post text and media stay in your account, and you can check the request on a status page.
3. TikTok
We follow TikTok's Content Sharing Guidelines and use the official Content Posting API:
- You choose each post's privacy level before publishing, from the options TikTok reports as available for your account.
- Commercial-content disclosure: when you mark a post as commercial content, we require the appropriate disclosure (your own brand and/or branded content), matching TikTok's requirements.
- We enforce TikTok's disallowed combinations — for example, branded content cannot be posted as private.
- We surface creator information from TikTok (such as who can view a post and duration limits) and respect those constraints.
- We publish only after your explicit confirmation in the composer.
4. Other platforms
The same cross-platform commitments above apply to every other network we support. For each, we use the official API, request minimal scopes, respect rate limits and media rules, attribute content correctly, and publish only posts you created or approved:
- X (Twitter) — official v2 API; automatic token refresh; media uploaded via the official endpoints.
- LinkedIn — posts to your own member profile via the official Posts API (Share on LinkedIn). Posting to a Company Page is offered only when our LinkedIn Community Management API access is enabled, and only to pages where you hold an approved posting role.
- Threads — posts via the official Threads API to the profile you authorize.
- Bluesky — posts via the AT Protocol using your authenticated session.
- Mastodon — posts to your instance via the official API using a token scoped to your account.
Coming soon: Pinterest, YouTube and Reddit. We do not publish to these platforms yet; this page will describe each integration when it launches.
5. Libraries, AI-written posts and disclosure
- AI-written posts need your approval. Posts our AI writes for a content library start in an “Awaiting approval” list that shows the exact text and media each platform will receive. Nothing AI-written is scheduled until you approve it, and if AI changes an approved post again, it goes back for approval.
- Auto-scheduling is opt-in, per library. Before a library publishes on its own, you confirm on a one-time screen which platforms it will post to and that only approved posts will publish. Adding a platform later asks you again. Connecting an account alone never turns on automatic posting.
- X: X's automation rules apply to scheduled posting. When you connect X and when you turn on a library that posts to X, we explain that X may require the “Automated” account label. When a post includes AI-generated media, we mark it as made with AI through X's API.
- Mastodon: each server sets its own rules, and some, including mastodon.social, require disclosing AI use. AI-written Mastodon posts end with a short “— AI-assisted” note by default, which you can turn off in your account settings. When you connect Mastodon we point you to your server's rules.
- Instagram: AI-written posts and posts with AI-generated media are published with Instagram's AI-disclosure flag.