Privacy Policy
Effective date: 12 November 2026
1. Who we are
Forge Publisher is run by Ekin Barış Çakır ("we"). Address: Sevgi Mahallesi 665 Sokak 7/6 Gaziemir İzmir Türkiye. Email: marketing@ekinbariscakir.com. We are the controller of the data described here.
2. In short
- Forge Publisher is an internal tool. It connects only to social media accounts we own, and publishes our own content to them.
- It is not offered to the public. No one else signs in, and it collects no data about other people, viewers or followers.
- We keep only what is needed to publish and to see how our posts did: access tokens, the connected account's ID and name, the posts we published, and their statistics.
- We don't sell or share this data, use it for advertising, or use it to train AI.
3. Platforms we connect to
Forge Publisher uses these platforms' official APIs, each under its own terms and privacy policy:
- YouTube (YouTube API Services, Google) — YouTube Terms of Service, Google Privacy Policy
- TikTok (Content Posting API, Login Kit) — TikTok Privacy Policy
- Pinterest (Pinterest API) — Pinterest Privacy Policy
- Instagram (Instagram API, Meta) — Meta Privacy Policy
4. What we access, and why
When an account owner (us) connects an account, the platform asks for permission and gives Forge Publisher an access token. With it, Forge Publisher:
- Reads the account's basic profile: account ID, username and display name, to know which account it is posting to.
- Uploads content: videos, images, titles, captions and links that we created, to that account only.
- Reads statistics of our own posts: for example views, likes, saves, shares and link clicks, to measure which content works.
It does not access private messages, contacts, followers' personal data, other people's accounts, or any data not listed above.
5. Where data is stored
- Access tokens are stored encrypted as secrets in our private build system (GitHub Actions secrets) and are used only by the publishing job. They are never published or written to logs.
- Post records and statistics (post ID, date, platform, and the numbers above) are stored in a private repository we control.
- No cookies or trackers: Forge Publisher has no public interface.
6. Sharing
We don't share data obtained through these APIs with anyone. Data goes only between Forge Publisher and the platform it came from. Our service providers (GitHub for storage and running the job) process it on our behalf.
7. Retention and deletion
- Access tokens are kept while an account is connected and deleted when we disconnect it.
- Post statistics are kept as long as they are useful for our marketing, and at most 3 years.
- Data received from YouTube API Services is refreshed or deleted as YouTube's developer policies require.
8. Revoking access and data deletion
An account owner can revoke Forge Publisher's access at any time:
- Google / YouTube: Google Account → Security → Third-party connections (also https://security.google.com/settings/security/permissions)
- TikTok: TikTok app → Settings and privacy → Security → Manage app permissions
- Pinterest: Pinterest settings → Security and logins → Apps
- Instagram / Meta: Instagram settings → Website permissions → Apps and websites
To have all data Forge Publisher holds about an account deleted, email marketing@ekinbariscakir.com with the platform and account name. We delete it within 30 days and confirm by email.
9. Security
Connections are encrypted (HTTPS). Tokens are stored encrypted and only the publishing job can read them. If a breach happens, we'll notify as the law requires.
10. Changes
If we change this policy, we'll update its date on this page.
11. Contact
marketing@ekinbariscakir.com · Sevgi Mahallesi 665 Sokak 7/6 Gaziemir İzmir Türkiye